Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33134 articles
Browse latest View live

Scan fails – Wrong address/IP

$
0
0

Replies: 0

I just installed Wordfence and wanted to do a first scan – fail. There is a help page presenting things to try. Nothing worked.
Wordfence apparently tries to connect to the wrong address/IP. Where does the IP come from and how can I fix this?

There are various IP options in the settings, but none gives a correct one, and none gives the one that’s actually used …

This is a multisite, Wordfence network activated.


Wordfence Central and Cloudflare

$
0
0

Replies: 1

Trying to test out Wordfence Central. We’re using Cloudflare for our site and have followed the instructions for adding the firewall rule. We added the IP: 54.68.32.247
Cloudflare firewall logs are showing that IP being allowed.
We have never had this site in WF Central.
We still get the error message that we can’t add the site because Cloudflare is blocking.
We logged out and back in, trying to add it again, and still no change.
We also flushed Cloudflare’s cache.
Please advise.

Feature request – Rate Limiting bingbot crawler exception like google

$
0
0

Replies: 0

It has been over a year on the following request: Other request
I think this is a long overdue feature request.

All I can do for now is treat Google like any other Crawler.

How to verify a bingbot crawler

Wordfence warning on WordPress Installation

$
0
0

Replies: 0

Dear,

I’ve just run a scan from Wordfence and they’re saying that there is an issue with my WordPress installation. I’m not sure to understand fully what they mean by that. Could you maybe help me on this?

Thanks

[FEB 16 20:25:04] Warning: Attempt to assign property 'external' of non-object in /home/customer/www/DOMAIN/public_html/wp-admin/includes/plugin-install.php on line 219 0

Scan Failed The current scan looks like it has failed.

$
0
0

Replies: 0

Scan Failed
message : The current scan looks like it has failed. Its last status update was xx minutes ago.

I cannot complete a Wordfence scan. I am using WP5.3.2 and wordfence 7.4.6. php7.2
I have four websites on the same server and they all have the same problem.
I deleted the plugin and its data and tables and re-installed
I changed the max execution time to 15 seconds as advised by my hosting and turned off low-usage-resources in wordfence options
the scan keeps stopping, in different places when I change options for what is/is not scanned
When the scan stopped on a plugin I deleted the plugin and it would stop at another.
I have used debug , and it stops on different files all the time.
Please help as I have reviewed many of the other topics and tried everything – I think.
It did complete once but then the next time (without making changes to any settings ) it failed with the same error again.

2FA does not work when recaptcha is on

$
0
0

Replies: 0

Hi,

I have enabled 2FA and recaptcha on a website (not multisite).
When I try to log in, I am not taken to the 2FA code input, instead I get an error that I need to input the 2FA when asked.

I know I can put a space after my password and place the 2FA code there but that does not work for most users who have a difficult enough time typing in their passwords.

High resource usage on the server when opening the panel

$
0
0

Replies: 0

Hello good day.

I would like to know if there is any way to “limit” the use of the system on my server.

I noticed that when I access the “Central” panel, my server goes to peak usage.

I believe that by having more than 100 registered sites.

It would be cool to limit.
Example: 10 websites at a time or something

Wordfence and WP Staging

$
0
0

Replies: 0

Hi there,

I was wondering what the best setup of Wordfence would be in conjunction with WP Staging Pro.

I use WP Staging Pro to create staging and development copies in subfolder, like domain.tld/staging/ and domain.tld/dev/.

Should I install Wordfence on each of these installs or online on the main install and then use ‘Scan files outside your WordPress installation’ in the scan options?

When setting up the ‘Optimize Wordfence Firewall’ I saw this warning: ‘If you have separate WordPress installations with Wordfence installed within a subdirectory of this site, it is recommended that you perform the Firewall installation procedure on those sites before this one.’ so that got me wondering what the best setup would be.

The staging websites are behind a password protected login by the way…

Hope you can give me some advice.

Kind regards,
Menno


Immediately lock out invalid usernames

$
0
0

Replies: 0

Hi I have enabled this feature. It worked well until a few days ago.

But it is not working right now and there is a lot of attack on my site.

When I test myself, I am immediately blocked but those who attack are not blocked.

They all come from one type of operating system and a lot of ip attacks

Mozilla / 5.0 (X11; Ubuntu; Linux x86_64; rv: 62.0) Gecko / 20100101 Firefox / 62.0

How to block a range of IP addresses

$
0
0

Replies: 0

I woulod like to block (for example) IPs from

5.157.15.000

to

5.157.15.999

What is the proper format to enter this?

Thanks!

Customers unable to login and getting blocked

$
0
0

Replies: 1

I have a number of customers complaining they cannot login to their accounts when checking out and instead get greeted by a WordFence page telling them they’ve been locked out.

I currently have them log out after 5 login failures, lock out after five forget password attempts, count failures after four hours, and lock them out for two days.

I also block anyone whose requests equal 240 per minute, if crawlers page views equals 240, if crawlers 404s exceed 60 per minute, if a humans page views equal 240 per minute, and if a human’s 404s exceed 120 per minute.

Not sure if any of that can help, but I need to figure out why customers can’t login.

I did try logging in as one if the problematic customers, but was successful.

Uncaught ArgumentCountError

$
0
0

Replies: 0

Hi

I am repeatedly getting this error in my php_error log:

An error of type E_ERROR was caused in line 3766 of the file …/wp-content/plugins/wordfence/lib/wordfenceClass.php. Error message: Uncaught ArgumentCountError: Too few arguments to function wordfence::wordfenceStartScheduledScan(), 0 passed in …/wp-includes/class-wp-hook.php on line 288 and exactly 1 expected in …/wp-content/plugins/wordfence/lib/wordfenceClass.php:3766

Can you help please? I have tried logging out and in again as was suggested here: https://wordpress.org/support/topic/scan-results-and-other-screen-not-updating/

but that didn’t help.

This problem does not crash the site but it has been going on for quite a long time. I tried uninstalling and re-installed Wordfence but that didn’t help either.

Do you have any tips please?

best wishes

WordFence blocking people for visiting pages calling them “banned URLs”

$
0
0

Replies: 0

I recently had a client contact me very upset because several of her clients were getting messages that they had been blocked from viewing the site. The only thing I’m seeing in the logs that looks off is a TON of blocks due to “Accessed a banned url” but the URLs being visited are legitimate pages on our site – including the ROOT. I don’t have any banned URLs set, and previously, the only one I had was a system file no one should be visiting…no wildcards, so really unless they were visiting that specific file, there should have been no one, not even a bot, blocked for a “banned” URL.

How do I prevent this in the future? Surely it shouldn’t be applying that rule if I don’t have any bannedURLs in my options.

I have a screenshot of one of the IPs. Granted it appears to be a search engine bot, BUT the specific reason listed for it being blocked has to do with the URLs it visited, which were actual pages on our site!

Manual Scan Works, Scheduled Scans do Not!

$
0
0

Replies: 0

We have no issues or errors running manual scans, but when the system tries to do a scheduled scan, it gives the error:

“Scan Engine Error: The signature on the request to start a scan is invalid. Please try again”

YES we tried disabling all plugins and then enabling one at time. No change.
The site is pretty much setup as it has been for 2 years without issues

Sid B.

http protocol in stead of https – Acitivity e-mail

$
0
0

Replies: 0

Hi there,

I installed the Wordfence plugin on several websites.

Reading more carefully the Wordfence activity e-mails where it’s written:”This email was sent from your website https://domain.com […]” I noticed that for some websites the URL is correct and it follows the https protocol (https://domain.com), while for a few websites the URL shows the http protocol (http://domain.com).
This second case is uncorrect infact all my websites follow the https protocol.
I would like to know:
1) how can I correct the url for the http protocol making them with the https protocol for every website
2) if the setting with of url with the http protocol may cause any compatibility problem with the plugin.

I would also like to know if there is a way to activate alert emails for the Author login receiving the same emails that I receive when an Admin logins.

Looking forward to hearing from you soon!


Posts from majesticwholesalejersey are being created on our site

$
0
0

Replies: 0

Hello,

We always get some random posts being created by http://www.majesticwholesalejerseys.com/ .

We installed the Free WordFence plugin and ran a scan on our website. Then we found the above URL’s posts on our site. We found that WordFence has blaklisted this site.

Could you please let us know how we can stop those posts being created?

array_key_exists() error log

$
0
0

Replies: 0

First off, we have Wordfence Premium on 3 different sites so I don’t know why whenever I login to your Premium Support, it says “Unfortunately, Premium Support is only available to paying customers blah blah blah…”. Fix that!

For a while now I’ve been waiting for you guys to fix a new bug that has been introduced by one of your recent updates to Wordfence. But it seems that you can’t fix it on your own so here’s some help:

[03-Feb-2020 14:10:08 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[07-Feb-2020 02:00:04 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[09-Feb-2020 09:20:09 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[10-Feb-2020 07:00:09 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[10-Feb-2020 13:50:07 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[13-Feb-2020 08:37:23 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[18-Feb-2020 11:45:07 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283
[18-Feb-2020 11:45:08 UTC] PHP Warning:  array_key_exists() expects parameter 2 to be array, null given in /home/username/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 283

That has been showing up in my error_log every other day as you can see and it is driving me nuts. Please fix ASAP!

Wordfence timeout

$
0
0

Replies: 0

Wordfence insists on scanning the entire service and its 200,000 files, rather than restricting its scan to just my website. Am I not doing something right? Is there any way to get Wordfence to stick to a single website? If so, please tell me how to accomplish it.
Thank you.

Wordfence timeout

$
0
0

Replies: 0

Wordfence insists on scanning the entire server and its 200,000 files, rather than restricting its scan to just my website. Am I not doing something right? Is there any way to get Wordfence to stick to a single website? If so, please tell me how to accomplish it.
Thank you.

WP Dashboard

$
0
0

Replies: 0

First of all, love the plugin!

Secondly, since yesterday Wordfence isn’t shown on WordPress’s Dashboard anymore for some reason.
If I go through which blocks I can make visible under “display settings” (sorry my site is in another language, translation mostlikely not correct), Wordfence isn’t amongst them anymore.

Wordfence still works splendidly, though I do wonder how I can add it to WP’s dashboard again, as it’s an easy representation of who’s trying to access our website.

Regards

Viewing all 33134 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>