WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support

Seeing something odd under Other Options - Whitelisted IP addresses.

The normal entries appear to be: 198.61.176.9,198.61.173.69,23.253.56.59,23.253.62.185 however lately we're seeing multiple (sometimes hundreds)of entries like this appended to that line: Array,Array,Array,Array etc.

Problem is when the Array directive is included dozens or hundreds of times the Wordfence save function pops up a window showing an error occurred and the settings can't be saved.

Please make sure you separate your IP addresses with commas. The following whitelisted IP addresses are invalid: Array, Array, Array, Array, Array, Array

Anyone else seeing this or have an idea how to solve?

Thank you.

https://wordpress.org/plugins/wordfence/

Hello,
Sorry about that but now this is what I get when I clic "Restore the original version of this file" in response to a wordfence issue :

An error occurred
We could not get the original file to do a repair.

This concern for example "wp-content/plugins/wysija-newsletters/js/tinymce_init.js"

(Note, this topic is noted "RESOLVED". I not agree.)

After my recent issue with the server hack, I did some security hardening, changed passwords, resalted, etc. I removed, through the dashboard, old themes and plugins that aren't used. Suddenly, 2 of my sites went to white pages or error pages and I lost access. I rechecked the wp-configs and database passwords (the hosting service did database maintenance and updated database passwords without telling me) and when the sites came back online, both had to go through at least a partial "setup wizard" to get them back online. I had to reinstall or reenable some plugins and had to put the purchased keys back into Wordfence. Since then, Wordfence on at least one of these sites shows me no Live Activity on any tab except my own login/out activity. It sends me alerts on bad username attempts, login activity. It appears to be scanning properly. I turned off and back on the life activity, disabled/reenabled the first 6 settings in options. Nothing resolved it.

https://wordpress.org/plugins/wordfence/

I have a number of websites where I have both Wordfence and AIOWP installed. All sites have the same email for notifications and db backup and this email was created solely for this purpose and used for nothing else. This email address is not used anywhere else on the site or in the code except in Wordfence and AIOWP. I don't even use it in WP Settings. I have been going along merrily for many months/year without concern. Within last week or so I have been inundated with spam only on this email address non stop 25-50 per day. I went in and turned off all notification and/or changed email address to a@b.com -- guess what next day spam went from 35-50 down to 2 and today I haven't received any. Huh. Is it possible that someone has figured out how to mine the email address or use the notification system to send spam to the email address listed. Just thought you should know. I will try experimenting by removing one or the other and re-assigning email notification to see if I can narrow down more.

https://wordpress.org/plugins/wordfence/

Hi,

This issue is now fixed. Please check your system and verify that for me if you can.

Our systems were out of sync due to a recent system-wide upgrade in our data center. This has now been resolved and we've taken steps to prevent it from reoccurring in future.

Thanks for the report and for your patience.

Regards,

Mark.

Hi,

This issue is now fixed. Please check your system and verify that for me if you can.

Our systems were out of sync due to a recent system-wide upgrade in our data center. This has now been resolved and we've taken steps to prevent it from reoccurring in future.

Thanks for the report and for your patience.

tim

hi,

Let me know what you find. That is very interesting. I get very little spam to mine.

tim

I'm not sure the cause but I'm concerned that there are all those entries added (presumably without you doing it?) to the whitelisted IP addresses. When you run a scan, what does it find?

tim

@Grey

Did you completely remove Wordfence and reinstall with a fresh copy> via ftp?

tim

Thanks Tim.

Scan doesn't appear to show anything relevant. I am seeing this issue on multiple sites however. Might try an uninstall/re-install just for grins.

Maybe Mark would have an idea about it?

I don't remember. I don't think so.

I'm thinking that might be a good option especially since you were hacked and can't get the scan to work.

tim

I'll ask the dev guys for any thoughts, but when we get into ip addresses just showing up in the whitelist I get a little paranoid and want to make sure my security stuff is uncorrupted.

tim

Hey

There was a server error that was causing this. We fixed it earlier today. Can you try a new scan and let me know the results?

tim

Here's the link for all our versions https://wordpress.org/plugins/wordfence/developers/

Please test 5.2.6 and let me know if you have the same results

tim

On the options page is "Alert me when someone with administrator access signs in" checked?

tim

How do we prevent you from using Aweber? How do we provide wrong information to facebook? Please provide some evidence to support that so we can help.

tim

We probably need you to enable your java console on your local computer.

(here's how just in case:
https://www.java.com/en/download/help/javaconsole.xml )

The page may be loading just the tabs and java is halted. In the console you will likely see a red error message showing what is hanging up. Let me know what that says.

tim

I haven't seen anything like that before and if people are having that problem, they haven't reported it here or the premium system. I'd ask your hosting provider to check error logs to see if there is anything there pertaining to the plugin you use for seo.

tim

I can confirm that the error is not being reproduced on my end anymore. Good work Tim.

swedeman on "[Plugin: Wordfence Security] Whitelisted IPs and Array entries?"

zampai on "[Plugin: Wordfence Security] WordFence API error and Modified plugin file message"

GreywolfComputer on "[Plugin: Wordfence Security] Live Activity Not Updating"

bcwlaw on "[Plugin: Wordfence Security] Wordfence/AIOWP notification email being hacked and spammed"

Wordfence on "[Plugin: Wordfence Security] WordFence API error and Modified plugin file message"

WFSupport on "[Plugin: Wordfence Security] WordFence API error: An error occured trying to open the requested file."

WFSupport on "[Plugin: Wordfence Security] Wordfence/AIOWP notification email being hacked and spammed"

WFSupport on "[Plugin: Wordfence Security] Whitelisted IPs and Array entries?"

WFSupport on "[Plugin: Wordfence Security] Live Activity Not Updating"

swedeman on "[Plugin: Wordfence Security] Whitelisted IPs and Array entries?"

GreywolfComputer on "[Plugin: Wordfence Security] Live Activity Not Updating"

WFSupport on "[Plugin: Wordfence Security] Live Activity Not Updating"

WFSupport on "[Plugin: Wordfence Security] Whitelisted IPs and Array entries?"

WFSupport on "[Plugin: Wordfence Security] Keep getting api errors when trying to view files that were modified"

WFSupport on "[Plugin: Wordfence Security] 5.2.7 breaks login"

WFSupport on "[Plugin: Wordfence Security] Whitelist to bypass all rules"

WFSupport on "[Plugin: Wordfence Security] Wordfence firewall prevent me from using Aweber blog broadcast"

WFSupport on "[Plugin: Wordfence Security] Wordfence, Block IP Address not working"

WFSupport on "[Plugin: Wordfence Security] Wordfence Hacked?"

remymedranda on "[Plugin: Wordfence Security] Keep getting api errors when trying to view files that were modified"