WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support

Hi Asle,

Thanks for the info. I will pass this on to the development team.

Hello,
thank you. I have asked service provider and I have the mysqli plugin.
Regards,

the 'top consumers' was very very useful! where is it now? it seems to me you removed it. I can't think of any reason why you do that. I was always watching it and blocking the ones who were consuming too much.
how can I do that now?

thanks

https://wordpress.org/plugins/wordfence/

This is happening daily now.

OK, this seems to have yielded some clues. Here are the last couple of lines from the activity log, after enabling debug mode:

[May 25 10:43:43:1464198223.605228:4:info] Scan process ended after forking.
[May 25 10:43:43:1464198223.604270:4:error] gzinflate(): data error (2) File: /home/{my user name}/{my domain name}/wp-includes/class-wp-http-encoding.php Line: 58

I got this same error message about gzinflate() (for the same file) four times (separated by many other lines in the log each time) before it finally gave up.

Does that give you any ideas?

Thanks!

Hi mountainguy2,

I would say that the Wordfence scan itself is mainly reactive. But the Wordfence team is very proactive! We are constantly looking for vulnerabilities throughout all wordpress plugins and themes. The Wordfence team finds many vulnerabilities before anyone else! And since the scan is actually connecting to the Wordfence servers to retrieve malware patterns, I would say there is a very proactive element to it.

You can check out the blog to see some examples of vulnerabilities the team finds.

https://www.wordfence.com/blog/

That sounds like a content scraper bot looking to steal your feed, key is to look at the source IP for the hits and evaluate. Also look for any other commonalities, such as them all coming from the same referrer. Sometimes they're all from the same country for example, and you can just country block, or sometimes the hits are all from just a few IP numbers and you can just manually block those. If you have server with good bandwidth you can absorb these sorts of attacks to some extent. It's not something to panic about unless it's acting as a defacto DOS attack because your server can't handle all the hits. MTN

Ok, thanks for the answer. MTN

I need to test to confirm, but I believe these hits area actually a Broken Link checker plugin. That would make sense - I think I may have activated it the night before I noticed the 'odd' traffic.

Little bit of a face palming going on here.

Hello,

I am having the same problem.

"Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 9675893 bytes) in /home/content/p3pnexwpnas08_data02/47/3195347/html/wp-includes/wp-db.php on line 1255"

My web host GoDaddy increase my memory limit. But the problem persists.

Best,
Tumikia

Not sure why I came up with Norway back when I wrote that comment, sorry about that, could have been my own confusion. MTN

I'm getting a lot of gzinflate errors from wordfence.

I enabled debugging and found that during a scan i got 3 of these errors, then the scan eventually hung.

[May 25 15:01:08:1464202868.391574:4:error] gzinflate(): data error (2) File: /home/xxxxxxxx/public_html/wp-includes/class-wp-http-encoding.php Line: 58

https://wordpress.org/plugins/wordfence/

I am also getting these errors while viewing other pages. I am able to see them with Query Monitor.

Thanks

So this is unrelated to the Firewall?

And when is that file created? Because it was deleted and then it was auto created again.

Thank you
John-Pierre

Hi,
wordfence is generating a URL who make broke the SSL if SSL are not forced on all website.

I need a fix for this issue.
There is the screenshot:

Please help me to FIX

This url should start with // and not with http://
https://wordpress.org/plugins/wordfence/

@WFSupport you suggested I should open my own post - I don't know what that means, or how to do that?

You also asked me to answer "the questions below," but I don't see any questions?

Please advise.

Hello,

Do these need attention?

Warning: include(): Filename cannot be empty
wp-content/plugins/wordfence/lib/wordfenceClass.php 4497 2016-05-25 19:42:48 (1)

Warning: include(): Failed opening '' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php')
wp-content/plugins/wordfence/lib/wordfenceClass.php 4497 2016-05-25 19:42:48 (1)

https://wordpress.org/plugins/wordfence/

Yep, that was it.

I am getting this message

Warning: Error while sending QUERY packet. PID=120235 in /home/rising47/public_html/neanchors.com/wp-includes/wp-db.php on line 1811 0

Live traffic just saw googles bot but not... the 5 times the page has been accessed in the last minute.

My host logs are showing Cloudflare's IP. Obviously it's not them. Yes, i have cloudflare's plugin on

https://wordpress.org/plugins/wordfence/

I installed the plugin and activated it. I see it via ftp, but not in the wordpress admin. I fI try to install again it shows as already installed.

https://wordpress.org/plugins/wordfence/

wflandon on "[Plugin: Wordfence Security] Wordfence not scanning malware?"

zmtgf on "[Plugin: Wordfence Security] Fatal error: Allowed memory size with latest update"

dreamsoft on "[Plugin: Wordfence Security] where did the 'top consumers' disappear?"

stjennifer on "[Plugin: Wordfence Security] Caching problems"

TheRealMikeD on "[Plugin: Wordfence Security] Wordfence Scan Never Completes"

wflandon on "[Plugin: Wordfence Security] What, exactly, is a "Scan" ? Does it really have any use?"

mountainguy2 on "[Plugin: Wordfence Security] Does WordFence stop attacks that try to open non-existent pages?"

mountainguy2 on "[Plugin: Wordfence Security] What, exactly, is a "Scan" ? Does it really have any use?"

kanonen80 on "[Plugin: Wordfence Security] Live Traffic displaying my Server's IP"

Tumikia on "[Plugin: Wordfence Security] Fatal error: Allowed memory size with latest update"

mountainguy2 on "[Plugin: Wordfence Security] False Positive block on Google?"

derekakelly on "[Plugin: Wordfence Security] gzinflate errors"

derekakelly on "[Plugin: Wordfence Security] gzinflate errors"

John-Pierre Cornelissen on "[Plugin: Wordfence Security] Images not displayed due to .htaccess in /wp-content/uploads"

peopleinside on "[Plugin: Wordfence Security] Mixed content break my SSL"

JuliaKline on "[Plugin: Wordfence Security] Scan not performing"

SooBahkDo on "[Plugin: Wordfence Security] Debug Errors"

kanonen80 on "[Plugin: Wordfence Security] Live Traffic displaying my Server's IP"

tommarino on "[Plugin: Wordfence Security] Under attack no live traffic"

winterstreet on "[Plugin: Wordfence Security] Plugin missing in list of plugins"