Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33243 articles
Browse latest View live
↧

Blocked IPs Filter and quick load

November 23, 2016, 4:53 pm
$
0
0

Replies: 0

With the blocked IP list growing each day and a long page load often driving a site into melt-down (as access stats get updated) could you consider changing the “Blocked IPS” page load logic to only list those IPS just added… with user option to toggle “all” as a second step.

That way we can switch to the page to block recently added IPS as a priority view/action.

Then choose [view all] to see all blocked IPS… with usual access refresh.

Suggestion 2:

Add filters to see blocked IPS by country and by last access date (today, this week, this month, 3 months, 6 months, this year, older)

  • This topic was modified 11 hours, 42 minutes ago by  snaphappyme.
↧
Search

Firewall no longer working – how to fix?

November 23, 2016, 5:29 pm
$
0
0

Replies: 0

Since Wf Firewall was first introduced (BIG thank-you to Wf team!) it has been protecting my three small sites… but now I discover Firewall NOT working anymore on two sites! Third site okay.

Wf shows: “We were unable to write to ~/wp-content/wflogs/ which the WAF uses for storage. Please update permissions on the parent directory so the web server can write to it.”

Permissions for /wflogs remain the same on all three sites: drwxr-xr-x

Previously firewall worked okay with these permissions on all sites. Now one site still okay with these permissions. Two sites firewall not working with these permissions.

So I tried changing /wflogs to drwxrwxrwx but that did not fix the firewall problem. Same message: “We were unable to write…”

Next try: From Wp dashboard I deleted Wordfence and re-installed it. Wf activated fine. BUT no Firewall. Same message “We were unable to write…”

I am very worried that Wf Firewall is no longer working. How can I fix this please?

↧
↧

firewall on basic only

November 23, 2016, 8:15 pm
$
0
0

Replies: 0

TRying ot get it to update so it’s not on basic….

The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page.

I use php-fpm – FastCGI Process Manager

Is it compatible?

↧

Coexistence between wordfence and Easy rotator

November 24, 2016, 1:31 am
$
0
0

Replies: 0

hi all,

Last week I experienced a problem when editing and uploading a slider created with Easy Rotator plugin.
After a lot of turns I came to the DWuser team to conclude that if I turned off wordfence while the slider was up, the problem was over.
Now I would like to know if there is any way I do not have to be activating / deactivating wordfence every time I upload a slider to my page …

a cordial greeting,

Guille

↧

?req=echo__FILE__

November 24, 2016, 1:31 am
$
0
0

Replies: 0

In LiveTraffic I found a crawler from a bulgarian IP requesting:

http://www.mydomain.com/?req=echo%20__FILE__%3B

Wordfence did not consider this a menace, but what were they trying to do? I must say this URL does not generate any 404 on my website, the page is loaded as always

↧
↧

Block network Firewall not active

November 24, 2016, 3:37 am
$
0
0

Replies: 0

Hi, does a network gets blocked after a click on “block this network” or is it required to have the firewall active afterwards?

↧

Display of Tables into “diagnostic” x-overflow:truncated

November 25, 2016, 4:59 am
$
0
0

Replies: 0

Hi,

I found that the display for “diagnostic” for the section “Tables” (which is wider than the others) the content is truncated on his right, this comes from the style of the div :

<div style="max-width: 100%; overflow: auto; padding: 1px;">
<table class="wf-table">

Which should be :
<div style="max-width: 100%; overflow: none; padding: 1px;">
<table class="wf-table">

Best regards

Trebly

↧

Found a bug !

November 25, 2016, 6:06 am
$
0
0

Replies: 0

[Fri Nov 25 11:53:29.735410 2016] [lsapi:notice] [pid 799774:tid 140112172128000] [client …..:35319] [host ….] Backend log: PHP Notice: Undefined offset: 9 in /home/…/wp-content/plugins/wordfence/lib/wordfenceClass.php on line 6447\n, referer: …/?wordfence_syncAttackData=1480071209.0385

↧
Search

Ignore GoogleBot

November 25, 2016, 8:30 am
$
0
0

Replies: 0

How do I ignore certain types of traffic from Live Traffic view? I want to ignore googlbot and some monitoring services. I read your FAQ but it doesn’t give a solution for ignoring traffic that has a changing IP and undefined browser. Is it possible to ignore from a URL? Other solution? Ignore by hostname?

I tried ignoring browser type “undefined” but it dosent work.

  • This topic was modified 1 day, 20 hours ago by  miclovin.
↧
↧

Wordfence making too many requests to wp-admin/admin-ajax.php

November 25, 2016, 12:49 pm
$
0
0

Replies: 0

My current hosting provider is complaining that my wordfence is doing to many requests to /wp-admin/admin-ajax.php
and that is overloading the server CPU (I’m in shared server)
This is the offending line:
Request: “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.1”

Is there any way to limit wordfence to hitting the Ajax?

↧

blocked by Wordfence Security Network

November 25, 2016, 7:57 pm
$
0
0

Replies: 1

I have something popping up in my logs, trying to determine if its an attack or just random scanning for vulnerabilities. Appears once an hour. Below is an example, all from amazonaws.com variating from ashburn to boardman. Dashed out the site name.

United States Boardman, United States was blocked by Wordfence Security Network at http://—————–/wp-login.php
11/25/2016 6:04:54 PM (4 hours 47 mins ago) IP: 54.212.247.166 [block] Hostname: ec2-54-212-247-166.us-west-2.compute.amazonaws.com
Browser: Firefox version 31.0 running on Win8
Mozilla/5.0 (Windows NT 6.2; rv:31.0) Gecko/20100101 Firefox/31.0

↧

Wordfence on WAMP Server Fail

November 25, 2016, 9:47 pm
$
0
0

Replies: 0

I recently set up the WAMP server for local dev. Two of my client sites failed to load, and Chrome was displaying the “Connection Reset” message. My third site on the local dev server loaded just fine as Wordfence was not installed in it.

I’ve read several messages on here about this issue but after hours of testing their suggestions, am unable to find a way to correct it on my server. The local dev server is running under Windows 10 Pro, WP version 4.6.1 and Wordfence is up to date.

If there is a quick and detailed fix for this, I would appreciate help for the issue.

TIA!

  • This topic was modified 1 day, 7 hours ago by  TopDog52.
↧

This is broken: Immediately block IPs that access these URLs

November 26, 2016, 3:05 am
$
0
0

Replies: 0

I’ve added this to the “Immediately block IPs that access these URLs” settings:
/wp-login.php

But it doesn’t work. There are repeated attempts to load this URL, sometimes 20 or 30 from the same IP. Why isn’t the IP getting blocked?

I understand that the URL has to be non-existent for this blocking to work (most unintuitive, BTW!). And this URL is disabled on my site because I use a plugin that gives me a different URL for logging in purposes.

I’ve checked the server header for this wp-login.php page using a third party checking service and it is correctly giving a 404 response.

Why isn’t Wordfence blocking these IPs that are trying to access my non-existent login page?

↧
↧

Renew Credit Card Info

November 26, 2016, 8:31 am
$
0
0

Replies: 1

Hello, I hope someone on here can help me. I have searched for this topic and cannot find any info. My Wordfence API key has expired and I am trying to put in my new credit card information and I cannot find the way to do this. I have looked all over the Wordfence site and there is no info on how to do this. If you can help I would be very grateful.

Thank You

Martha

↧

PHP Fatal error: wfWAFWordPress::runCron()

November 26, 2016, 8:41 am
$
0
0

Replies: 1

The latest update rendered my site completely dead, so I had to manually delete the plugin and all “wf” database tables.

I then tried installing it again, but it just kills the site.

I even tried copying the new htaccess rules from another working site to this broken site, but no luck. I verified the user.ini file exists.

LMK if you have any ideas and I’ll try them.

Thanks for the plugin and hope everyone had a great Thanksgiving!

Rob

Here’s the exact error from the log (I replaced my account name with {site}:
[26-Nov-2016 16:29:11 UTC] PHP Fatal error: wfWAFWordPress::runCron(): The script tried to execute a method or access a property of an incomplete object. Please ensure that the class definition "wfWAFCronFetchIPListEvent" of the object you are trying to operate on was loaded _before_ unserialize() gets called or provide a __autoload() function to load the class definition in /home/{site}/public_html/wp-content/plugins/wordfence/waf/bootstrap.php on line 133

↧
Search

Wordfence Diagnostic – Process Owner Unavailable

November 26, 2016, 10:09 am
$
0
0

Replies: 0

I see “Unavailable” status for “Process Owner” in Wordfence > Diagnostic menu .
What does it mean, How can solve this problem?

thanks for help

↧

Wordfence conflict with other plugins

November 26, 2016, 12:37 pm
$
0
0

Replies: 0

I found an article by Wordfence regarding Plugins that might have issues and solutions to them.
It lists IQ Block country and says:

iQ Block Country Any plugin that uses the GeoIP library or provides geo blocking or geo detection features may have a problem with Wordfence. This includes the plugin “iq-block-country” which can’t run alongside Wordfence.

But it does not list a solution. Could someone explain what the conflict is, please, and if there is a solution?
Thank you!

↧
↧

Where is WP Support page? Is there one?

November 27, 2016, 3:19 pm
$
0
0

Replies: 0

Hi,

Still can’t change my email on the support site. Do we just figure WP doesn’t update?

Scenario:

I click on the link sent to my new email for the support site. (round n round we go)
It states: User updated. (but not)
It also states: There is a pending email address change to (new email)

Sooo I try to change it Again and click “Update Profile” (still doesn’t change to new em)

It’s fine on my website, it just won’t chg on this support site.

  • This topic was modified 13 hours, 52 minutes ago by  hopskip.
↧

Regular Modied File List, Errors or Regular files?

November 27, 2016, 6:57 pm
$
0
0

Replies: 0

hello Author From the date of installation i have been receiving these updates notification regularly.
Are they regular utility updates by wordfence or malicious?

November 27, 2016 8:32am
wp-content/wflogs/attack-data.php
November 27, 2016 8:16am
wp-content/bps-backup/logs/http_error_log.txt
November 27, 2016 8:04am
wp-content/wflogs/config.php
November 26, 2016 9:26am
wp-admin/error_log
November 25, 2016 4:59pm
error_log
November 24, 2016 1:35pm
wp-content/wflogs/wafRules.rules
November 24, 2016 1:35pm
wp-content/wflogs/rules.php
November 24, 2016 1:35pm
wp-content/wflogs/ips.php
November 23, 2016 12:09pm
wp-includes/public_html/wp-content/wflogs
November 23, 2016 12:01pm
wp-content/plugins/updraftplus/vendor/rackspace/php-opencloud/lib/OpenCloud/ObjectStore/Exception/BulkOperationException.php

↧

Scan terminated with error: since last update

November 27, 2016, 8:19 pm
$
0
0

Replies: 0

I’ve been getting this ever since the last plugin update.

“Scan terminated with error: There was an error connecting to the the Wordfence scanning servers: cURL error 28: connect() timed out!”

Everything was fine before the last update.

Anyone else having problems like this? Any possible fix?

No known patterns. It stops at different points within scans.

Thanks

  • This topic was modified 8 hours, 51 minutes ago by  themps.
↧
Viewing all 33243 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>