Hi @davidr11, thanks for getting in touch!
I see that you’re aware that attack rates can indeed sometimes increase without a correlation between visibility of your site, for example on search engines, or even whether a specific vulnerablity is being attempted on your site’s configuration. I do understand that it can be concerning to see though.
If you could run a new scan and send a copy of your site diagnostics to wftest @ wordfence . com, I’d be more than happy to take a quick look for anything standing out as an issue. You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email
If the increased rates are being successfully dealt with by Wordfence and are not resulting in downtime for your site, you could change your email alert preferences to receive less notifications of this type. I would however keep the following active for security reasons:
Email Alert Preferences Screenshot
- Email me if Wordfence is deactivated
- Alert me with scan results of this severity level or greater: Critical or High
- Alert me when someone with administrator access signs in & Only alerts me when that administrator signs in from a new device or location
Once again these are just a suggestion, you can choose what settings fit best for you. Keep in mind by deactivating these notifications, you may be lowering your ability to quickly react to an attack or vulnerability.
You can also manage your alerts via Wordfence Central:
https://www.wordfence.com/help/central/settings/
Thanks,
Peter.
Thanks for reaching out. An increased attack rate would happen for one primary reason – attackers are more active. Most likely, a bot is running a script against your site to see if they could find a security hole. Since all of the requests were blocked, there is nothing you need to do. The emails are just letting you know that Wordfence is taking care of it.
You can also disable this email if you want since there is no action you need to take when attacks increase. It’s more of a notification for people who may want to dig further. But that would be more out of curiously that necessity. If you want to disable the option, it’s called “Alert me when there’s a large increase in attacks detected on my site” and you can find it by searching at the top of the Wordfence “All Options” page.
Unfortunately, large attack rates is an everyday occurrence on WordPress sites. That is, of course, precisely why developed Wordfence.
If you have any other questions or concerns, just let me know.
Thanks for the reply. I’m sure you get this question a lot, and I appreciate your taking the time to answer me.
