@grey
Did you completely remove Wordfence and reinstall with a fresh copy> via ftp?
tim
I don’t remember. I don’t think so.
I’m thinking that might be a good option especially since you were hacked and can’t get the scan to work.
tim
The scans work, just not the live activity view. I disabled the plugin, deleted it, then FTP’d the files and activated it again. Will see what happens.
Still not working. I get email alerts to attempted logins/lockouts, but only see my own activity in “all hits” tab and my own administrative logins in logins/logouts tab. Nothing else shows.
So, on the live traffic pages you only see your ip address?
tim
And only the IPs I’ve blocked the last couple of days show in the list.
Can you look on that page with the java console open and see if you see any errors in red?
https://www.java.com/en/download/help/javaconsole.xml
tim
I can’t get the console to open on the page. I can only get it to open on the “Verify Java” screen that is at java.com. I’ve tried with 2 different computers on 2 different versions of windows/java/web browsers. And on different websites.
I just discovered that another of the websites with WordFence stopped updating “Logins/Logouts” tab with failed attempts about 5 days ago. It still shows other hits, but I’m wondering if these two issues are related.
Possibly. I’m wondering if there are an java errors on that page. Were you able to open your java console and see if anything showed up?
If you send me a list of plugins and your theme I can test locally.
tim
I couldn’t get java console to open on the websites. None of them. The only place the java console will open for me is on the java.com verify page.
I did some testing with the first problem and I discovered the reason things changed. The first site was just a basic landing page with a pic of the company building until I put a “maintenance mode” plugin on it so I could build the site. At the moment, I don’t remember the name of the plugin. Then, when I had the problem, I removed all the plugins and testing themes to get things back to minimal, installed the theme I want to use, reinstalled the plugins like Akismet, Jetpack, etc. I had also changed to a different “landing page” using a different maintenance mode plugin from the first one. Apparently, that’s when Wordfence stopped updating. The reason it was still sending me alerts to login attempts via email is they were accessing the page directly, which wasn’t being logged by Wordfence. But, the invalid user/attempt was being caught and the email sent. I removed a deactivated plugin today and a wordpress importer plugin that I don’t remember putting there. (I think it was a godaddy thing) and updated the form plugin that came with the theme. After that, a failed login showed up when I attempted from a location about 30 miles from me. As for the “all hits” in live traffic, it only shows when I turn off this landing page plugin that uses maintenance mode.
I haven’t looked more at the second site, yet.
Interesting. Which maintenance mode plugins were you using?
tim
I believe the first one was Easy Pie Maintenance Mode. The one in place now is Smart Maintenance Mode. The plugins I removed before the logins/logouts started showing failed attempts were the WordPress Importer (I remembered why it was there; I used it to import demo content for the theme) and WordPress Mobile Pack.
I think I have discovered an aspect of this that I hadn’t noticed before. I think the “Logins/Logouts” tab only updating with my username coincides with the time of checking to enable the “Immediately Lockout Invalid Usernames” box. I receive the emails notifying of the lockout, but the visit isn’t in the tab. This appears to be across all sites.
Also, I THINK, but not 100% sure, that the checkbox might be getting cleared during 1 or more updates to the plugin. I was reasonably certain I had all of the sites set with that option and I have had to reset it on 2 sites.
