Wordfence Security – Your DNS Records Have Changed

  • Resolved pbsbluejay

    (@pbsbluejay)


    9 years, 8 months ago

    I apologize for hijacking another person’s post with the same issue as mine.

    I recently installed WordFence Security on my WP blog, ran the scan and I’m getting a “Your DNS records have changed” message. I also use Cloudflare for all my blogs with WordFence installed. I read another person’s post who turned off the DNS scan.

    However, turning off the DNS scan doesn’t quite make sense to me. This message only occurred on one blog and none of my other blogs with Cloudflare.

    What has got me concern is someone hacked my site but I can’t see that happening since I had 4-5 WP security plugins installed before changing over to WordFence and another security plugin.

    I also read another post about using Cloudflare where this message could be a false alarm as Cloudflare regularly changes stuff on their end.

    Just wondering should I not get too concern.

    In WordFence, under ‘New Issues’, another message states the following:

    “The list below shows new problems or warnings that WordFence found with your site. If you have fixed all the issues below, you can [click here to mark all new issues as fixed]. You can also [ignore all new issues] which will exclude all issues listed below from future scans”.

    Should I click either link as shown in the brackets above? I put those brackets there to show they are links.

    I help with this will be greatly appreciated.

    Philip

    https://wordpress.org/plugins/wordfence/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Scott Dayman

    (@sdayman)

    9 years, 8 months ago

    I have multiple sites on Cloudflare. Cloudflare would periodically change the IP address of *one* of the sites. Each time, Wordfence would alert me, so I’d check Cloudflare’s IP address range list and find it to be legitimate. So I’d click the “I know about this change” and the alert would go away. You shouldn’t have to click either of your bracketed links, as they’re a global CLEAR. I clear one issue at a time when they pop up.

    Now to be safe, check the Ignored Issues tab to see if there’s anything there.

    Go ahead and leave the scan option on if you don’t mind the DNS alerts.

    Thread Starter pbsbluejay

    (@pbsbluejay)

    9 years, 8 months ago

    sdayman… Thanks for responding. You are right about Cloudflare and I checked the IP address as you did and found it to be Clouflare.

    Wordfence was comparing my Old DNS records (A record) which is the same IP address for all my sites on Cloudflare to the New DNS records (A record) which is a different Cloudflare IP address that had me puzzled at first, and thinking my site was hacked. Gosh… Glad that’s over with.

    I clicked the ‘Resolve: I know about this change’ link as well.

    damoncloudflare

    (@damoncloudflare)

    9 years, 8 months ago

    Hi sdayman,

    Thanks for posting that information (correct).

    Hi pbsbluejay,

    Sorry about the confusion. The IP addresses used on sites on our network are not static – but shouldn’t change often – and we generally do this if we have to do something to mitigate an attack of some sort.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Wordfence Security – Your DNS Records Have Changed’ is closed to new replies.