Title: ?wordfence_syncAttackData Last modified: July 22, 2020 --- # ?wordfence_syncAttackData * Resolved [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/) * A couple of hours ago my website started running extremely slow and was getting timeout errors. * On investigation, this issue coincided with a huge spike in hits to /?wordfence_syncAttackData =[number]. * It appears that virtually every IP was also generating a hit to /?wordfence_syncAttackData =[number] in addition to the page visited… plus hundreds also produced by my host server’s IP. * The number of hits seem to be going down, and site performance is returning to normal, but does anyone have an idea what could cause this? Viewing 11 replies - 1 through 11 (of 11 total) * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13156898) * While the number of hits to /?wordfence_syncAttackData=[number] seemed to be going down, it has began to spike again over the last 20 minutes… again causing my site to slow. What is going on here? * [pao2](https://wordpress.org/support/users/pao2/) * (@pao2) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13158558) * Just want to add that i noticed this too recently. Been getting 90% CPU load twice a day, looked into access log and there were /?wordfence_syncAttackData followed by wordpress cronjob, not sure if related but probably was since Wordfence has to periodically update attack patterns and stuff? * If it’s indeed confirmed, could Wordfence make that process not too CPU intensive? * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13160085) * From my research into this, WordPress’ internal cron does trigger Wordfence. I disabled it and now use scheduled. The occurrence of /?wordfence_syncAttackData linked to my host server’s IP went down slightly, but still getting spikes. I also set it so Wordfence would bypass my server’s IP but that seemed to have no impact. * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13161957) * Right around when I made my last post, hit’s to /?wordfence_syncAttackData=[number] from my host server dropped to nothing for about an hour, then another spike that lasted about an hour, and now only roughly 10-20 per hour since. Would really like to know what caused this and how to avoid it in the future. - This reply was modified 5 years, 8 months ago by [Tim](https://wordpress.org/support/users/tjalexander70/). * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13164647) * Roughly 2 hours ago, the spikes started again… during a traffic low point. Is anyone from Wordfence paying attention? * Plugin Support [wfphil](https://wordpress.org/support/users/wfphil/) * (@wfphil) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13183110) * Hi [@tjalexander70](https://wordpress.org/support/users/tjalexander70/) * You may have blocked your server IP address. * I would like to have a look at your Wordfence diagnostics report. Please go to the top of the “**_Diagnostics_**” tab on the Wordfence “**_Tools_**” page. There will be a “**_SEND REPORT BY EMAIL_**” button to send the diagnostics report. Enter **_wftest [at] wordfence [dot] com_** as the email and **_[@tjalexander70](https://wordpress.org/support/users/tjalexander70/)_** as the forum username please. * Once you have emailed me the diagnostics report can you reply here to let me know that it has been sent. This is important in the unlikely event that your installation of WordPress is having an issue with sending mail. * [@pao2](https://wordpress.org/support/users/pao2/) – As per forum guidelines below can you open your own topic please: * _**“Unless users have the exact same version of WordPress on the same physical server hosted by the same hosts with the same plugins, theme, and configurations, then the odds are the solution for one user will not be the same for another. For this reason, we recommend people start their own topics.”**_ * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13199257) * Sorry I did not see this till now. I’ll send it in the AM. Thanks. * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13199999) * Sent. Thank you again. * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13218389) * No response to the email. Did you forget me? * Thread Starter [Tim](https://wordpress.org/support/users/tjalexander70/) * (@tjalexander70) * [5 years, 8 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13224601) * Add to the above, Jetpack Backup and Scan started not completing. On investigation, Automattic’s support identified a conflict with Wordfence, stating that the scan was running into trouble in the wfReverseCache table. * Their suggestion was to select the “Delete Wordfence tables and data on deactivation” option and then deactivate and reactivate the plugin to see if the issue clears out and allow Jetpack Backup and Scan to complete. * I did this but without reactivating the plugin and Jetpack Backup and Scan completed fine. * All things considered, I will be using security alternatives rather than Wordfence. - This reply was modified 5 years, 8 months ago by [Tim](https://wordpress.org/support/users/tjalexander70/). * Plugin Support [wfphil](https://wordpress.org/support/users/wfphil/) * (@wfphil) * [5 years, 7 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13228906) * Hi [@tjalexander70](https://wordpress.org/support/users/tjalexander70/) * Sorry for the delay. The support team has been almost at 50% capacity recently and we are in the process of hiring more staff. * Your diagnostics report looks okay. * We would need to see the server raw access logs for the time when you said, **_“ this issue coincided with a huge spike in hits to /?wordfence\_syncAttackData =[number]”_** – you can still send them if you wish to **_wftest [at] wordfence[ dot] com_** as the email. Make sure to put your forum username in the email subject field. Once you have emailed them reply here to let me know that it has been sent. * If you had to reset Wordfence database tables then that indicates that one or more database tables crashed. I see that you are using the MyISAM storage engine so you may want to ask your hosting provider to switch to the InnoDB storage engine as it is a lot more stable. Viewing 11 replies - 1 through 11 (of 11 total) The topic ‘?wordfence_syncAttackData’ is closed to new replies. * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865) * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/) * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq) * [Support Threads](https://wordpress.org/support/plugin/wordfence/) * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/) * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/) * 11 replies * 3 participants * Last reply from: [wfphil](https://wordpress.org/support/users/wfphil/) * Last activity: [5 years, 7 months ago](https://wordpress.org/support/topic/wordfence_syncattackdata-4/#post-13228906) * Status: resolved