WFBrian
Forum Replies Created
-
xmlrpc is a pretty common attack point. Here is some more info on it:
https://www.wordfence.com/blog/2015/10/should-you-disable-xml-rpc-on-wordpress/
Hi,
Are you behind a proxy? You could try changing how Wordfence gets IP’s on one of your sites to see if that makes a difference.
https://docs.wordfence.com/en/Wordfence_options#How_does_Wordfence_get_IPs
-Brian
Hi,
Sorry to hear about the trouble. We don’t automatically uninstall the plugin from our end so you may want to investigate who may have accessed your site. Maybe your hosting company removed it?
If you remove the Wordfence folder in plugins, will it let you reinstall? If you need to delete all of Wordfence’s data, you can use Wordfence assistant.
https://wordpress.org/plugins/wordfence-assistant/
Hope that helps,
BrianHi,
Will you try setting the firewall back to Learning Mode, completing the action you were trying to do, and then setting the firewall to “Enabled” again?
If you need to disable the firewall and cannot set it back to Learning Mode or Disabled on the firewall page, we have instructions to disable it another way, here:
https://docs.wordfence.com/en/Web_Application_Firewall_FAQ#Disabling_the_firewallLet us know if that helps or not.
-BrianHi,
Here is a previous thread that has some information regarding MyMail and 403 errors. Does that address the issue you’re having?
https://wordpress.org/support/topic/error-403-forbidden-20
-Brian
Hi,
Do you have auto updates enabled for any other plugins on your site? Do they update automatically. I’m trying to determine if it’s an issue with the site or the plugin.
Thanks!
BrianHi,
That usually points to a database issue. You can try to update the permissions or remove and reinstall Wordfence. More info here:
https://wordpress.org/support/topic/all-hits-show-an-unknown-location-at-ip-false?replies=8
-Brian
Hi Stephane,
Just to make sure, your host uses cPanel, correct? cPanel is different from the WordPress admin area. You may want to contact your host and see if they have some suggestions on configuring as well.
-Brian
Hi,
Are you on a shared server? Have you alerted your hosting company? If not, I’d recommend notifying them as a precaution. Could be a hijacked server at your host.
-Brian
Forum: Plugins
In reply to: [Wordfence Security - Firewall, Malware Scan, and Login Security] Bad botsHi,
Currently, there is not a way to specifically block a bot, but you can block them by IP. When you see a visitor you want to block on Live Traffic, block it and then go to blocked IP’s to permanently block.
Hope that helps,
BrianHi,
Glad to hear you’re liking Falcon! What kind of content from other plugins are not causing the cache to empty? One thought is to set a cron job to clear cache daily.
Here is a link to the events that cause the cache to clear. Right below it, there is instructions for a simple cron job to schedule cache clearing.
https://docs.wordfence.com/en/Falcon_Cache#Events_that_cause_the_Falcon_Cache_to_auto-clear
-Brian
OK. Would you mind sending me a diagnostic report? On the Diagnostics page, find Send Report by Email. Change the name to brian at wordfence and include your forum name.
Thanks!
BrianHi,
In Disabled mode, the Firewall is not engaged at all. With the Firewall disabled, go to Live Traffic. Filter traffic: Blocked by Firewall. Are you seeing entries there?
What analytics are you using?
Thanks,
BrianHi Steve,
I see your site in Safari, Firefox, and Chrome on a Mac just fine. It might just be your browser. Have you tried clearing the cache in IE or using another browser?
-Brian
Hi,
Are you receiving any error messages when Wordfence is active?
You can try turning on the option “Disable config caching” near the bottom of the Wordfence options page, if it’s a problem with the cache file being removed or re-created while a backup is in progress, that may help.
Thanks,
Brian