wfmark

Hi @creativeartofficial, thank you for reaching out.

Wordfence sends email alerts on certain events if you have enabled the alerts in this section, Wordfence> All Options> Wordfence Global Options> Email Alert Prefereneces. You will see a series of checkboxes titled “Email me when…”. and “Alert me when…“. From this section, you can choose what settings fit best for you. Keep in mind that deactivating most of these notifications may lower your ability to quickly react to an attack or vulnerability. Don’t forget to press the SAVE button when done.

Using the option “Maximum email alerts to send per hour” allows you to limit the number of email alerts received per hour. You can also disable alerts if you are experiencing a brute force attack and the email alerts you are receiving are becoming overwhelming.

Let me know if this doesn’t solve your issue.

Thanks,

Mark.

Hi @xyftx2023, Thank you for reaching out.

Could you please try to deactivate and reactivate Wordfence from the plugins area of your site? This solves the issue for some customers.

We have seen possible issues installing keys automatically more than 24 hours after generation. Additionally, if you are in a different browser than the one used when requesting your Free Wordfence license, you will be unable to automatically install it. In those cases, you will need to manually copy and paste the key from the email to complete the activation of  Wordfence Security.

Aside from verifying that you did not copy only part of the license key, I would check whether you can install the license when Wordfence is the only active plugin on your site. There could be a Javascript conflict with another plugin potentially stopping the code executing the verification check.

In some cases, disabling caching plugins resolves the issue.

Let me know how it goes.

Thanks,

Janet

Hi @guido07111975, Thank you for reaching out.

If you’ve restored a website with Wordfence installed and noticed an increase in the number of entries, it could be due to various reasons. 

Wordfence logs various activities, including login attempts, changes to files, and other events. If your website has legitimate traffic or user interactions, Wordfence may log these activities, leading to an increase in entries.

Automated bots often attempt to exploit vulnerabilities in websites. If your website is being scanned or targeted by bots, Wordfence will log these activities as well. The number of entries may increase if there’s a significant amount of automated bot traffic.

The restoration process itself could trigger security-related events. For example, if files or database entries were modified during the restoration, Wordfence might log these changes.

If you do not wish to see the many entries, you can decide to do a complete reinstall of the Wordfence plugin by enabling the option “Delete Wordfence tables and data on deactivation” under “Dashboard” > “Global Options” page. Expand the “General Wordfence Options” section. Remember to save the changes. If you then deactivate the plugin, all Wordfence files and database tables will be deleted. You can then choose to activate Wordfence to start with the default configuration.

Thanks,

Mark.

Hi @manipur, Thank you for reaching out.

To rule out any caching issues, could you please try an incognito/private browsing window or a different browser than your default one? 

Please access wp-admin while keeping a Browser Console open to see if you can detect any JavaScript errors or files that fail to load. If you see any red errors in the console, please take a screenshot and send it to me.

If the above steps fail, run Wordfence as your only-enabled plugin and revert to a default theme such as Twenty Twenty-Three to see if there’s a plugin or theme conflict causing the issue. If you are now able to load the backend, re-enable your plugins and theme one by one until the error recurs to help find the plugin causing the conflict.

If there’s a plugin or theme conflict, I would suggest changing the Wordfence Web Application Firewall into Learning Mode. From the Wordfence Dashboard, click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now confirm that you can successfully load your sites. Once done, switch the WAF from Learning Mode back to Enabled and Protecting and test to see whether it works..

https://www.wordfence.com/help/firewall/learning-mode/ is an amazing resource for learning more about the WAF and learning mode.

Let me know in case the above doesn’t solve your issue.

Thanks,

Mark.

Hi @solventweb,

Thank you for getting back to us.

Are you seeing any rules update failed error messages?

Could you please check the timestamp for the /wp-content/wflogs/rules.php file? If the timestamp is current and the Live Traffic page is updating as expected, there is no cause for alarm.

Let me know what you find.

Thanks,

Mark

Hi @fred001, Apologies for the delayed response.

I couldn’t find your diagnostic report. Please try the below instead:

Navigate to Wordfence > Tools > Diagnostic page and then click the “Export” button. Send the txt file to wftest@wordfence.com. Add your forum username in the subject and respond here once done. Let me know once you have sent the report.

Thanks,

Mark.

Hi @lorenzone92, Thank you for sending the diagnostic report.

From the diagnostic report, it looks like Cloudflare is blocking your site from connecting back to itself.

You will need to update your Cloudflare settings to allow your site to connect back to itself. You should be able to do this by going to your Cloudflare control panel.

• Login to Cloudflare
• Go to “Firewall”
• Click the “Firewall Rules” tab
• Click “Create a Firewall rule”
• Name the rule under “Rule Name”
• Set the “Field” under “When incoming requests match…” to “IP Source Address”
• Enter your site’s IP address under “Value”
• At the bottom, under “Then…Choose an action” change “Block” to “Allow”
• Click “Deploy

Once you have added your site to the Cloudflare allowlist, head back over to your site and attempt another scan. Sometimes, the same process needs to be done for our IP addresses, which can be found here: https://www.wordfence.com/help/advanced/#servers-and-ip-range

Instructions for allowlisting on Cloudflare are available here: https://www.wordfence.com/help/central/connect/#troubleshooting-connection-issues

Also ensure your visitor IP detection is set up correctly for Cloudflare. Head over to your site and go to Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs. You will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.”.

Thanks, 

Mark.