Wordfence after attacks shuts down the website

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    3 days, 2 hours ago

    Hi @kristynakadlecova, thank-you for getting in touch.

    The wordfence_syncAttackData script is a normal process run by Wordfence to ensure your malware signatures and rules are up-to-date with the latest ones we have released. They’re only called from the browser if Wordfence can’t sync automatically, usually meaning that the site can’t reach itself. That might suggest there is another problem with the server configuration, a CDN like Cloudflare, or a server firewall stopping Wordfence.

    You can check whether the site can reach itself at Wordfence > Tools > Diagnostics under “Connecting back to this site“. If it can, your site might just be seeing a heavy amount of access attempts. 403 or 503 blocks by the firewall trigger the need to sync, so seeing this process triggered with an HTTP error code is usually expected. This doesn’t usually affect site performance though, but if your site is being hit very hard then it may slow down as a side-effect.

    If you’d like us to look into it further, you can send that page to us at wftest @ wordfence . com by finding the link at the top. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Many thanks,
    Peter.

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.