berbeates

Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Forum: Plugins
    In reply to: [Wordfence Security - Firewall, Malware Scan, and Login Security] Questionable 404 for Google Site Verification
    Thread Starter berbeates

    (@berbeates)

    5 years, 7 months ago

    Hello Gerroald,
    Thank you for your quick reply! This hit wasn’t blocked by Wordfence, but caught in a 404 log (from another plugin). Since the vast majority of 404 errors come from attempted attacks, I use this log to manually include in the Wordfence block list.

    I usually delete these 404 logs once I update Wordfence, so I don’t have the full details. I’ll keep an eye out and send more information if I see it again.

    Thansk!
    -Bernardo

    Forum: Plugins
    In reply to: [Redirection] Own IP as the origin of most 404 in Redirect log
    Thread Starter berbeates

    (@berbeates)

    6 years, 6 months ago

    Hi John,
    Thanks for the reply. The IP Header for “HTTP_X_FORWARDED_FOR” is set to the server IP.
    Is there anything I can do to get more precise information?

    Forum: Plugins
    In reply to: [Redirection] Own IP as the origin of most 404 in Redirect log
    Thread Starter berbeates

    (@berbeates)

    6 years, 6 months ago

    Hi John,
    Thanks for the reply. I contacted the hosting provider and they confirm that there is no proxy configuration for the server that hosts my site.
    Looking through the logs, even though it’s the same IP, the value Referrer / User Agent changes.

    The last two entries share IP, but these are the values for User Agent

    ==
    Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
    —
    Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0
    ==

    Also, the behavior shows that it is crawling for pages on a previous version of the website, but are no longer present.

    Do you have any suggestions on how to try to figure out where this traffic is coming from? Could it be the server itself that is looking for these files and directories?

    Forum: Plugins
    In reply to: [Wordfence Security - Firewall, Malware Scan, and Login Security] Blocked IP addresses do not appear on blocked list
    Thread Starter berbeates

    (@berbeates)

    6 years, 6 months ago

    **Update** This fixed the apparent issue. THANKS!

    Welp, I hadn’t seen that option. It was set to 5 minutes. I have set to 1 day and will check the logs again. If the behavior persists I will let you know.

    Thanks for the quick reply!
    -Bernardo

    • This reply was modified 6 years, 6 months ago by berbeates.
Viewing 4 replies - 1 through 4 (of 4 total)