• Resolved Sorintje

    (@sorintje)


    Hi,

    After installing Sucuri and WPBruiser, Wordfence seems not to report any activity anymore. ‘Top IPs Blocked’ for 24 hours is empty.

    ‘Live traffic’ also doesn’t report anything from 24 February, while in Sucuri I can see even for today activity bots in the ‘Failed Logins’ section trying to login.

    I read on the Wordfence help website that in Sucuri you have to set ‘Hardening: Restrict wp-content access = off/disabled’

    I have done that, still nothing. I disabled Sucuri and WPBruiser but that didn’t fix the problem. Should I disable all the options from Sucuri and WPBruiser before disabling them?

    Thank you!

Viewing 6 replies - 1 through 6 (of 6 total)
  • I highly doubt you need both Sucuri and Wordfence…. not sure why you’re doing that.

    NOTE: I’m not part of WF support, just a long-time user. My views are my own!

    Thread Starter Sorintje

    (@sorintje)

    Yes… I think I will remove Sucuri because I don’t see it doing much for me. It only reports to me invalid logins but it doesn’t provide me the option to block the ip’s, only usernames. I just read somewhere that a combination between this two is good as Wordfence is more local and Sucuri is external. But, I like more Wordfence.

    Hi sorintje,
    With both plugins disabled, you still can’t see any new enteritis in “Live Traffic” log? make sure you have “Enable Live Traffic View” option enabled then use this tool to generate some traffic to your website and check the Live Traffic log again, while being on this page, check the browser console for any JS errors that could be there.

    Also, may I know what is the firewall status set in (Wordfence > Firewall)?

    Thanks.

    Thread Starter Sorintje

    (@sorintje)

    Hi,

    I reseted the setting for Sucuri, disabled it and then I deleted it.

    Everything works as normal with Wordfence now! I can see the faild logins daily and the email notifications are back. Live Traffic works.

    I am a little bit confused because I don’t know anymore if it was Sucuri or not. WPBruiser is enabled so that was not the problem (even if I think WPBruiser it has no use if I’m using Wordfence).

    I think it was one of this two: Sucuri or Plugin Organizer (Wordfence was globally blocked in front-end).

    I will block back Wordfence with Plugin Organizer just to test if that was the problem and then I will report back here, maybe there is someone with same problem.

    Thread Starter Sorintje

    (@sorintje)

    Confirmed: blocking Wordfence in ‘Plugin Organizer -> Global Plugins’ was my problem.
    I just wasted authors time! Sorry for that!

    At least this problem made me choose into using only Wordfence. Lighter, smarter and it does everything the way I would like to.

    Fake WordPress User Bots – Are problems in using Wordfence and sucuri together?

    I posted the following on the WordPress forum.

    Wordfence doesn’t stop Fake WordPress User Bots. A google search article suggests WP blocking plugins and sucuri. Though there are problems in using Wordfence and sucuri together.

    I suggest you set WordPress to send an E mail when new users subscribe. At least you can delete them. Though this maybe shutting the stable door after the horse has left.

    I fear its a problem of having ‘any users can subscribe’ ticked in the setting.

    Which is necessary for membership sites.

    This has gone on for years and a WordPress setting problem.

    What I don’t understand, is what benefit the bots get from registration. Apart from knowing that the site is running WordPress. With all the security/update issues that brings.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Firewall not working (Sucuri??)’ is closed to new replies.