I think there might be a way to get it to work. Maybe CF adds the original IP to another header.
]]>A data breech on a site or app has exposed your password. Chrome recommends changing your password on (my website) now.
I’m very confused, does everyone get this?
]]>Reporting errors:
Reason code: Black List IP
ip: 10.30.72.4
server uri: /wp-admin/options-general.php?page=stop-spammer-registrations-plugin/settings/stop-spam-reg-options.php
MU blog number:
HTTP_REFERE: https://www.exploristforum.com/wp-admin/options-general.php
Version 2020.6.2 | Your current IP address is: 10.30.72.4
This address is invalid for testing for the following reason: IP same /24 subnet as server 10.30.72.4. Not using Cloudflare.
Thanks,
ED
The technical team at Sitelock identified WP Mail SMTP as the faulty plugin that has led to this security breach.
My gmail mailer is completely configured and connected with Client ID/Secret. I’ve also implemented DKIM and DMARC to try to mitigate the problem with no success.
Currently running 1.3.3 on updated WordPress Version
Please advise
]]>[This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing at https://aka.ms/LearnAboutSpoofing]
This email was sent from your website “Portland Adventist Community Services” by the Wordfence plugin at Sunday 15th of April 2018 at 05:18:36 PM
The Wordfence administrative URL for this site is: https://www.pacsonline.org/wp-admin/admin.php?page=Wordfence
Someone tried to recover the password for user with email address: [email protected]
User IP:
User hostname:
User location:
Please instruct how to resolve. I can no longer access our wordpress site.
]]>Form submitted through the contact page Caldera Contact Form are getting flagged as spam
For example, the most recent submission had an email address of “[email protected] and when submitted received the following error message:
This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing
Feedback
Now I’m not clear on how to make them stop.
I found this older support topic — https://www.ads-software.com/support/topic/spam-emails-sent-through-my-domaian — and I have a feeling that my domain is being spoofed also. I worked with my host to add an SPF record, but the SPAM continues to flow.
This is a problem for me because my host also keeps suspending my account because these SPAM emails are causing me to hit my website’s database query limit. When this happens, not only is my public-facing website down, but I also can’t access my WP-Admin panel to try and work on resolving this.
Every time I call my hosting company, I’m only able to speak live with tier 1 support agents. It seems they’re not really understanding the issue and definitely don’t know how to resolve it. Any assistance or ideas any of you have would be much appreciated!
Thanks in advance.
]]>I would like the forgotten password emails that start
Someone has requested a password reset for the following account:
to come from something like
manager <manager@………..
instead of
WordPress <wordpress@……………..
I have looked and so far not found (add_filters etc are being ignored)
]]>Thanks for the fantastic plugin. I am having one issue tho…
When a user submits a form entry the admin receives a Spoofing error message which is “This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing” this is a bit worrying and not quite sure how to rectify it.
Thanks
]]>