• Resolved vinberdon

    (@vinberdon)


    Hello… I have been receiving emails from Wordfence about blocked IP addresses for a website that no longer exists as a WordPress website… The VPS has been destroyed, the IP addresses that the website used is not currently in use by anything else, and for all intents and purposes… the site just doesn’t exist.

    However, I still receive emails saying that the Wordfence plugin has blocked an IP address for whatever behavior it thinks should have been blocked.

    I am absolutely puzzled by this. How is this possible? The server literally doesn’t exist anymore.

    Obviously, if I click on the link at the bottom to “stop receiving these emails” the link does not work, because that website is no longer using WordPress and is on an entirely different server and service.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hi @vinberdon,

    I think there’s another server that is sending the emails with Wordfence installed, and they are using your old domain name.

    If you check the original message ( https://i.imgur.com/nFeH9mc.png ), what do you see for the SPF field?

    For example: https://i.imgur.com/ko2g3hz.png

    This could help you track down which server is sending these emails.

    Dave

    Thread Starter vinberdon

    (@vinberdon)

    @wfdave They can’t be using the old domain name, as I am still using that domain on another server. BUT your idea got me digging and tracing the IP in the header, I found an OLD old server that my client had (long forgotten) that was apparently still running WordPress, even though there is no content there anymore… The “site” barely functions and no one knows how to get into it.. it’s shared hosting, so I can’t just switch it off. My only option is to SSH/SFTP and delete everything there and wait for the plan to expire. lol thank you for the inspiration.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Interesting Issue: Getting alerts for a website that… isn’t using WP anymore?’ is closed to new replies.