oneoption

Thanks for the help. These changes were made and apache was restarted. Is it best practice to “Mark As Fixed” this issue in the Scan page?

Thanks for the recommendation, @threadi . A WF scan just completed as per your suggestion. Fortunately, it found nothing.

Concerning your question about what is causing these arbitrary subdomains: This is exactly my confusion. The fact that Google Search Console was coming up with requests at these subdomains, too makes it more baffling. I thought perhaps something in the server or wordpress could be causing it…

Although the owner is different – perhaps this is the issue?

Update:

The wp-config file has something that is acting as a wildcard for the siteURL. I found the following lines of code starting on Line 221:define( ‘WP_HOME’, ‘https://’ . $_SERVER[‘HTTP_HOST’] . ‘/’ ); define( ‘WP_SITEURL’, ‘https://’ . $_SERVER[‘HTTP_HOST’] . ‘/’ );

This is actually quite clever, this would do exactly what I suspected, it will use the requested url as the siteurl. On further research it looks like it was a recommendation by bitnami since it’s in their documentation. Looks like they provide that to you as part of their standard setup. They also have a recommendation for configuring the domain name:

https://docs.bitnami.com/aws/apps/wordpress/administration/configure-domain/

Setting that with your domain should prevent the site from using random subdomains or the ip address when it completes a backup since the backup completion uses the?get_site_url() function.

We’ve done this and will be tracking performance…

Update: The backup plugin developer and CloudFlare support both point towards the Wildcard A Record as being the likely culprit. Does anyone know whether removing this could cause problems, or if there are any configuration changes required in wp-config or in our server (apache) in order to ensure it does not?

Apologies, here are the images:

Thanks for responding here, too Brandon. Your Premium Support Account Area is very small and difficult to navigate:

• Clicking ‘Notifications’ shows no new notifications, so there is no way to see that you responded to the premium ticket
• Clicking ‘Premium Support’ opens the page to create a new support ticket, it there is no way to show existing tickets.

These reasons above were why I chose resubmit here.

Could you provide me a link to the premium support conversation?

Thanks!

Will

A similar issue occurred on our clone WP instance. It is getting the following errors

chmod(): Operation not permitted	
/bitnami/wordpress/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/file.php:442
4	Unknown
Warning	chmod(): Operation not permitted	
/bitnami/wordpress/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/file.php:1044
1	Unknown
Warning	chmod(): Operation not permitted	
/bitnami/wordpress/wp-content/plugins/wordfence/waf/bootstrap.php:953

Can we deletet the wf-af and waf folders?

Great, thank you!