Am I hacked?

  • Resolved rapidasia

    (@rapidasia)


    1 year, 4 months ago

    Thanks for your great work.

    I went into All Options and see a list of Allowlisted URLs

    do plugins write to this somehow? specifically /wp-login.php says an unrecognized IP was Allowlisted while in Learning Mode. –

    no idea where that came from

Viewing 1 replies (of 1 total)

  • Thanks for reaching out.

    When Wordfence is first installed, Learning Mode will be active for seven days, but you can choose a different time period on the firewall options page if desired. This helps the firewall see actions that are normal for the site so it does not flag them, as false positives. It sounds like the site was possibly under attack and some of the requests were added to the allowlist. You should be able to delete those firewall rules from the allowlist or just disable them by unchecking the box in the Enabled column.

    Mia

Viewing 1 replies (of 1 total)
  • The topic ‘Am I hacked?’ is closed to new replies.