Hi @looknear, thanks for getting in touch.
Usually, when in your FTP or hosting file manager, navigating to your wp-content/wflogs folder and checking for rules.php can show you the last modified date on this file. If it’s 0kb in size or the last updated time matches what Wordfence is saying, you should be able to delete the wflogs folder or its contents entirely and Wordfence should try to repopulate it within 30 minutes.
It’s also worth checking that permissions on your WordPress site’s directories are 755, although I appreciate the owner is already reporting correctly as www-data.
If you have persistent problems with this file/folder, as maybe something in your configuration changes permissions from time-to-time, you can bypass this entirely by setting Wordfence to write to the MySQLi storage engine instead of a file if you prefer: https://www.wordfence.com/help/firewall/mysqli-storage-engine/
Using MySQLi should prevent this from being a reoccurring issue. If none of the steps seem to solve your issue at all, by all means feel free to show me the specific errors using a service like Snipboard, or sending over a site diagnostic to wftest @ wordfence . com. You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email.
Thanks,
Peter.