No live log and no statistics

Hi

Can you check wether the /wp-content/nfwlog/ and /wp-content/nfwlog/cache/ folders are writable? It looks like they aren’t.

Also, if you go to “NinjaFirewall > Firewall Log”, do you see any error message? Does the log contains entries?
And check for error messages in the “NinjaFirewall > Overview” page as well.

Hi

both folders are on 755.
And in both folder files are in. The latest from today.

There are no errors on Firewall Log. Just some “info” massages.
There are no error messages on Overview as well.

Best regards,
Frank

Can you download this file and check if you see any error:

1. Rename this file to “wp-check.php”.
2. Upload it into your WordPress root folder.
3. Go to https://YOUR WEBSITE/wp-check.php
4. Delete it afterwards.

Are the stats from NinjaFirewall’s widget working (you can access it from WP dashoard page)?

Hi

I tried that already. No errors displayed from wp-check

The stats on the widgets from dashboard page are showing only 0’s.

Best regadrs,
Frank

What about these 2 files:
/wp-content/nfwlog/firewall_2017-02.php and /wp-content/nfwlog/stats_2017-02.php

Are they empty?

Hi

content of /wp-content/nfwlog/firewall_2017-02.php :

<?php exit; ?>
[1486372778] [0] [intranet.bbv-deutschland.de] [#4834623] [0] [6] [84.143.195.239] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1486376482] [0] [intranet.bbv-deutschland.de] [#5856414] [0] [6] [84.143.195.239] [403] [POST] [/wp-admin/update-core.php] [WordPress upgraded by nGGKdiqRrfgAPYk] [hex:56657273696f6e203a20342e372e32]
[1486481590] [0] [intranet.bbv-deutschland.de] [#2737317] [0] [6] [156.67.136.216] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1486504122] [0] [intranet.bbv-deutschland.de] [#1047545] [0] [6] [156.67.136.216] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1486678160] [0] [intranet.bbv-deutschland.de] [#8652397] [0] [6] [194.208.49.8] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1486989658] [0] [intranet.bbv-deutschland.de] [#1044560] [0] [6] [84.143.194.122] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487057317] [0] [intranet.bbv-deutschland.de] [#6105848] [0] [6] [79.231.62.48] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487057452] [0] [intranet.bbv-deutschland.de] [#4445977] [0] [6] [79.231.62.48] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487058599] [0] [intranet.bbv-deutschland.de] [#8970758] [0] [6] [79.231.62.48] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487058856] [0] [intranet.bbv-deutschland.de] [#1510321] [0] [6] [79.231.62.48] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487058932] [0] [intranet.bbv-deutschland.de] [#8305903] [0] [6] [79.231.62.48] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487059662] [0] [intranet.bbv-deutschland.de] [#6319657] [0] [6] [79.231.62.48] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487145448] [0] [intranet.bbv-deutschland.de] [#6302142] [0] [6] [84.143.192.214] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487610570] [0] [intranet.bbv-deutschland.de] [#8741092] [0] [6] [188.210.58.45] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487612130] [0] [intranet.bbv-deutschland.de] [#3934621] [0] [6] [188.210.58.45] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by nGGKdiqRrfgAPYk] [hex:4e616d653a20697468656d65732d73656375726974792d70726f2f697468656d65732d73656375726974792d70726f2e706870]
[1487613981] [0] [intranet.bbv-deutschland.de] [#6077306] [0] [6] [188.210.58.45] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by nGGKdiqRrfgAPYk] [hex:4e616d653a20657777772d696d6167652d6f7074696d697a65722f657777772d696d6167652d6f7074696d697a65722e706870]
[1487614063] [0] [intranet.bbv-deutschland.de] [#8760230] [0] [6] [188.210.58.45] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by nGGKdiqRrfgAPYk] [hex:4e616d653a207365656470726f642d636f6d696e672d736f6f6e2d70726f2f7365656470726f642d636f6d696e672d736f6f6e2d70726f2e706870]
[1487614069] [0] [intranet.bbv-deutschland.de] [#8848364] [0] [6] [188.210.58.45] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by nGGKdiqRrfgAPYk] [hex:4e616d653a2077702d73757065722d63616368652f77702d63616368652e706870]
[1487614125] [0] [intranet.bbv-deutschland.de] [#4596475] [0] [6] [188.210.58.45] [403] [GET] [/wp-admin/plugins.php] [Plugin deactivated by nGGKdiqRrfgAPYk] [hex:4e616d653a20697468656d65732d73656375726974792d70726f2f697468656d65732d73656375726974792d70726f2e706870]
[1487615471] [0] [intranet.bbv-deutschland.de] [#1919787] [0] [6] [188.210.58.45] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487661842] [0] [intranet.bbv-deutschland.de] [#6970287] [0] [6] [84.143.194.222] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]
[1487703831] [0] [intranet.bbv-deutschland.de] [#2554037] [0] [6] [188.210.63.56] [403] [POST] [/index.php] [Logged in user] [hex:6e47474b646971527266674150596b202861646d696e6973747261746f7229]

content of /wp-content/nfwlog/stats_2017-02.php:

0:0:0:0:0:0:22:0:0:0

Dashboard shows:

Blocked hacking attempts 0
Hacking attempts severity Critical: 0%
High: 0%
Medium: 0%
Uploaded files 0

All those lines are not blocked threats but information about logging, plugin activation etc. They appear as “info” in the Firewall Log’s “LEVEL” colunm.
You won’t see them in the stats page or the dashboard widget.

Try to trigger the firewall:
1- Log out of WordPress admin dashboard.
2. Go to https://your-website/index.php?ninjatest=%00 . You should be blocked.
3. Log in to the WordPress dashboard and check again the widget and the stats page.

Hi

1: done
2: done. I’m blocked.
3: no stats: everything zero!

Firewall works but no stats are collected.

Best regards,
Frank

That’s odd.
1- Can you paste here the content of the /wp-content/nfwlog/stats_2017-02.php file?
2- Open /wp-content/nfwlog/firewall_2017-02.php, search for the “ASCII character 0x00” string and paste here the corresponding line.

Hi!

Hier is the content of stats_2017_02.php:
0:0:0:0:0:0:26:0:0:0

firewall_2017-02.php has no ASCII like content.
Also I checked again: https://intranet.bbv-deutschland.de/index.php?ninjatest=%00 does not create an entry in the firewall_2017-02.php file.

Best regards,
Frank

It looks like you have a restriction at the server/hosting level.
Are you using any specific hosting plan, that includes security for WordPress?

What your logs show is that all data coming from the plugin part of NinjaFirewall (i.e., when WordPress is loading or already loaded) is correctly written to the logs, but data coming for the firewall part (i.e., before loading WordPress) is not written to the logs. I know that some hosting companies like wpengine have that kind of restriction.

Hi

Don’t believe that this is the problem:
I have so many site with the same hoster and some even on the same virtuel machine:
bbv-rhein-neckar.de
bbv-muensterland.de
bbv-ostwestfalen.de
allgorite.com
expert-link.net
the-meloncut.ch

they all have ninijafirewall installed and perfectly working.

Best regards,
Frank

Can you try to reinstall it?
1. Export your configuration ( Firewall Options > Export configuration ).
2. Uninstall NinjaFirewall from the Plugins page.
3. Delete the /wp-content/nfwlog/ folder and its subfolders.
4. Re-install NinjaFirewall.
5. Re-import its configuration ( Firewall Options > Import configuration ).

Afterwards, you will need to re-configure “File Check” because it won’t be exported/imported.

Hi

Yes, the reinstallation worked!
Everything ok now.

Thank you,
Frank