Wordfence blocks WPFC

Update:
I also notice that if I go to wordfence/blocking there are no current blocks showing ??

It was populated before and it is at this very moment blocking ‘MauiBot’ but not showing anything?

Thanks

Hello @11whyohwhy15,

Let me start with your first question about Wordfence blocking WP Fastest Cache. It appears there might be a URL listed in the “Immediately block IPs that access these URLs” section of the Wordfence > Firewall > Advanced Firewall Options page that is triggering the page block. Can you please verify?

Examining your second question, it’s possible the culprit is the “Rate Limiting Rules” values are too short and the blocked IPs are disappearing before you can view them. What value is set for How long is an IP address blocked when it breaks a rule? For testing purposes can you temporarily set the value to 30 minutes and confirm any blocked IPs now show in the blocking section.

Thanks,
Steve

HI,

In the Wordfence > Firewall > Advanced Firewall Options page I only have this blocked:

/xmlrpc.php

I had ‘How long is an IP address blocked’ set to 1 month but changed it to 30 mins but still nothing… My blocked list had all my blocked IP’s in it, many of the on permanent blocks, and I never changed the rules I first set when installing wordfence over a year ago.

I have had about 30 attempts to access my site by ‘France was blocked for Manual block by administrator at /mysqldump.sql.xz 07/06/2018 20:33:05 (11 hours 57 mins ago) but that doesn’t show up?

I noticed the blocking problems after the last update ?

Thanks

Good evening @11whyohwhy15,

Thanks for your continued feedback trying to resolve this issue. I’ve been researching a little more and a couple things come to mind. It’s possible that WP Fastest Cache has started doing their precache queries via xmlrpc.php which would trigger the banned URL block.

Can you open the console your browser on the Blocking page and look for any red text in the “console” and “network” tabs? I wonder if there is a javascript error preventing the blocked IPs from showing on the page.

Thanks,
Steve

HI,

Ahhhh… OK I’ll remove the /xmlrpc.php and see what hap[pens…

OK – opened console and you’re right there’s a lot of problems here all in RED! Have copied and pasted below:

Uncaught ReferenceError: jQuery is not defined
at admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:1909
admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:2698 Uncaught ReferenceError: jQuery is not defined
at admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:2698
admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:2740 Uncaught ReferenceError: jQuery is not defined
at admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:2740
admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:2858 Uncaught ReferenceError: jQuery is not defined
at admin.php?page=WordfenceWAF&ip-geo-block-auth-nonce=491736977c:2858
load-scripts.php?c=1&load[]=thickbox,hoverIntent,common,postbox,admin-bar,wp-pointer,svg-painter,jquery-ui-slider,iris,wp-color-picker,heartbeat,wp-auth-che&load[]=ck,jquery-ui-resizable,jquery-ui-button,jquery-ui-dialog,wpdialogs,shortcode,backbone,wp-backbone,media-models,wp-plupload,wp-me&load[]=diaelement,wp-api-request,media-views,media-editor,media-audiovideo,mce-view,imgareaselect,image-edit,media-upload,jquery-ui-too&load[]=ltip&ver=4.9.6:15 Uncaught ReferenceError: jQuery is not defined
at load-scripts.php?c=1&load[]=thickbox,hoverIntent,common,postbox,admin-bar,wp-pointer,svg-painter,jquery-ui-slider,iris,wp-color-picker,heartbeat,wp-auth-che&load[]=ck,jquery-ui-resizable,jquery-ui-button,jquery-ui-dialog,wpdialogs,shortcode,backbone,wp-backbone,media-models,wp-plupload,wp-me&load[]=diaelement,wp-api-request,media-views,media-editor,media-audiovideo,mce-view,imgareaselect,image-edit,media-upload,jquery-ui-too&load[]=ltip&ver=4.9.6:15
admin.js:1 select2_wprm: An instance of jQuery or a jQuery-compatible library was not found. Make sure that you are including jQuery before select2_wprm on your web page.
(anonymous) @ admin.js:1
admin.js:1 Uncaught TypeError: Cannot read property ‘fn’ of undefined
at admin.js:1
at p (admin.js:1)
at u (admin.js:1)
at Object.f [as require] (admin.js:1)
at Object.<anonymous> (admin.js:1)
at admin.js:1
at Object.<anonymous> (admin.js:1)
at Object.<anonymous> (admin.js:1)
at e (admin.js:1)
at Object.<anonymous> (admin.js:1)
add-search-to-menu-admin.js:1 Uncaught ReferenceError: jQuery is not defined
at add-search-to-menu-admin.js:1
admin-scripts.js:1 Uncaught ReferenceError: jQuery is not defined
at admin-scripts.js:1
admin-scripts.js:1 Uncaught ReferenceError: jQuery is not defined
at admin-scripts.js:1
script.min.js:1 Uncaught ReferenceError: jQuery is not defined
at script.min.js:1
wp-seo-admin-global-761.min.js:1 Uncaught ReferenceError: jQuery is not defined
at Object.1 (wp-seo-admin-global-761.min.js:1)
at e (wp-seo-admin-global-761.min.js:1)
at a (wp-seo-admin-global-761.min.js:1)
at wp-seo-admin-global-761.min.js:1
colorpicker.js:30 Uncaught ReferenceError: jQuery is not defined
at colorpicker.js:30
admin-scripts.js:1 Uncaught ReferenceError: jQuery is not defined
at admin-scripts.js:1
jquery-ui-timepicker-addon.1528224180.js:8 Uncaught ReferenceError: jQuery is not defined
at jquery-ui-timepicker-addon.1528224180.js:8
at jquery-ui-timepicker-addon.1528224180.js:10
wfselect2.min.1528224180.js:1 Uncaught ReferenceError: jQuery is not defined
at wfselect2.min.1528224180.js:1
at wfselect2.min.1528224180.js:1
cmb2.min.js:1 Uncaught ReferenceError: jQuery is not defined
at cmb2.min.js:1
load-scripts.php?c=1&load[]=jquery-core,jquery-migrate,utils,jquery-ui-core,jquery-ui-widget,jquery-ui-mouse,jquery-ui-sortable,jquery-ui-position,jquery-ui&load[]=-menu,jquery-ui-draggable,jquery-ui-droppable,jquery-touch-punch,underscore,wp-util,jquery-ui-tabs,moxiejs,plupload&ver=4.9.6:9 JQMIGRATE: Migrate is installed, version 1.4.1
admin.1528224180.js:553 Uncaught TypeError: $(…).wfselect2 is not a function
at Object.init (admin.1528224180.js:553)
at HTMLDocument.<anonymous> (admin.1528224180.js:3419)
at i (load-scripts.php?c=1&load[]=jquery-core,jquery-migrate,utils,jquery-ui-core,jquery-ui-widget,jquery-ui-mouse,jquery-ui-sortable,jquery-ui-position,jquery-ui&load[]=-menu,jquery-ui-draggable,jquery-ui-droppable,jquery-touch-punch,underscore,wp-util,jquery-ui-tabs,moxiejs,plupload&ver=4.9.6:2)
at Object.fireWith [as resolveWith] (load-scripts.php?c=1&load[]=jquery-core,jquery-migrate,utils,jquery-ui-core,jquery-ui-widget,jquery-ui-mouse,jquery-ui-sortable,jquery-ui-position,jquery-ui&load[]=-menu,jquery-ui-draggable,jquery-ui-droppable,jquery-touch-punch,underscore,wp-util,jquery-ui-tabs,moxiejs,plupload&ver=4.9.6:2)
at Function.ready (load-scripts.php?c=1&load[]=jquery-core,jquery-migrate,utils,jquery-ui-core,jquery-ui-widget,jquery-ui-mouse,jquery-ui-sortable,jquery-ui-position,jquery-ui&load[]=-menu,jquery-ui-draggable,jquery-ui-droppable,jquery-touch-punch,underscore,wp-util,jquery-ui-tabs,moxiejs,plupload&ver=4.9.6:2)
at HTMLDocument.K (load-scripts.php?c=1&load[]=jquery-core,jquery-migrate,utils,jquery-ui-core,jquery-ui-widget,jquery-ui-mouse,jquery-ui-sortable,jquery-ui-position,jquery-ui&load[]=-menu,jquery-ui-draggable,jquery-ui-droppable,jquery-touch-punch,underscore,wp-util,jquery-ui-tabs,moxiejs,plupload&ver=4.9.6:2)
at HTMLDocument.s (rocket-loader.min.js:1)
at p (rocket-loader.min.js:1)
at t.simulateStateAfterDeferScriptsActivation (rocket-loader.min.js:1)
at Object.callback (rocket-loader.min.js:1)

So after noting Rocket Loader … I went to cloudflare and switched Rocket Loader off and everything worked OK the blocking page populated again… Problem is this never happened before the wordfence update ? I have always had rocket loader on as it speeds up my site ? I noticed this problem with Analytify plugin on one of their panels and they fixed it in their plugin only yesterday…

Hoping you can fix this too.

Thanks

@11whyohwhy15,

Thanks for the data! It definitely looks like Rocket Loader is causing jQuery to break.

I suggest reaching out to Cloudflare support to examine what is happening with the Rocket Loader that triggers jQuery to break. It’s possible that a recent update with Rocket Loader caused this issue to appear. I would verify you have installed the latest release of that plugin.

Let us know how else we can assist.

– Steve

@11whyohwhy15,

Removing the /xmlrpc.php file does look like it resolves the issue of WPFC being blocked. However, if you see this happen again you will probably need to whitelist WPFC‘s IP address range In the advanced firewall options section of the firewall options page.

The Rocket Loader service is still considered in a Beta stage so I advise not running the service on a PRODUCTION server. My suggestion is to leave the service disabled for now. I would also monitor the Cloudflare site and look to see when Rocket Loader is updated and moves out of the Beta phase.

Thanks,
Steve

HI,

OK have temporarily fixed the blocking page by using cloudflare rules to ignore the blocking page and now it loads ok.

I’ll keep on eye on WPFC preload as it hasn’t happened again.

Thank so much for your help.
Ian