mrjgardiner

Any update on this Calin?

Perfect! That fixed it. THANKS!

I would appreciate you considering that for version 3. Thanks!

Thanks, that worked!

I’m having sort of the same problem. There are just so few posts that anything related show up. I just recreated the index but no help. I have cache turned off, i have “0” for amount of days and “Limit content”. I have it checking for both the title AND the content yet still very few matches even when there should be. I just don’t know what else to do.

This is for https://www.gospelebooks.net where I have it enabled for posts only.

I appreciate the information. Just to let you know I did fix the problem.

Here’s what I did. As you suggested I kept: “CF-Connecting” then on Cloudflare I enabled “Pseudo IPv4” and selected “Overwrite headers”.

That says it adds an IPv4 header to requests when a client is using IPv6, but the server only supports IPv4.

So now I see everyone with a unique address. Am I safe to ban these offending IP addresses now? Just want to ask since I’m not really super familiar with this IPv4, IPv6, Pseudo IPv4 stuff.

Upgrading WordPress is not an option at this time.

Is there any version of Wordfence above what I have that you think may work with 3.6.1 or is guaranteed to not work?

I do use Cloudflare. I tried both and refreshed the live traffic each time. Same thing, most IP’s show but still some 255’s.

See screenshots:

CF-Connecting: https://www.dropbox.com/s/dyd5lvdeu1pxa63/Screenshot%202015-07-29%2008.12.57.png?dl=0

X-Real-Ip: https://www.dropbox.com/s/og4cuh8472735kt/Screenshot%202015-07-29%2008.16.07.png?dl=0

Here’s the login attempts: https://www.dropbox.com/s/rinc6cs9k9vlp0h/Screenshot%202015-07-29%2009.41.41.png?dl=0

Thanks for the reply.

Under “How does Wordfence get IP’s” it says:

“Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites.”

“If those appear, and have IP addresses other than 255.255.255.255, that will determine which option to set above.”

They do have different IPs. Not the 255 one.

So what do I do, I’m constantly being hammered with login requests from someone on this 255.255.255.255 address. I’m sure I get 50 failed login attempt emails from this person every day. I can’t ban the IP as other people end up getting affected.

When I look under live traffic I see lots of other IP addresses.

Noticed the same thing. I just reported it through the premium support.

OK, I just deleted the readme.html.

It’s ridiculous to think that if a hacker couldn’t get the version # from the source code that they’d skip over another easy well-known way. To me, I think if you’re going to advertise that feature then all publicly viewable traces of the version # need to be blocked out. To me it’s akin to advertising security, but leaving a known vulnerability where your site can be accessed because “hackers aren’t known to use that method to access your site even though they potentially could.”

Thanks for pitching it.

Nevermind, I found out how to restore the old version from a backup. I’ll just keep the one that works.

Thanks Haris. Appreciate that.

@stefan

Thanks, that worked! Very happy with this now.

Thanks for the updated version Stefan. I just re-activated the plugin and updated it. It seems to be working fine now minus the superscript.

Here’s a live page so you can see yourself: https://www.headcoveringmovement.com/articles/rebekah-took-her-veil-and-covered-herself-genesis-24

Hopefully you can figure out what’s wrong.