• Wordfence

    Author
    Topic
    #2288146

    Just received multiple messages reading, “Your access to this site has been limited by the site owner”

    Looks like Woody has been working  hard with Wordfence overnight.

    He has blocked a large number of our VPN’s servers that I have been using to connect to the site.

    Moving forward it looks as if I will have extremely limited access to Woody’s site.

     

    1 user thanked author for this post.
    Viewing 17 reply threads
    Author
    Replies
    • #2288150

      You are being blocked because your IP addresses issued by the VPN are dirty (have been used for spamming, etc). Please read through this thread for an explanation.

      3 users thanked author for this post.
    • #2288151

      Looks like Woody has been working hard with Wordfence overnight.

      nope, I’m sure Woody sleeps at night 🙂
      Please refrain from using block capitals in thread titles as per general rules

      and absolutely not ALL CAPS

      Windows - commercial by definition and now function...
    • #2288158

      I do work day and night, but nevermind.

      My guess is that your VPN got hit by a bunch of creeps overnight.

      1 user thanked author for this post.
    • #2288164

      I am pleased that AskWoody is diligent in keeping the site as secure as it is useful even though this entails some inconvenience for me. It is my experience that an increasing number of websites have begun to block access when a VPN is involved. This includes some financial ones that I would most want to access with a VPN from a “public wifi” location. My guess is that in another year a VPN is going to be nearly useless for any serious work for me but still useful for some internet shopping.

      1 user thanked author for this post.
    • #2288202

      I use NordVPN and had to try six different servers to gain access to the Woody site just now because of Wordfence.

      Did not have a similar problems with my bank, credit card companies, Newegg, Amazon, etc.

      As a result, I will probably be visiting the Woody site less often.

      1 user thanked author for this post.
    • #2310122

      hi, getting access issues here, firefox is throwing up secure connection failed errors PR_END_OF_FILE. Accessing other sites around the web is fine, is there a problem?

      • #2310126

        I’m using Firefox 82.0.2 with AdBloc Plus, Disconnect, and NoScript. Have not had any problems today.

    • #2310155

      As I indicated back in August we use NordVPN.

      This morning I was I was unable to log into AskWoody from the server that we have been using for the last three or four months.

      Moved to another server and all is well for now.

    • #2336717

      I am having problems with WordFence blocking my post – it seems they don’t like British Telecom!

      [Moderator Edit] moved from the testing forum

      Chris
      Win 10 Pro x64 Group A

      • #2336864

        We need details about the error message(s) you are getting.
        Are you using a VPN?
        Read the links at the top of this thread.

        cheers, Paul

    • #2336883

      Paul

      No VPN – just a normal British Telecom IP address. I have tried it with four different IP addresses, all with th same message (attached). Strangely, I can post here, but cannot start a new question/tread in the Windows 1909 forum.

      Cheers

      Chris
      Win 10 Pro x64 Group A

      • This reply was modified 4 years, 3 months ago by Chris B. Reason: typo
      • #2336891

        This is for one of the ‘manager‘s to sort out within Wordfence.
        Your IP is clean, probably an IP typo when dealing with a toxic IP
        Passed this on to the relevant staff.

        Windows - commercial by definition and now function...
        1 user thanked author for this post.
        • #2336893

          @Microfix Thanks – I’ll keep checking, because I have a problem that I can’t sort  that is getting serious!

          Chris

          Chris
          Win 10 Pro x64 Group A

          • #2337575

            I suggest that you read this post by @Kirsty as the problem was not your IP but what you tried to upload to the site 🙂

            Windows - commercial by definition and now function...
    • #2354347

      We use a VPN to encrypt our internet traffic.

      Over recent days it has become increasing more difficult to gain access to the AskWoody forums site without having to try numerous servers run by our VPN due to the site’s use of Wordfence.

      The only other site that we have been having similar problems gaining access to is one of the drug stores that is offering Covid vaccinations.

      As a result, we will be limiting our participation in AskWoody Forums moving forward.

      It is a matter of aggravation vs. benefit.

      1 user thanked author for this post.
    • #2354454

      We use a VPN to encrypt our internet traffic.

      Over recent days it has become increasing more difficult to gain access to the AskWoody forums site without having to try numerous servers run by our VPN due to the site’s use of Wordfence.

      The only other site that we have been having similar problems gaining access to is one of the drug stores that is offering Covid vaccinations.

      As a result, we will be limiting our participation in AskWoody Forums moving forward.

      It is a matter of aggravation vs. benefit.

      People here think it’s super good to deny you access based on Wordfence’s unprofessional behavior.
      The whole world propagates the use of VPN, only here you will be denied the use. That only makes using the internet more unsafe !!
      The so-called dangerous IP lists are simply not maintained, they are polluted with old data, while Wordfence has a dubious reputation for security. At the same time, cookies, trackers and fingerprints are actively maintained.
      Why?

      Screenshot_20210401-050723

      * _ ... _ *
      • #2354531

        WordPress is one of the most actively attacked platforms out there, WordFence is a reputable company and the software is maintained. Note that we pay for the software it is not a free plug in.  Attackers us obfuscation these days and thus the actions you are taking to hide your tracks are also the same patterns that attackers use.

         

        Susan Bradley Patch Lady/Prudent patcher

        • #2354572

          Susan

          We are not disputing that, WordFence is a reputable company and that their software is maintained.

          And we are not disputing that, attackers use obfuscation and that the actions we are taking to hide our tracks are also the same patterns that attackers use.

          We are simply saying that WordFence is an impediment to our using your site.

          The primary reason we use a VPN is to encrypt our web traffic between our computers and the servers of our VPN.  Our cable television/internet service provider clearly states in their terms of service that they monitor our traffic in order to push targeted advertising to our equipment.

          But we question the value of WordFence in defending your site.

          We were using one our VPN’s server in Norway for a number of months while gaining access to the AskWoody site.  Then one day we were blocked from entrance by WordFence.

          It took a minute or at most two to regain access to the AskWoody by simply trying two or three of our VPN’s other servers in different countries.  We are now gaining access to your site via a server in Cyprus.

          I am sure that attackers, with nominal skills, can use the same approach – bring into question the value of WordFence in defending your site.

          We spend a significant amount of time scoring the internet as part of normal business activity and have not run into another site that blocks our traffic similar to the way WordFence does.  From time to time we are blocked from a site because the owner does not conduct business in the country where our VPN’s server is located. An example is CVS pharmacy that does no provide COVID vaccinations outside of the United States.

          1 user thanked author for this post.
          • #2354600

            WordFence also looks for patterns of attacks, so if there is someone attempting to do brute force, SQL injections, etc, so mere IP address alone is not the only protection.  I apologize but unfortunately WordFence is the recommended firewall for our site from our vendors. I don’t have an alternative, unfortunately.

             

            Susan Bradley Patch Lady/Prudent patcher

            1 user thanked author for this post.
          • #2354623

            Kathy?  I have a ticket open with WordFence. When you got blocked do you remember the exact warning message you got?  Reason is the different messages will tell us what the software is reacting to/what it’s interpreting is going on.

            Susan Bradley Patch Lady/Prudent patcher

            • #2354627

              Susan

              Thanks for getting back.

              I do not remember the exact warning message we got but WordFence asked us to block and copy a long string of text and paste it into to the second part of the message. They also asked for an email address (we used the one that you have on record) and some other information.

              At the time, I was probably using a NordVPN server in Norway but can not be sure because I was most likely moving from server to server to gain access to your site.

              I do not think that an open ticket will help at this point since I do not recall what server I was using in Norway.

              Since I was blocked, I have been logging on from, at a minimum, Cyprus, Portugal, Singapore, and North Macedonia.

              I am afraid that I will simply have to continue to game the system to log onto the site.

    • #2354457
      • I use NordVPN and had to try six different servers to gain access to the Woody site just now because of Wordfence.

        Did not have a similar problems with my bank, credit card companies, Newegg, Amazon, etc.

        As a result, I will probably be visiting the Woody site less often.

        Same here. Those VPN’s are GOOD throughout the world, banks amazon google fbi nsa etc  etc. Only here the world is different, peculiar… Not maintaining the software and a false sence of security, perhaps.

      * _ ... _ *
    • #2354472

      Using a VPN from your home / office is of very little value because the connection you are using is trustworthy – it’s your connection.

      Using a VPN when travelling has some benefit if you use free / public wifi as these can be compromised.

      Using a VPN to connect to home / office when travelling is good security.

      Using a VPN to keep your web surfing private is probably a waste of time these days as most sites, certainly important ones like mail and banking, use SSL. With SSL your data is encrypted from your machine to the remote site and back. A VPN will prevent your ISP finding out what sites you have visited, but the VPN provider still knows.

      cheers, Paul

      1 user thanked author for this post.
    • #2354499

      Whether VPN is good, bad or indifferent, that is what I use for working from home at NASA, because that’s how NASA likes it. Maybe they know something about VPN that others might not?

      Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

      MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
      Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
      macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

      2 users thanked author for this post.
      • #2354501

        For shure, NASA will know more than the average man can ever imagine.
        Though some simple course in IT Security and Privacy might be clarifying for lots of people.
        I worked here for many-many years in ITsecurity as architect and consultant-specialist at ALL levels, and I am amazed how easily most people deal with the basic safety issues.
        Here it seems in vain to bring in anything meaningful (mostly it is wiped away because it’s inconvenient or so)

        * _ ... _ *
    • #2354505

      Maybe they know something about VPN that others might not?

      Working from home to office using VPN is the secure way.
      Using VPN to connect to internet sites… has no value unless you want to workaround the Chines Great Wall, connect to Netflix, Disney+.. from blocked countries…connect to Torrent sites…

      The question that I never found an answer for is : what sort of connection does the VPN server I connect to use to connect to the site/server.. I want. Is there a danger of MITM…

    • #2354594

      Rookie ddos mitigation that alienates your userbase, great site :rollseyes:

      • #2354602

        I’m all ears if you have a better solution for WordPress.

        Susan Bradley Patch Lady/Prudent patcher

        1 user thanked author for this post.
    • #2354612

      I’m all ears if you have a better solution for WordPress.

      It’s how WordFence is used in WordPresss, that is a choice.
      Blocking most sincere VPN-IP’s is just not done, at least with many other and serious sites to the humble opinion of many IT-crimefighters.
      VPN’s offer the possibility of a safer and more private internet connections, and many large organizations (private, banks and state) all over the world promote the use of VPN.

      * _ ... _ *
      • #2354615

        I apologize, I’m not seeing where I have settings over good versus bad VPNs?  Can you point me to this setting?

        May I just say that I’ve seen security in banks – I would walk in and they’d still be running XP, I don’t consider them to be the gold standard of security.  🙂

         

        Susan Bradley Patch Lady/Prudent patcher

      • #2354619

        many large organizations (private, banks and state) all over the world promote the use of VPN

        I’d be interested to see any examples of banks promoting the use of VPNs, as many block them.

        Isn’t it VPN companies who try to promote their services for supposedly safer online banking?

        • #2354625

          Our bank, an internationally recognized institution, specifically asked if we were using a VPN once when we had trouble logging into our account.

          When we said yes, their IT staff worked their magic and our problem logging in to our account via. a VPN went away.

          That was several years ago.

          • #2354634

            That bank didn’t encourage VPN use though.

            • #2354635

              The bank did not discourage VPN use.

              There representative simply asked if we were using a VPN

            • #2354641

              May I ask you a BIG favor?  The next time you get blocked email me at sb@askwoody.com and I’ll forward the IP on to Wordfence.

              My apologies but I really don’t want to drop the real time IP block list 🙁

              This is what the folks from WordFence said:

              “Nothing is standing out there as being misconfigured. My best guess is, as the forum posts mention, that the VPN IPs being used are simply on our Real-Time IP Blocklist, due to other users abusing the IPs. Your option would be to disable the Real-Time IP Blocklist feature, however, that will open you up to have the firewall deal with a lot more brute force attempts and complex attempts to get into the site. These are the sort of attempts that the blocklist prevents from even being attempts. If you disable the Blocklist, you will still be protected by the firewall, however, it will need to do more work technically.

              ​If you’re able to see some of the IPs being blocked (or the users can share with you the IPs they are on when they are blocked), I can look them up on my side and let you know what I’m seeing.”

              Susan Bradley Patch Lady/Prudent patcher

            • #2354663

              Susan,

              I will keep you posted.

               

    • #2354683

      VPN’s offer the possibility of a safer and more private internet connections

      They don’t
      Prevent you going to dodgy /phishing sites.
      Downloading malware.
      Sending your money to scammers.
      Prevent your browsing being tracked.

      They do
      Protect you from man in the middle attacks on public wifi.
      Prevent you interacting with some sites.
      Slow your browsing.

      As a client / site visitor, they are of little value.
      As a service provider – remote access etc – they provide protection to your infrastructure from all and sundry on the internet.

      cheers, Paul

      1 user thanked author for this post.
    Viewing 17 reply threads
    Reply To: Wordfence

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: