Support

Hello, I'm getting almost 10 to 20 emails since I updated my admin tools to 5.1.2
404 Shield notifications

I read some forum posts but I could not find a proper answer, some of the posts say that if someone tries to access the admin area as wp-admin, this will send notifications to us. I can not think that since we upgraded it to 5.1.2 suddenly people trying to hack my site with wp-admin access.

What should we do?

Thanks,

You should be able to see in the Security Exceptions Log what URL the IP was attempting to access. Do they include the code that 404 Shield is looking for? Keep in mind that it isn't humans doing this, they are bots. Don't look for logic or time sensitivity from this sort of attack.

If you're seeing 404 errors recorded that are not in the list of 404 Shield items, we're dealing with a bug in the initial release of that feature. Just go to the Configure WAF page for 404 Shield and click Save. That will fix the bug and reduce the security exceptions to the ones listed.

ok, I went to security log, and I see a bunch of: wp-login.php
Is there is a way to disable the 404 notification? but not to disable the feature in admin tools.

So the admin tools will still block the attempts of: wp-login.php but I do not have to know about this as I'm getting lots and lots of email.

Thanks,

Certainly! Go to Web Application Firewall, Configure WAF, on the Logging and Reporting tab, go to the "Do not send email notifications for these reasons" field. When you click in that field, a dropdown list will appear. Select 404 Shield and you will no longer be notified of the 404 Shield exceptions.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.