pdjp

Thx for the explanation, only PHP requests makes sense. 🙂

The suspicious function is not a normal WP plugin, it’s the Pano2VR player, which loads tons of images and additional product information from the normal WP posts via iframe. I don’t know how it works, but the complaining people were all using that function before it happened.

Thx, great work. 🙂

But another question about this audit log: i set up “events to log” to User/Plugin/Theme changes only and thought that recent activity would show only things from these categories (because it’s called “events to log”). But why are Firewall warnings in this list? And is there a way to see who is blocked at the moment?

Also a cumulative block duration could be interesting. Like bots being blocked for 5min. And the next time for 30min. And so on. I think Wordfence does it that way.

Hi @jawedrs,

yes, a restriction for users that are not logged in would be a good alternative. 🙂 I tried the plugin Simple Page Access Restriction for just “logged in yes/no”-logic and that worked for me, because most pages i work on don’t have guest accounts.