SOLVED I can't stop anonymousfox attack

R

Rodrig

Member
Apr 22, 2022
7
1
3
France
cPanel Access Level
Website Owner
Hi again,

I was hopping that the website wouldn't be infected anymore, as still today I see entries in the live traffic tab of Wordfence as
" Netherlands was blocked by firewall for Known malicious User-Agents at https://delasciencealassiette.fr/wqaofwbl.php?Fox=d3wL7
5/9/2022 11:39:38 AM (2 hours 9 mins ago)"

But... I also see entries in clicky.com analytics for yesterday as:
"`23:29 El Salvador flag 190.5.159.0 /ubpxwlwy.php?Fox=d3wL7"
the same thing from 3 different IP addresses, that are NOT blocked nor registered in Wordfence.
I wonder if, as it is registered in Clicky.com but not in Wordfence, it means that it got in?

I don't see any such files in the Public_html folder and no users nor email accounts created neither.


Greetings,
Rod
 
You must log in or register to reply here.
Thread starter Similar threads Forum Replies Date
Okaro In Progress CPANEL-42253 - Can't renew root server SSL certificate Server Management 5
G User with VPN intermittently can't reach my server Server Management 4
A Can't access to WHM or any domain on my server Server Management 2
O Can't locate Cpanel/Time/TZ.pm in @INC (you may need to install the Cpanel::Time::TZ module Server Management 3
M CSF Firewall 500 error: Can't locate Cpanel/cPanelFunctions.pm Server Management 3
Similar threads
In Progress CPANEL-42253 - Can't renew root server SSL certificate
User with VPN intermittently can't reach my server
Can't access to WHM or any domain on my server
Can't locate Cpanel/Time/TZ.pm in @INC (you may need to install the Cpanel::Time::TZ module
CSF Firewall 500 error: Can't locate Cpanel/cPanelFunctions.pm
Top Bottom