WordPress.org

Ready to get started?Download WordPress

Forums

File blocked (website is down currently help!) (3 posts)

  1. ax2music
    Member
    Posted 1 year ago #

    Was having trouble with my website themommaven.com today and contacted our web host who replied telling me.

    "/home/mommaven/public_html/wp-content/plugins/shell.php: Atomicorp.honeypot.hex.php.cmdshell.cih.210.UNOFFICIAL FOUND

    Of the above, the oldest was:

    File: /home/mommaven/public_html/wp-content/plugins/shell.php
    User: mommaven, Group: mommaven
    Size: 167639
    Modify: Sat, 01 Dec 2012 16:43:32 -0600 (1354401812)
    Change: Sat, 01 Dec 2012 16:57:14 -0600 (1354402634)

    Here is a log entry from when the above file was uploaded to the account by someone who was abusing an otherwise legitimate file on the site to do so:

    217.66.156.97 - - [01/Dec/2012:16:57:12 -0600] "POST /wp-content/plugins/livesig-ajax-backend.php HTTP/1.1" 200 197 "-" "Mozilla/5.0 (Windows NT 6.0; rv:17.0) Gecko/17.0 Firefox/17.0"

    Right after that, the hacker used the newly-uploaded shell file:

    217.66.156.97 - - [01/Dec/2012:16:58:57 -0600] "GET /shell.php HTTP/1.1" 404 15735 "-" "Mozilla/5.0 (Windows NT 6.0; rv:17.0) Gecko/17.0 Firefox/17.0"

    In order to protect the site, we have blocked the file used to upload the shell file.

    File Blocked: /home/mommaven/public_html/wp-content/plugins/livesig-ajax-backend.php "

    Any ideas how to remedy this? We tried updating the WordPress and reinstalling wordpress even...

  2. ax2music
    Member
    Posted 1 year ago #

    New development it appears the website is working on google chrome ONLY. We have tested on several computers at different locations and it will only work on chrome

  3. WPyogi
    Volunteer Moderator
    Posted 1 year ago #

Topic Closed

This topic has been closed to new replies.

About this Topic