• Hi,

    Please help.

    I lost access to my cpanel and wordpress admin login due to a xmlrpc attack. My hosting provider says they have removed my IP address from the CSF deny list. However, I still cannot access anything.

    Please, what do I do?

    My website is no longer loading as well.

    Thank you!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator t-p

    (@t-p)

    I still cannot access anything…

    My website is no longer loading as well.

    Have you asked your hosting provider why is it so?

    Site URL?

    Thread Starter Tech@DLtd

    (@dvees)

    http://www.dvees.com.

    Yes, I just spoke to them. They said it’s a wordpress issue because my server is pointing to wordpress. I really dont know what to do

    Thank you for responding

    Moderator t-p

    (@t-p)

    – Please check the error logs on your server for a more specific error message and see why it’s failing. If you need help locating them, ask your hosting provider to help you with that.
    – If you cannot find error logs or if you don’t find any helpful info in the error logs, try Enabling debugging

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Are they saying you’re the target or source of the attack?

    If you are the target, you can block access to xMLRPC for a while.

    add this at the top of your .htaccess file

    # Block WordPress xmlrpc.php requests
    <Files xmlrpc.php>
    order deny,allow
    deny from all
    allow from 123.123.123.123
    </Files>

    If you don’t use XMLRPC for access from your home computer, you can ddelete the “allow” line. Note that this may break some features of Jetpack, so think of it as a temporary measure while you wait for the attackers to move on to someone else.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘xmlrpc attack: Unable to access cpanel and wordpress admin’ is closed to new replies.