Got anonymous attack – how to fix

Posted in: Newspaper
Post count: 17

Hi my website is running with this theme and due to anonymous attack i am not able to use it. something is blocking in my website, how to fix that ?

Mon Sep 18 06:13:05.769955 2023] [access_compat:error] [pid 32098:tid 47251336562432] [client 103.139.0.84:33258] AH01797: client denied by server configuration: /cloudsin/kavimaalai/public_html/xmlrpc.php
[Mon Sep 18 06:11:13.826399 2023] [security2:error] [pid 31291:tid 47251185977088] [remote 39.109.216.9:2164] [client 39.109.216.9] ModSecurity: Access denied with code 403 (phase 2). Matched phrase “anonymousfox” at ARGS:log. [file “/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/006_i360_4_custom.conf”] [line “273”] [id “77142102”] [msg “IM360 WAF: Block URI containing malicious URLs||T:APACHE||SC:/cloudsin/kavimaalai/public_html/wp-login.php||”] [severity “CRITICAL”] [tag “service_i360custom”] [hostname “kavimaalai.com”] [uri “/wp-login.php”] [unique_id “ZQecqbpXxGuirS4-RFqoUgAATAk”], referer: https://kavimaalai.com/wp-login.php
[Mon Sep 18 06:08:20.296547 2023] [security2:error] [pid 8187:tid 47251192280832] [remote 39.109.216.9:2101] [client 39.109.216.9] ModSecurity: Access denied with code 403 (phase 2). Matched phrase “anonymousfox” at ARGS:log. [file “/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-apache/006_i360_4_custom.conf”] [line “273”] [id “77142102”] [msg “IM360 WAF: Block URI containing malicious URLs||T:APACHE||SC:/cloudsin/kavimaalai/public_html/wp-login.php||”] [severity “CRITICAL”] [tag “service_i360custom”] [hostname “kavimaalai.com”] [uri “/wp-login.php”] [unique_id “ZQeb_NzdDzz1zF1Wm6xz1AAAgAw”], referer: https://kavimaalai.com/wp-login.php

Post count: 21065

Hello @vjteklabs!

Read all about ModSecurity here and disable it: https://forum.tagdiv.com/general-options-may-interfere-newspaper-theme/

Thank you!

Post count: 17

Things got cleared on my website. after attack, only home page and few pages working. Few pages getting error. Can help to fix on this ?
I can provide the admin credentials to rectify it.

This page isn’t workingwangocorp.com is currently unable to handle this request.
HTTP ERROR 500

Thanks,
Vijay

Post count: 21065

Hello Vijay!

Please contact us via email at contact@tagdiv.com and provide the following:
– admin url and credentials
– cpanel url and credentials
– a link to this topic in order to identify you
We will take a look and try to help you asap.

Thank you!

Post count: 17

Hi team,
Thanks for the help on this. i Have been struggling to fix last 8 months and not able to . the error says something on the td composer is corrupted. please help to fix on this.

https://forum.tagdiv.com/topic/got-anonymous-attack-how-to-fix/?bbp_reply_to=501268&_wpnonce=afff40f99c#new-post

Thanks,
Vijay

Post count: 17

I wrongly sent it here, please help to delete the thread here.

Post count: 9544

obviously, change your passwords asap

Viewing 7 posts - 1 through 7 (of 7 total)
The forum ‘Newspaper’ is closed to new topics and replies.