Search results

i found my log rotation settings Screenshot so as it was small I have now set to monthly but that does not help me - becuase it was set to 5120kb then only few days I guess?

found these Screenshot still not much help - I need to see all the POST commands from 14th May

Thank you but still bit confused! Screenshot - from here I click on Logs and see this: Screenshot I want to put a date in - say 4 days ago and it does not show from that day? when you say /var/www/vhosts/system/(sub.).YOUR-DOMAIN.COM/logs how do I view this?

So I am trying to solve a problem with regards to files being added to my Wordpress site. I found this in a Plugin Log: May 14, 2017 10:47 pm system 127.0.0.1 File modified wp-content/wflogs/config.php (old size: 615638, new size: 615638) May 14, 2017 10:23 am system 127.0.0.1...

Originally I logged this call due to the error messages I am seeing in the log like this: 82.223.8.191 [2017-03-24 21:36:41] 'CP User Login Attempt Failed' ('Client GUID': '2534f168-a20b-41c2-b753-2bf7ad6dc7b9' => '', 'Login Name': 'admin' => '') 82.223.8.191 [2017-03-24 21:36:43] 'CP User...

here is plesk-panel code Screenshot Screenshot plesk-wordpress too

Thank you for your help.. When you say xxx.xxx.xxx - do I put my computer IP address in there OR the IP address of my server? sorry for my lack of knowledge, just want to get it right...

Ok I just installed Fail2ban.. Screenshot What basic settings should I configure? no expert so please be gentle...

Thank you - have I got the correct settings? - "Allowed, excluding the networks in the list" set on and then add all the bad IP addresses?

please see screen shot Screenshot is this the best and correct way to block an ip address? see lots of this error: 82.223.8.191 [2017-03-24 21:36:41] 'CP User Login Attempt Failed' ('Client GUID': '2534f168-a20b-41c2-b753-2bf7ad6dc7b9' => '', 'Login Name': 'admin' => '') 82.223.8.191...

Thank you for the update

is there a good way to setup your file structure so as to prevent cross contamination should one of my sites get infected ? So I have my html sites in a folder called HTML and wordpress in another folder.. is there anything else you can recommend ?

thanks for your help in looking at this matter.. It still seems very weird to me that there are additional files in the Plesk version... Since my server was hacked and I have lost my business and loads of money I trust nothing now.... sad

linux - sorry I install wordpress by using the featured applications http://prntscr.com/briph1

Hello and thank you for taking time to look. The server is dedicated L4 server on linux supplied by 1and1 Plesk 12 see details here: http://prntscr.com/brio10

Hi take these 2 for example: added - wp-admin/uploader/pclzip.lib.php added - wp-admin/uploader/upload.php there is no such folder in standard WP download from wordpress.org here is a copy of the files in .txt format https://www.dropbox.com/sh/6ag9zvyas3de1o2/AABeCJ7BzDKfxc2X3x3JrHDea?dl=0

I think this is a major issue - wordpress application installs from plesk dashboard are installing infected versions of Wordpress??

I would love to know where these files are comming from?

ok thanks for your help. The only reason I ask is that went I do an install it seems to add these files which are not WP standard in 4.5.3 ? added - wp-admin/includes/upgrade.php.orig added - wp-admin/plugin-uploader.php added - wp-admin/theme-uploader.php added -...

When I install WP via featured applications it installs ok then when I check files with a scanner it picks up non wordpress files - hence my question?