as per the IP ( 192.124.249.17) details, its connecting to sucuri server.
is it really suspicious? can anybody help me to know what is this connection and for which purpose?
Executable:
/opt/cpanel/ea-php73/root/usr/bin/php-cgi
Command Line (often faked in exploits):
/opt/cpanel/ea-php73/root/usr/bin/php-cgi
Network connections by the process (if any):
tcp: 10.0.0.4:37620 -> 192.124.249.17:443
]]>I seem to be getting a lot of activity showing as suspicious allegedly from amazonaws domains. One such example is below. Any ideas would be appreciated!
——————————
30 April 2020, 18:24 https://www.doggieboat.co.uk//wp-json/wp/v2/users
GET REST API HTTP 403 Forbidden 512 ms Details
Request to REST API denied
34.253.200.58
ec2-34-253-200-58.eu-west-1.compute.amazonaws.com Opera on Windows
——————————
30 April 2020, 18:24 https://www.doggieboat.co.uk//wp-content/themes/twentysixteen/index.php
GET HTTP 403 Forbidden 148 ms Details
Probing for vulnerable PHP code Denied
34.253.200.58
ec2-34-253-200-58.eu-west-1.compute.amazonaws.com Opera on Windows
——————————
For reference, the twentysixteen theme is NOT installed!
Regards
Tim
My server is in Arizona, I live near Chicago.
How do I fix this issue?
]]>Here’s what happens and everything is based on refusing to submit a form:
Number of active lockouts: 4
Last lockout was added: February 6, 2019, 7:01 pm for IP 50.4.185.217 (d4-50-217-185.evv.wideopenwest.com)
Reason: Multiple suspicious activities were detected
I lau
]]>I need help! I am new to WordPress. I was activating plug ins for my website www.ellenstebbins.com and got an error message. I then looked at my website and google had flagged it as a reported attack site.
I went to google to send a request to resolve the issue and they want to verify my site. I see the text I need to insert but I have NO idea where to insert it.
Can anyone please help me????
THANK YOU! Ellen
]]>