Ghostrider07

@ Writetale

Is there any specific method of approaching amazon for this or just as abuse complaint ? if you have any direct link request to share as i too would like to raise it though i am already taking it up through my dc team.

Thanks

Since past few days i am max from
us-west-2.compute.amazonaws.com
compute-1.amazonaws.com

I plan to block it completely but will have to monitor resource, as the website is normal informative company site and not much traffic too so should be ok.

Lets see shall keep posted.

Hi,

Is there any further update on this or any further development in plugin for such monitoring.

Thanks

Hi,

Further to this topic, without installing wf we really wouldnt know about the attacks but post install we get to know the IP details etc, so need to understand how the attackers to know the targets with wordpress installed is there any method to that coz i have noticed that when site runs in demo mode usually with subdomain like test.domain.com or xyz.domain.com there are no such attacks but moment site is live like domain.com or xyz.com attacks from various parts of the world try to take over.

Thanks

Hi,

I had sent the details on given email id post which ticket was generated, any further update on this ? though my site is clean but need to get root of this to avoid further issues as such and can be helpful as lot of them are facing such issue.

Thanks

Hi Wfasa,

currently my site looks clean and i was able to track something unusual with the help of wordfence and antimalware by golts, let me tell you that one backdoor script which wordfence didnt detected but was found by antimalware residing in woocommerce folder.

i have some old such malware files with snapshot of the path in which they are found, i am emailing you on [email protected] id for your reference, i am sure it will help you to improve the working of wordfence.

overall it works great and i hope now my site remains clean, its been 6th day today as no infection as of now.

Cheers

Hi,

I had checked “scan files outside” option but still it was same, somehow i got another plugin “Anti Malware” from GOTMLS.NET and it detected some backdoor and have cleaned the same now, wordfence is also good and helping me overall, currently i see that there are 3-4 urls created under Firewall > whitelisted what is this ? it reads as below
Filter URL: /wp-admin/admin.php
Filter param: request.body[wpcf7-mail-body]
Filter Source: Whitelisted by via false positive dialog
Ip: some different IP which is not mine

Thanks

Hi Jason,

Just to update am running couple of sites on IIS 7.5 on 2008 R2 and these sites are with wordfence latest update and running fine.

Thanks

Hi,

Just to udpate further today i found new file session.php which went undetected by wordfence on initial scan i did, i got this file based on my php logs.
this file reads like below, the last line is basically encoded email id for spam and such there good numbers of list, support me to identify the root cause is it sql infection or any plugin culprit or what..
[ Malware code deleted, do not post that in these forums. ]

Hi,

It doesn’t infect existing files but somehow new files get developed with random names such as press.php, lib.php, object.php etc and this gets generated in random folders and it has date stamp of year 2013.
When I open the file its encoded in base64 with all list of spam email ids, this triggers my smtp ddos based on rules defines and smtp IP gets blocked

Thanks

Had any one found solution to this ? i have tried couple of imagemgick versions but still with all it says Ghostscript is not supported, i am trying to get this on Windows 2008 R2

Thanks

Resolved

Hello Dan,

Support Needed pls..

Sorry for late response, issue was resolved actually instead of 1.001 i was putting as 1000 understanding it as config is in gms.

Also now my single method is working fine but when i added another method of Local Pickup then below is the bug i feel

1) It takes default as Local Pickup method even when i have selected Weight based method as default.

2) When added it cart, it take Local Pickup but weight based method shows correct charges, but when i select the weight based method and then add more quantity then UPDATE CARD button doesnt work at all..but when i again click on CONTINUE SHOPPING > VIEW CART > UPDATE QUANTITY > CLICK ON UPDATE CART button then it updates the shipping amount but here again it shows LOCAL PICKUP as selected by default

Also i wanted to understand the working of the logic you gave me

Min Weight: 1.001, Handling Fee: 150, Shipping Rate: 200, Weight Step: 0.5, which is giving me 1.001-1.5 kg packages with Rs. 250, 1.501-2.0 with 350, 2.001-2.5 with 450

Thanks

Hi Dan,

Sorry for late response, issue was resolved actually instead of 1.001 i was putting as 1000 understanding it as config is in gms.

Also now my single method is working fine but when i added another method of Local Pickup then below is the bug i feel

1) It takes default as Local Pickup method even when i have selected Weight based method as default.

2) When added it cart, it take Local Pickup but weight based method shows correct charges, but when i select the weight based method and then add more quantity then UPDATE CARD button doesnt work at all..but when i again click on CONTINUE SHOPPING > VIEW CART > UPDATE QUANTITY > CLICK ON UPDATE CART button then it updates the shipping amount but here again it shows LOCAL PICKUP as selected by default..

Kindly advice….

Hi Dan,

Sorry for late response, issue was resolved actually instead of 1.001 i was putting as 1000 understanding it as config is in gms.

Also now my single method is working fine but when i added another method of Local Pickup then below is the bug i feel

1) It takes default as Local Pickup method even when i have selected Weight based method as default.

2) When added it cart, it take Local Pickup but weight based method shows correct charges, but when i select the weight based method and then add more quantity then UPDATE CARD button doesnt work at all..but when i again click on CONTINUE SHOPPING > VIEW CART > UPDATE QUANTITY > CLICK ON UPDATE CART button then it updates the shipping amount but here again it shows LOCAL PICKUP as selected by default..

Kindly advice….