Malware in /wflogs/attack-data.php?
-
Hi,
My hosting company has informed me that this path contains malware and they restricted access to this file. I tried to download it through FTP, I got disconnected a few times but finally succeeded.wp-content/wflogs/attack-data.php
In Notepad++ this file looks like this:
<?php exit(‘Access denied’); __halt_compiler(); ?>
wfWAF NULNULNULNULNULNULœNULNULNUL…
and several pages of NULNUL….
Normal Notepad shows empty spaces instead of NUL.I checked the same file on another website and on another host. They are all the same and have 40.083 bytes.
Is it a false alarm or something to worry?
Wordfence hasn’t recorded any admin logins from suspicious IPs. My FTP password is long and difficult to brute-force.
-
I think they only isolated this file, changed the permissions, but you can still download it. I also have 2 new sites on Siteground, 2 weeks old, still in maintenance mode and this file from those sites looks the same to me as the one on 1&1.
On the other hand, I find it good that they actually scan my webspace for malware, even if it should turn out to be a false alarm.
The topic ‘Malware in /wflogs/attack-data.php?’ is closed to new replies.
