Cyberfusion
Website
Platform

There is an issue which does not disrupt the main hosting service

  1. Unblocked URLs

    Traffic has dropped. We've unblocked xmlrpc.php and wp-login.php.

  2. wp-login.php traffic

    We are now seeing a lot of traffic to wp-login.php, and are blocking it.

  3. xmlrpc blocked

    We've decided to block all traffic to xmlrpc.php for the node on which multiple attacked sites run. That these sites run on this node is probably a coincidence.

    We might need to block xmlrpc.php on other nodes as well. We will monitor the situation.

  4. Requests to xmlrpc

    We are seeing a large amount of requests to xmlrpc.php files on multiple sites.

    This might be related to the wp2shell vulnerability: https://cyberfusion.io/nl/insights/wp2shell-kritiek-lek-in-wordpress/

  5. Multiple sites attacked

    Multiple sites on the node 'weekly-wonderful' are being attacked. We're deflecting it.

  6. 1/4th of sites not loading on pca cluster

    About 1/4th of on the pca cluster are not loading. We're investigating.

Experiencing an issue?

Question

Response within 4 working hours (working days from 9:00 AM to 5:30 PM Amsterdam time)

Free

Ask your question

Urgent problem

Response within 1 hour (24/7)*

*Charges may apply for this service.

Call +31 (0)40 711 44 96