- Posts: 45
- Thank you received: 0
Yes, suspicious files reported are false positives.
Ok, if I understand correctly, the suspected file is not infected.
I have to tick it as correct?
Analyzing your logs you suffered an attack on 27-02-2019 trying to guess a valid username/password. This is known as a brute force (or dictionary) attack and Securitycheck Pro blocked all attempts. But this attack wasa conducted using a botnet, so you were attacked from a different IP every time. To avoid this kind of attacks you must enable the "backend protection" feature into the ".htaccess protection" feature of Securitycheck Pro (or adding other method as a .htpasswd file). It wasn't enabled, was it?
I sent hopefully the good log file of "Web Firewall Logs"
but can a hacker do damage without being detected by your extension?
I'm not talking about the case where he got my password of course