Jak řešit napadený WordPress?

darebacik

  • *****
  • 1 005
    • Zobrazit profil
    • E-mail
Jak řešit napadený WordPress?
« kdy: 26. 10. 2026, 15:31:04 »
Pre weby pouzivam vlastne LXC, kde mam jednotky WP webov. Ak nie su problemy, tak si to velmi nevsimam, ale nedavno som si vsimol podozrive zvysenie CPU z 1-2% na 4% a neskor na 8%. Taktiez sa k tomu adekvatne zvysil network traffic.
Ihned som skusil ako prve TOP

Kód: [Vybrat]
   PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND                                                                                                                                                                                                                           
  42707 www-data  20   0  390848 104904  85160 S   8,3   5,0   0:22.46 php-fpm8.5                                                                                                                                                                                                                         
  42700 www-data  20   0  390820 103060  83936 R   5,3   4,9   0:23.02 php-fpm8.5                                                                                                                                                                                                                         
  42699 www-data  20   0  368496 100908  82012 S   3,3   4,8   0:22.05 php-fpm8.5

Cize problem je PHP-FPM (to uz je to opravene 8.5.12).
Avsak problem sa uz taha viac ako mesiac

Kód: [Vybrat]
tail -f /var/log/apache2/access.log

178.239.167.140 - - [24/Oct/2026:21:56:08 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.137 - - [24/Oct/2026:21:56:08 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.137 - - [24/Oct/2026:21:56:09 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.84 - - [24/Oct/2026:21:56:10 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.140 - - [24/Oct/2026:21:56:11 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.75 - - [24/Oct/2026:21:56:14 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.75 - - [24/Oct/2026:21:56:15 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
192.168.20.1 - - [24/Oct/2026:21:56:16 +0200] "POST /wp-cron.php?doing_wp_cron=1792871776.7348909378051757812500 HTTP/1.0" 200 259 "-" "WordPress/7.1.3; https://www.abcd.sk"
185.223.235.75 - - [24/Oct/2026:21:56:16 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:19 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:19 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.85 - - [24/Oct/2026:21:56:19 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.139 - - [24/Oct/2026:21:56:20 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:19 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
77.243.183.58 - - [24/Oct/2026:21:56:20 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.139 - - [24/Oct/2026:21:56:20 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.85 - - [24/Oct/2026:21:56:20 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.139 - - [24/Oct/2026:21:56:21 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.139 - - [24/Oct/2026:21:56:21 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:22 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:22 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.85 - - [24/Oct/2026:21:56:22 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.139 - - [24/Oct/2026:21:56:22 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.75 - - [24/Oct/2026:21:56:22 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:22 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.75 - - [24/Oct/2026:21:56:24 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.139 - - [24/Oct/2026:21:56:24 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
185.223.235.75 - - [24/Oct/2026:21:56:26 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
77.243.183.58 - - [24/Oct/2026:21:56:27 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:29 +0200] "GET /kontakt/ HTTP/1.0" 200 15319 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:29 +0200] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
212.11.27.144 - - [24/Oct/2026:21:56:29 +0200] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
211.149.133.222 - - [24/Oct/2026:21:56:30 +0200] "GET / HTTP/1.0" 200 15691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
Vyzera to na problem s kontakt form 7

Kód: [Vybrat]
sudo tail -f /var/log/apache2/access.log | grep "contact-form-7"
212.11.27.153 - - [25/Oct/2026:06:55:14 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
185.223.235.75 - - [25/Oct/2026:06:55:16 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
185.223.235.84 - - [25/Oct/2026:06:55:17 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
185.223.235.84 - - [25/Oct/2026:06:55:17 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
185.223.235.75 - - [25/Oct/2026:06:55:17 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
178.239.167.139 - - [25/Oct/2026:06:55:18 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
194.127.173.27 - - [25/Oct/2026:06:55:20 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
178.239.167.139 - - [25/Oct/2026:06:55:19 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
194.127.173.27 - - [25/Oct/2026:06:55:20 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
77.243.183.58 - - [25/Oct/2026:06:55:24 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
77.243.183.58 - - [25/Oct/2026:06:55:25 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
178.239.167.139 - - [25/Oct/2026:06:55:27 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
178.239.167.139 - - [25/Oct/2026:06:55:28 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
193.124.20.171 - - [25/Oct/2026:06:55:35 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
185.223.235.84 - - [25/Oct/2026:06:55:37 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
193.124.20.171 - - [25/Oct/2026:06:55:37 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
185.223.235.84 - - [25/Oct/2026:06:55:39 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
77.243.183.58 - - [25/Oct/2026:06:55:48 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
77.243.183.58 - - [25/Oct/2026:06:55:48 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
212.11.27.144 - - [25/Oct/2026:06:55:48 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
77.243.183.58 - - [25/Oct/2026:06:55:48 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
178.239.167.140 - - [25/Oct/2026:06:55:49 +0100] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.0" 200 4573 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
77.243.183.58 - - [25/Oct/2026:06:55:48 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
212.11.27.144 - - [25/Oct/2026:06:55:49 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
178.239.167.140 - - [25/Oct/2026:06:55:49 +0100] "POST /wp-json/contact-form-7/v1/contact-forms/439/feedback HTTP/1.0" 200 710 "https://www.abcd.sk/kontakt/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
Ako som uz napisal, mam jednotky webov a robi to len na jednej domene.
Web si (ne)pravidelne zalohujem, ale skusil som dat 3 mesiace staru zalohu, pretoze 3 mesiace som na webe nic nemenil, ale nepomohlo to. Skusil som plugin, deaktivovat aj vymazat a CPU stuplo z kvazi 4-8% na 60-80%.
Skusil som nahrat plne cisty WP bez pluginov a CPU bolo na 50-60%

Po konzultacii s AI som pridal do wp-config.php
Kód: [Vybrat]
define('DISABLE_WP_CRON', true);a do .htaccess
Kód: [Vybrat]
RewriteRule ^wp-json/contact-form-7/ - [F,L]
Kód: [Vybrat]
sudo systemctl restart php8.5-fpm && sudo systemctl restart apache2CPU zisiel na  4%.
Log v DB wp_wpmailsmtp_debug_events sa plni hlaskami
Kód: [Vybrat]
Debug Event Details
Type
Error
Date
26. októbra 2026 at 14:28
Content
Mailer: Google / Gmail
{
"error": {
"code": 429,
"message": "User-rate limit exceeded. Retry after 2026-10-26T13:43:03.991Z (Mail sending)",
"errors": [
{
"message": "User-rate limit exceeded. Retry after 2026-10-26T13:43:03.991Z (Mail sending)",
"domain": "global",
"reason": "rateLimitExceeded"
}
],
"status": "RESOURCE_EXHAUSTED"
}
}
Source
Contact Form 7
/var/www/www.abcd.sk/wp-content/plugins/contact-form-7/includes/mail.php (line: 327)

Jedine co pomoze je vyprazdnit obsah adresara s webom. Vtedy zijde CPU pod 1%.
Na obr. je mesacny graf. Kde je 1% CPU, tak to bolo OK. Potom zacali problemy


Re:Napadnuty WP
« Odpověď #1 kdy: 26. 10. 2026, 17:09:35 »
Kolega hlásí, že máte expirovaný certifikát, platnost stávajícího skončila v srpnu. Možná to s tím souvisí.

darebacik

  • *****
  • 1 005
    • Zobrazit profil
    • E-mail
Re:Napadnuty WP
« Odpověď #2 kdy: 26. 10. 2026, 17:38:09 »
Pokial uz bol 13. januar 2027, tak mate pravdu.

Re:Napadnuty WP
« Odpověď #3 kdy: 26. 10. 2026, 18:22:56 »
Pokial uz bol 13. januar 2027, tak mate pravdu.
ma pravdu

a6b

  • ****
  • 371
    • Zobrazit profil
    • E-mail
Re:Jak řešit napadený WordPress?
« Odpověď #4 kdy: 26. 10. 2026, 20:10:50 »
co tam hodit nejake ai agenty a nechat je zkontrolovat system. pak je treba zase odstranit.


Brumla

  • ***
  • 184
    • Zobrazit profil
    • E-mail
Re:Jak řešit napadený WordPress?
« Odpověď #5 kdy: Dnes v 08:04:50 »
A není to spíš spamový útok na kontaktní formulář? Podívej se do odeslané pošty toho gmail účtu. Nejsou tam úplně cizí případně divné adresy ve velkém množství?

Chyba 429 (Too Many Requests) v Gmail API znamená, že aplikace odesílá příliš mnoho požadavků za příliš krátkou dobu nebo překročila povolené limity.

Zkoušel jsi ten formulář vypnout, jestli vytížení přestane? Já teď kontaktní formulář u sebe vypnul, protože mi skrze něj začalo chodit moc spamu.