Suspicious WordPress installation found

Luis Falcon

• April 17, 2024 02:00
• Edited

I couldn't find a way to log in with my usual username, now I have to login with a cpanel id and I don't have a way to edit my name... 

Anyway, I started receiving a lot of these messages today, the problem is that I can't find anywhere where to turn them off, even as the body of the message says there is such a place.

Here is the body of the message:

The following WordPress installations are quarantined: Website "Site Name" (site.domain.com): Unable to finish running an operation on this site in 60 seconds. Operation was canceled. This is most likely caused by a server load spike, uncommon directives in wp-config.php, or a malware infection. Try running the operation again later. If this problem persists, make sure there are no customizations in wp-config.php that could slow down parsing this file, and consider checking the website for viruses and malware. The system generated this notice on Wednesday, April 17, 2024 at 12:01:56 AM UTC. “WPT::AdminSuspiciousInstance” notifications are currently configured to have an importance of “Low”. You can change the importance or disable this type of notification in WHM’s Contact Manager at: https://host.name.com:2087/scripts2/editcontact?event=Application

• 

  Unnamed User

  • June 27, 2024 04:43

  Actually, I found the solution. Login to cPanel as root and go to WP Toolkit. Click on Settings near the top of the page and there is a link "Manage email notifications". Click on that and you can turn these off from there.  

  Hope this helps somebody!

  1
• 

  Andrew Nemeth

  • April 17, 2024 08:02

  Have you clicked on the link in the message? 

  Andrew N. - cPanel Plesk VMWare Certified Professional
  Do you need immediate assistance? 20 minutes response time!* Open a ticket
  EmergencySupport - Professional Server Management and One-time Services

  0
• 

  cPRex Jurassic Moderator

  • April 17, 2024 15:55

  Thanks for reporting this - I've created case CPANEL-44098 for our team to look into this as there is no way to disable that notification type at this time.  I'll be sure to let you know once I hear more details.

  0
• 

  Luis Falcon

  • April 17, 2024 18:51
  • Edited

  Andrew: Yes, it takes me to the correct page inside WHM to admin this kind of stuff, but there is no option for this specific kind of message.
  
  cPRex: Thank you

  0
• 

  cPRex Jurassic Moderator

  • April 17, 2024 18:36

  You're very welcome!

  0
• 

  Unnamed User

  • June 27, 2024 03:14

  Did this ever get resolved? I'm getting several clients now complaining to me for the last few days saying this exact same thing is happening to them.

  0

Please sign in to leave a comment.