Bonjour à tous,
Depuis peu, en cherchant à accéder à mon site WordPress https://trotterstv.club/ je tombe sur une page d'erreur "404 Not Found" avec marqué en dessous "nginx".
Je suis chez OVH avec hébergement Pro.
Après quelques recherches j'ai cru comprendre que nginx est un serveur proxy, mais je n'ai absolument aucune compétence à ce niveau et je ne comprends pas pourquoi l'URL cherche à communiquer avec ce serveur.
Je précise aussi que certaines sections dans WordPress sont devenues inaccessibles aux admins (page Forbidden) comme notamment la modification de profils admin, et lorsqu'on veut ajouter une extension.
J'ai contacté l'assistance OVH qui nous demande d'effectuer une restauration de la base de données, ce qui a été fait plusieurs fois mais ne règle pas le problème.
Est-ce que quelqu'un aurait déjà croisé ce problème ? Savez-vous comment le résoudre ?
Merci par avance.
je tombe sur une page d'erreur "404 Not Found" avec marqué en dessous "nginx".
Bizarre, c'est Apache qui envoie cette erreur !!
---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.21
Accept: */*
Accept-Encoding: identity
Host: trotterstv.club
Connection: Keep-Alive
---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
date: Wed, 26 Jun 2024 13:48:03 GMT
content-type: text/html;charset=UTF-8
transfer-encoding: chunked
server: Apache
x-powered-by: PHP/7.4
vary: Accept-Encoding
x-iplb-request-id: 200141D008001D380000000000000101:D0EE_200141D0030100000000000000000028:0050_667C1C13_B1916:43F2
x-iplb-instance: 52413
ça pue le piratage ...
Merci pour ta réponse. En effet, on a sûrement été hackés, OVH vient de fermer notre site et nous a envoyé ce mail :<br /><br />Bonjour,<br /><br />Nous sommes intervenus sur votre Hébergement Web lié au nom de domaine trottev.cluster028.hosting.ovh.net chez OVH.<br /><br />Nous avons fermé votre hébergement Web pour la raison suivante :<br /><br />Hosting hacked, please contact support :<br /><br />ovh_suspicious_eval_b64 /homez.985/trottev/www/africa/wp-content/plugins/7ac83c29fd495a111bf531ab5cfea622/wp-go.php<br />ovh_suspicious_start_eval /homez.985/trottev/www/africa/wp-content/plugins/7ac83c29fd495a111bf531ab5cfea622/wp-go.php<br />_HEX_base64_inject_unclassed_7 /homez.985/trottev/www/africa/wp-content/plugins/7ac83c29fd495a111bf531ab5cfea622/wp-go.php<br />_HEX_php_base64_inject_180 /homez.985/trottev/www/africa/wp-content/plugins/7ac83c29fd495a111bf531ab5cfea622/wp-go.php<br />_HEX_base64_inject_unclassed_6 /homez.985/trottev/www/africa/wp-content/plugins/7ac83c29fd495a111bf531ab5cfea622/403.php<br />_HEX_php_base64_inject_179 /homez.985/trottev/www/africa/wp-content/plugins/7ac83c29fd495a111bf531ab5cfea622/403.php<br />_HEX_base64_inject_unclassed_6 /homez.985/trottev/www/africa/wp-includes/ID3/index.php<br />_HEX_php_base64_inject_179 /homez.985/trottev/www/africa/wp-includes/ID3/index.php<br />ovh_cmsdetection_wordpress /homez.985/trottev/www/africa/wp-includes/class-wp.php<br />ovh_malware_php_obfuscated_004 /homez.985/trottev/www/africa/wp-login.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/africa/wp-login.php<br />ovh_malware_php_obfuscated_004 /homez.985/trottev/www/africa/wp-admin/plugin-install.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/africa/wp-admin/plugin-install.php<br />ovh_malware_php_obfuscated_004 /homez.985/trottev/www/africa/wp-admin/setup-config.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/africa/wp-admin/setup-config.php<br />ovh_suspicious_eval_incoming /homez.985/trottev/www/pariswood/wp.php<br />ovh_malware_php_obfuscated_004 /homez.985/trottev/www/pariswood/wp-admin/plugin-install.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/pariswood/wp-admin/plugin-install.php<br />ovh_malware_php_obfuscated_004 /homez.985/trottev/www/pariswood/wp-admin/setup-config.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/pariswood/wp-admin/setup-config.php<br />ovh_malware_php_obfuscated_004 /homez.985/trottev/www/pariswood/wp-login.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/pariswood/wp-login.php<br />ovh_suspicious_printable_hex_in_string /homez.985/trottev/www/pariswood/wp-content/litespeed/index.php<br />darkencode_WebShell_Generic_PHP_5 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/text.php<br />ovh_suspicious_eval_b64 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/b.php<br />ovh_suspicious_eval_incoming /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_cih_222 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_cih_227 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_cih_233 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_egyspider_229 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_egyspider_232 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_egyspider_233 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_egyspider_234 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_egyspider_240 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_lib2_296 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_lib2_297 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_lib2_298 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_lib2_309 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_r57_329 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_r57_330 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_r57_340 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />_HEX_php_cmdshell_r57_341 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/sm.php<br />ovh_malware_fallaga_tn_shell /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/cgi.php<br />ovh_suspicious_eval_b64 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/tes.php<br />ovh_suspicious_start_eval /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/tes.php<br />_HEX_base64_inject_unclassed_7 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/tes.php<br />_HEX_php_base64_inject_180 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/tes.php<br />ovh_suspicious_eval_b64 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/lock360.php<br />ovh_suspicious_start_eval /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/lock360.php<br />_HEX_base64_inject_unclassed_7 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/lock360.php<br />_HEX_php_base64_inject_180 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/lock360.php<br />darkencode_WebShell_Generic_PHP_5 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/column.php<br />ovh_suspicious_eval_b64 /homez.985/trottev/www/pariswood/wp-content/plugins/7906ddcc96544317baa5afbf08715963/wp-go.php<br />ovh_suspicious_start_eval /homez.985/trottev/www/pariswood/wp-content/plugins/7906ddcc96544317baa5afbf08715963/wp-go.php<br />_HEX_base64_inject_unclassed_7 /homez.985/trottev/www/pariswood/wp-content/plugins/7906ddcc96544317baa5afbf08715963/wp-go.php<br />_HEX_php_base64_inject_180 /homez.985/trottev/www/pariswood/wp-content/plugins/7906ddcc96544317baa5afbf08715963/wp-go.php<br />_HEX_base64_inject_unclassed_6 /homez.985/trottev/www/pariswood/wp-content/plugins/7906ddcc96544317baa5afbf08715963/403.php<br />_HEX_php_base64_inject_179 /homez.985/trottev/www/pariswood/wp-content/plugins/7906ddcc96544317baa5afbf08715963/403.php<br />ovh_suspicious_eval_b64 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />ovh_suspicious_eval_incoming /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />ovh_suspicious_hackedby /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_cmdshell_egyspider_229 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_cmdshell_egyspider_232 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_cmdshell_egyspider_233 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_cmdshell_egyspider_234 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_cmdshell_egyspider_240 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_575 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_576 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_586 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_587 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_588 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_589 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_590 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_591 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_706 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />_HEX_php_whmcs_decrypt_707 /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/alf.php<br />ovh_suspicious_eval_incoming /homez.985/trottev/www/pariswood/wp-content/plugins/7a4cc0bdaba4842fadd023fa84365eb5d29db885/src/ui/about.php<br /><br />Pour rétablir ce service, merci de répondre à ce ticket en nous indiquant quelles corrections ont été apportées par vos soins.<br /><br />Si vous avez besoin d'aide pour intervenir sur vos scripts, nous vous invitons à vous rapprocher de nos partenaires spécialisés :<br />https://partners.ovh.com/<br /><br />Cordialement,<br /><br />Le support OVH Web.
Bonjour @93687e649fe8d86e95bf
Faire une restauration complète de votre site depuis la dernière sauvegarde faite sur votre PC
Voir dans mon guide le paragraphe :
Ub - Restauration complète de votre site depuis votre PC
https://wordetweb.com/word-et-web/WORDPRESS-guide-installation-de-WordPress-premier-domaine-chez-OVH-FR.htm#Ub-_Restauration