pme2013

Hey Matheus,

Yes I’ve enabled WP_DEBUG as well as looked at error logs. I went and followed another guide on how to fix the errors that I found in my error logs.

[18-Feb-2016 21:29:31 UTC] PHP Warning: Cannot modify header information – headers already sent by (output started at /home/dancelinkco/public_html/wp-includes/class.wp-styles.php:1) in /home/dancelinkco/public_html/wp-includes/pluggable.php on line 1196

What I did was I went and removed the extra spacing and indentation that was found on the class.wp-styles.php. However that still didn’t fix it.

I just realized that the login problem occurred at the same time that I received this email from my hosting provider. Do you think this may have something to do with my login issues?

We regret that it has become necessary to issue this Policy Enforcement Notice for violation of our AUP or TOS available at http://knownhost.com/company/aup.html and http://knownhost.com/company/tos.html based on complaints and/or logs of abuse attached or included below. We will review the complaints and/or logs again if you believe this is an error. However, it is your responsibility to investigate your account and reply promptly to avoid disconnection. You are required to suspend or remove all domains, sites, users, and/or exploits causing this issue.
Pending your reply with your comments, questions, or actions to resolve this issue, the account is:
[ ] Monitored for Additional Violations
[X] Accessed for Investigation, Cleaning, Hardening, or Securing
[ ] Traffic filter applied
… [ ] Outgoing traffic: none
… [ ] Incoming traffic: none
[X] Suspended in:
… [ ] 48-Hours
… [X] 24-Hours
… [ ] 12-Hours
… [ ] 6-Hours
… [ ] 1-Hour
… [ ] 0-Hours

It has come to our attention that a large amount of spam is originating from your server. As you can see, this is the current mail queue when we logged into your server during the investigation:
=====
cP/vz41-wa/16133 [email protected] [/]# exim -bpc
18772
=====

For your information I’ve provided an example of the mail message(s) originating from your server:
=====
https://paste.privatesystems.net/pastes/c7a57ceaac754093546fe4b4b5daa8b0
=====

During this investigation, we’ve discovered the majority of the messages are originating from these absolute file path(s) with the corresponding number of messages in front of the path:
=====
35789 cwd=/home/dancelinkco/public_html/wp-content/themes/twentyfifteen
=====

We’ve been able to determine the following files appear to be responsible for the majority of these messages. These files have been disabled by removing executable permissions at the time of this review:
=====
https://paste.privatesystems.net/pastes/9af2855cb140eaaf4bf6ba04273cebc0
=====

With all of the information provided in this Abuse ticket, you will need to review the issues, remove all malicious files and ensure that no other unsolicited bulk email is originating from your server. If CMS versions have been provided and are outdated, you will also need to ensure these are updated. Please understand that we are attempting to bring this to your attention so that they can be corrected. We appreciate your continued patronage with KnownHost.