
Closed
Posted
Paid on delivery
My Server4You VPS has triggered an abuse report and I need a one-time, decisive intervention. The first order of business is malware removal—locating and eradicating any malicious code sitting inside the WordPress installs. While doing so, I also need you to pinpoint which site is behind the current XML-RPC and brute-force login traffic, disable XML-RPC wherever it isn’t explicitly required, and verify no backdoor scripts are left behind. You will receive root (or sudo) SSH access. Once inside, please: • Scan every WordPress instance and the underlying file system, remove malware, and patch obvious vulnerabilities. • Trace the origin of the XML-RPC abuse and stop it without breaking legitimate functionality. • Review cron jobs, tighten file and directory permissions, check web-server configs (Apache/Nginx) and key services, and apply proven WordPress-hardening steps—fail2ban, mod_security rules, wp-config tweaks, etc. Deliverables that must be met for the job to be considered complete: 1. A clean, functioning server free of malicious code and rogue processes. 2. XML-RPC disabled site-wide unless explicitly required. 3. A brief remediation report I can forward to Server4You that explains root cause and corrective actions. This is strictly a single cleanup session; no ongoing maintenance is expected. Only apply if you have demonstrable experience securing VPS environments and hardening WordPress under SSH.
Project ID: 40208707
78 proposals
Remote project
Active 8 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
78 freelancers are bidding on average $37 USD for this job

Hello, As a specialist in WordPress development and a provider of proactive web services, our team at Our Software is ready to offer you more than just a cleanup. We understand that it takes more than malware removal to fully secure your VPS environment, which is why our approach goes beyond cleaning up the existing issue. We'll trace the origins of the attack, stop it efficiently, and spend time hardening your WordPress installations so such issues are unlikely to arise again. Our portfolio boasts numerous similar success stories, where we've not only cleaned up websites but also fortified them from future threats. By working broadly across different web projects, we've gained an in-depth understanding of diverse server environments and are experienced in using SSH access to manage comprehensive security tasks, specifically with WordPress. Choosing us for this critical task means you're securing your site with an expert who will invest time in making sure the vulnerabilities are patched, services are tight, and legitimate functionality remains intact. As a bonus, we don't just fix problems - we also prepare detailed remediation reports that help clients gain insight into the root causes and actions taken. Let's restore your VPS to its secure state promptly and efficiently together! Thanks!
$30 USD in 1 day
7.8
7.8

Hello, I have 10 years of experience in VPS management and WordPress security. I propose a full cleanup of your Server4You VPS, focusing on malware removal and security hardening. I will locate and eliminate malicious code, disable unnecessary XML-RPC, and secure your WordPress sites. A detailed remediation report will be provided to address the abuse report. I ensure a clean, fully functioning server upon completion. Regards, VishnuLal NB.*
$50 USD in 1 day
7.7
7.7

hello sir, I need to block all backdoors or fix loopholes where these malwares are injected but first i need to discuss with you little more. I am ready to discuss with you right now. Thanks
$20 USD in 7 days
7.1
7.1

Hi, I have 10 years of experience and knowledge as system administrator setup and management of different Linux Web Hosting Servers, AWS servers,Cloud Servers, GPU Servers, Server Monitoring, Server Security, Server Optimisation, Mailing Servers, Email Marketing, SSL, DNS, Apache, Nginx, etc with Cpanel, Plesk, Virtualmin or other panels. Services such as cPanel/WHM, Plesk, Virtualmin LAMP Stack, Tomcat, MySQL/MariaDB, Zimbra, Postfix mail server, Mailenable, smarter mail, MS SQL,AWS , etc. Please discuss to start. Thank you
$35 USD in 1 day
7.5
7.5

Hi there, We have reviewed your project and are pleased to assist you with wordpress cleanups. The work can be started right now and completed in a few hours. With more than ten years of experience, we are a seasoned server-cloud infrastructure management business. We currently oversee fewer than 400 servers, including VPS boxes, dedicated boxes, and cloud instances. We also provide server management starting at $39.00 per month. We would be happy to discuss the project in greater detail and work on a solution over chat. Ping us in conversation so you may learn more about us. Regards The Skynats Team
$40 USD in 1 day
7.1
7.1

Hello I’ve reviewed your project and understand you need help securing and cleaning your WordPress site on a VPS, removing malware, hardening access, and ensuring future safety. As an experienced WordPress and server security team, we can perform a full cleanup of malware/unauthorized files, tighten server and WordPress security settings, update core/plugins/themes, and configure firewalls and monitoring so your site stays protected. We focus on thorough cleanup and preventive hardening so you can regain confidence in your VPS environment. Best regards, Ambient Infotech
$22 USD in 5 days
6.9
6.9

Hi there, I’ve read your VPS WordPress security cleanup brief and I’m confident I can deliver a decisive, one-time intervention that returns you a clean, secure server with minimal downtime. I specialize in securing WordPress on VPS (Nginx/Apache) environments, performing thorough malware eradication, and implementing hardened configurations that survive audits and abuse reports. What I’ll do: start with a root-access scan of every WordPress instance and the filesystem to identify backdoors, injected code, and outdated plugins. I’ll remove malicious payloads, patch vulnerabilities, tighten permissions, review cron tasks, and verify server configs (NGINX/Apache, PHP, and key services). I’ll disable XML-RPC globally unless a site explicitly requires it, and I’ll trace the abuse source to locate the compromised site while preserving legitimate functionality. I’ll implement WordPress-hardening steps (mod_security rules, fail2ban, wp-config hardening, and recommended security headers) and ensure no backdoors remain. Finally, I’ll generate a concise remediation report outlining root causes and corrective actions suitable for Server4You. Deliverables: - A clean, operational server free of malicious code and rogue processes. - XML-RPC disabled site-wide unless required. - A brief remediation report suitable for forwarding to Server4You. Timeline: I can complete the full cleanup in a focused 1-day session, with a summary report delivered on completion. After-action recommendations
$100 USD in 1 day
6.2
6.2

Hello there, I understand your need for a thorough VPS WordPress security cleanup, focusing on malware removal, identifying XML-RPC abuse sources, and implementing hardening measures. Here's how I'll tackle it: - Conduct a comprehensive malware scan and removal across all WordPress instances and file systems. - Investigate and mitigate XML-RPC abuse without disrupting legitimate functions. - Implement server hardening measures like fail2ban, mod_security rules, and wp-config tweaks. Having secured multiple VPS environments and hardened WordPress sites, I assure a clean, secure server with detailed remediation documentation. Let's discuss the project further in chat. One clarification: Are there any specific plugins or themes installed on the WordPress sites that might be potential security risks? Looking forward to working on this project
$20 USD in 1 day
6.0
6.0

Hi there, I have over 10 years work experience with Linux and server management as well as wordpress sites cleanup (malware/virus) as well as preemtive security maintenance. Ping me and I'll help you out. Cheers!
$50 USD in 7 days
6.0
6.0

Hi, I can help with a decisive, one-time cleanup of your Server4You VPS and all WordPress instances. With root or sudo SSH access, I will scan every WordPress installation and the underlying file system to locate and remove malware, patch obvious vulnerabilities, and verify no backdoor scripts remain. I will trace the source of XML-RPC abuse and brute-force login attempts, disable XML-RPC wherever it isn’t explicitly required, and ensure legitimate functionality remains intact. Additionally, I’ll review cron jobs, tighten file and directory permissions, check web-server configurations (Apache/Nginx), and apply proven WordPress-hardening measures such as fail2ban, mod_security rules, and wp-config optimisations. Deliverables include: =A clean, fully functioning server free of malicious code or rogue processes. =XML-RPC disabled site-wide unless explicitly required. =A concise remediation report documenting root causes and corrective actions, suitable for submission to Server4You. This is a single-session cleanup; no ongoing maintenance will be performed. I have extensive experience securing VPS environments and hardening WordPress under SSH, ensuring your server is fully restored and protected. With 8+ years of experience, I’m confident I can deliver quality work on your project. I’d love to discuss the details and get started as soon as possible! Thanks & Regards Sushma S
$49 USD in 2 days
6.1
6.1

With over twelve years of experience as a full-stack software engineer, I bring a unique perspective to your VPS WordPress Security Cleanup project. I have an extensive background in handling complex web and mobile app developments that have required strong security measures. My understanding of AWS (Amazon Web Services) would also enable me to skillfully navigate your Server4You VPS and resolve the malware intrusion. Moreover, my expertise lies within securing environments and hardening WordPress under SSH; a particular skill set that aligns perfectly with the scope of work required by your project. I will carefully scan each WordPress instance and the underlying file system, meticulously removing malware that causes abuse reports for your VPS. Additionally, my comprehensive approach focuses on disabling XML-RPC traffic without hampering any legitimate functionality—a balance crucial to maintain in cybersecurity measures. Lastly, I believe in the power of effective communication throughout a project life-cycle. With this, I assure you not only timely delivery but also open lines of communication for concise updates on progress and findings. The conclusion of your project will be clean, functioning servers devoid of malicious codes or rogue processes,
$20 USD in 2 days
6.1
6.1

As an experienced web engineer with more than a decade in the field, I have honed my skills specifically for projects like yours. My expertise encompasses both front-end and back-end development, website migration and hosting setup, and comprehensive security optimization. In fact, I've got extensive hands-on experience hardening WordPress sites under SSH connections – just what you need. From your project description it's evident that ensuring the immediate removal of any malware - while simultaneously identifying and dismantling the source of abusive XML-RPC traffic - is a paramount concern for you. I assure you that I am well-versed in these areas and know how to navigate through the intricate structure of VPS environments just like yours. I'll perform a detailed scan of every WordPress instance, trace the origins of the abuse and employ proven security measures - fail2ban, mod_security rules and wp-config tweaks - to harden your website effectively. I understand completely that this is a one-time project with no follow-up maintenance involved;However, I believe that forming a lasting partnership based on trust and exceptional service delivery is crucial. My focus on quality, stability and transparent communication aligns perfectly with your description of a clean server free from any malicious code. Not only will I provide you the deliverables as required but I'll also provide you with a comprehensive remediation report documenting all actions taken
$10 USD in 1 day
5.7
5.7

Hello Dear, "Warm Greeting" Check my malware removal project on freelance :- - https://www.freelancer.in/projects/web-security/Hosting-wordpress-security-malicious/reviews - https://www.freelancer.in/projects/wordpress/Need-freelancer-remove-malware-from/reviews - https://www.freelancer.in/projects/wordpress/Wordpress-site-very-slow-Possible/reviews - https://www.freelancer.in/projects/wordpress/Wordpress-site-has-malware-popup/reviews - https://www.freelancer.in/projects/wordpress/Fixing-malware-phishing-from-Wordpress/reviews - https://www.freelancer.in/projects/web-security/Clean-Malware-infected-URL-Website/reviews - https://www.freelancer.in/projects/wordpress/clean-wordpress-site-that-has-23895697/reviews - https://www.freelancer.in/projects/php/Cpanel-Malware-clean/reviews - https://www.freelancer.in/projects/wordpress/Clean-hacked-Wordpress-Page-22360208/reviews - https://www.freelancer.in/projects/wordpress/Wordpress-site-was-hacked-need-22156525/reviews ✪PLEASE NOTE✪! Your website will be as NEW after My Cleanup = 100% Clean Wordpress. GOT HACKED? ✔ Infected with Malware? ✔ Google ads - or Facebook Ads reported as malware infected? ✔ Blacklisted by Google? ✔ Disabled by Host? ✔ Redirecting? ✔ Spam in Search Results? Don't worry I'll do :- ✔ Detailed Scan of all Files ✔ Professional Site Cleanup ✔ Guarantee and Proof of Clean Website ✔ Backup of your website. Thanks you. Best regards.
$10 USD in 1 day
5.8
5.8

Hello, I have extensive experience securing VPS environments and hardening WordPress installations. I will conduct a thorough scan for malware, identify the source of the XML-RPC abuse, and implement the necessary measures to stop the brute-force login attempts. I’ll ensure the server is cleaned, hardened, and secured to prevent future vulnerabilities. I’m ready to start right away. Please DM to see the work samples. Please check my profile for experience and quality. Best Wishes, Fizza Nadeem
$30 USD in 3 days
5.0
5.0

Hello, Thank you for reviewing my proposal. I am a senior web development and digital solutions consultant with over 12+ years of hands-on experience, helping businesses, startups, and agencies build scalable, high-performing, and user-focused digital platforms. I dont just build websites—I focus on business outcomes: performance, usability, scalability, and long-term maintainability. What I Can Help You With Website Development & Redesign eCommerce Development Frontend & Web Applications Maintenance & Ongoing Support Design & Branding AI & Automation Why Clients Choose to Work With Me 12+ years of real-world development experience Proven delivery across multiple industries Clear communication and structured workflow Focus on quality, scalability, and performance On-time delivery with no shortcuts Long-term partnership mindset I have successfully delivered hundreds of projects with strong user experience outcomes, and in many cases, helped clients achieve significant improvements in engagement and revenue. If this aligns with what youre looking for, Id be happy to discuss your project requirements and suggest the best approach. Looking forward to working together, and happy to share my portfolio links. Best regards, Suresh Sanghvi Note: Final quotation and timeframe for this project will be provided after our discussion.
$20 USD in 7 days
5.3
5.3

Hello Dear! I write to introduce myself. I'm Engineer Toriqul Islam. I was born and grew up in Bangladesh. I speak and write in English like native people. I am a B.S.C. Engineer of Computer Science & Engineering. I completed my graduation from Rajshahi University of Engineering & Technology ( RUET). I love to work on Web Design & Development project. Web Design & development: I am a full-stack web developer with more than 10 years of experience. My design Approach is Always Modern and simple, which attracts people towards it. I have built websites for a wide variety of industries. I have worked with a lot of companies and built astonishing websites. All Clients have good reviews about me. Client Satisfaction is my first Priority. Technologies We Use: Custom Websites Development Using ======>Full Stack Development. 1. HTML5 2. CSS3 3. Bootstrap4 4. jQuery 5. JavaScript 6. Angular JS 7. React JS 8. Node JS 9. WordPress 10. PHP 11. Ruby on Rails 12. MYSQL 13. Laravel 14. .Net 15. CodeIgniter 16. React Native 17. SQL / MySQL 18. Mobile app development 19. Python 20. MongoDB What you'll get? • Fully Responsive Website on All Devices • Reusable Components • Quick response • Clean, tested and documented code • Completely met deadlines and requirements • Clear communication You are cordially welcome to discuss your project. Thank You! Best Regards, Toriqul Islam
$20 USD in 1 day
4.5
4.5

Hello Marcos, I came across your project VPS WordPress Security Cleanup and I am very interested in working with you. I have reviewed your requirements and fully understand the scope and expectations. I specialize in Linux, Web Security, WordPress, Apache, Nginx, VPS, Network Security, System Administration and have successfully delivered similar projects before. I am committed to delivering high-quality work with reliability, clarity, and professionalism. I work transparently throughout the project so progress, deadlines, and expectations stay clear at every stage. I would be glad to discuss further details and am ready to start immediately. Looking forward to hearing from you. Regards, Anum
$50 USD in 3 days
4.4
4.4

Hi There, We have carefully reviewed your requirements and we can definitely help you with a one-time VPS security cleanup and WordPress hardening. We have a team of experienced Linux & WordPress security specialists with 10+ years of experience in malware removal, VPS hardening, and abuse-incident remediation under SSH/root access. We have successfully cleaned and secured multiple VPS environments facing similar XML-RPC abuse, brute-force attacks, and malware infections. What Do We Need From You: ✔ Root / Sudo SSH Access ✔ List of hosted domains (if available) ✔ Hosting control panel access (if any) What You’ll Get: ★ Full malware scan of VPS & all WordPress installs ★ Removal of malicious files, injected code & backdoors ★ Identification of site causing XML-RPC & brute-force abuse ★ XML-RPC disabled where not required ★ Cron job & startup script audit ★ File & folder permission hardening ★ Web server (Apache/Nginx) & PHP security review ★ Implementation of fail2ban, firewall & basic mod_security rules ★ WordPress hardening (wp-config tweaks, login protection, key regeneration) ★ Clean, stable and functioning server ★ Short remediation report for Server4You ★ Quick turnaround We can start immediately and perform the cleanup in a single focused session with minimal disruption. If you have any questions, please ping us on freelancer chat and we will be happy to assist. Thanks Antops Technologies
$29 USD in 7 days
4.7
4.7

With my extensive 10+ years of experience as a Full Stack Web & Mobile App Developer, I have handled over 2000 projects and helped businesses like yours secure their digital presence. My core development expertise includes WordPress and I am proficient in navigating servers through SSH access to provide top-notch security and resolve issues such as malware removal and hardening of the WordPress ecosystem. In line with your project requirements, I specialize in scanning WordPress instances and file systems to identify and eradicate malicious code whilst ensuring legitimate functionality remains intact. Additionally, my advanced understanding of web server configurations enables me to effectively disable XML-RPC where it isn't explicitly required and inspect cron jobs, manage file permissions, and apply WordPress-hardening techniques to give your VPS environment utmost protection. Most importantly, as a seasoned freelancer, client satisfaction is my utmost priority. I'll deliver not just the clean functioning server you require, but also a comprehensive remediation report that will describe root cause analysis as well as implemented corrective actions for you to submit to Server4You. Let's work together on this 'one-time decisive intervention' for your VPS Wordpress security cleanup.
$20 USD in 2 days
4.7
4.7

I have read your requirement for require expert in wordpress and Scan every WordPress instance and the underlying file system, remove malware, and patch obvious vulnerabilities. I have 9 years experience in wordpress development. i will provide best solution if you will give me projects. Thanks, Patel Maulik
$20 USD in 7 days
4.4
4.4

Chicago, United States
Payment method verified
Member since Apr 17, 2016
$30-250 USD
$2-8 USD / hour
$2-8 USD / hour
$2-8 USD / hour
$30-250 USD
$15-25 USD / hour
$30-250 AUD
$10-30 USD
$250-750 USD
$30-250 USD
$10-30 USD
$250-750 USD
€250-750 EUR
$250-750 USD
$15-25 USD / hour
$250-750 USD
₹1500-12500 INR
$10-30 USD
$30-250 USD
$30-250 USD
₹12500-37500 INR
$30-250 AUD
$10-30 USD
$30-250 USD
$250-750 USD