URL blocked by AdminTools : legitimate or not?

marcmarc

Hi,
for some weeks I have many (thousands…) connexions blocked by akeeba admintools WAF.
These connexions are for issue "tmpl= in URL" and the blocked URLs are like this:
https://mysite.com/index.php?option=com_acym&tmpl=comComponent&ctrl=frontmails&task=setNewThumbnail&7fdbcb9fa6c5e469d375d0b2bb51a797=1
Are these connexions legitimate or not?
Thanks

jvstratum

Hi,

Can you check what happens if you go to Acymailing->Security-Advanced Configuration and click on the button "Scan site files"?

marcmarc

Hi,
result is "Aucun fichier malicieux trouvé sur votre site Web" (no malicious files).

jvstratum

I've notice you meanwhile have opened a ticket for the same issue, so let's continue there.