[HELP] 40+ hack attempts from Russsian Federation this week

AnotherOne said:
You have posted some excellent info about Brute force attacks and I'll surely read more about it. After discussing the issue with several people I think I am over-reacting but I think (like you said) this 'over-reacting' has gave me some excellent advices from some brilliant helpful users and I learned a lot.
Click to expand...

That's a beautiful attitude, and for that you get Rep+.
 
Advertise on BHW
AnotherOne said:
I have posted some tips myself too in that thread (check them out) and this time I have followed your Tip#6 successfully.
Click to expand...

Oh sorry I completely missed that :P
 
First of all thank you for continuously replying and helping me.
I have cron job to backup and email SQL file daily but I was wondering if there's a free/paid plugin/script that'll backup all my files or at least posts/pages.

cgimaster said:
EDIT: IMHO you dont need either vps or dedicated servers just sticked to the advices given to you and make sure you have daily backups (not your hosting company) but YOU have the daily backups.

Why ? In most cases your hosting company will take some time to restore it and if u have it at hand you can do it right away if an issue arrives.
Click to expand...



Those who helped me, at least deserve some kind words and that's what I did :)
B. Friendly said:
That's a beautiful attitude, and for that you get Rep+.
Click to expand...
 
I would ban Russia and china just from /wp-admin. Let them access the rest of your website but don't let them get to the admin section.
 
Why restricting only them to access /wp-admin?
BTW I have restricted everyone to access /wp-admin on my server.

0_00_0 said:
I would ban Russia and china just from /wp-admin. Let them access the rest of your website but don't let them get to the admin section.
Click to expand...
 
This is clearly, and I mean clearly a bot. This happens to me all the time, the cPanel on my VPS gets at least 400+ attempts daily. These are not people, they are bots attempting brute force. I switched to SSH and SFTP to stop them from trying, not that they would get in, but I'm sick of the emails from cPanel. If you have a secure pass don't worry about it. Try a dual auth plug-in for WP. These are nothing but bots, ignore them and move on. And make sure you do security checks for your version of WordPress on exploit DB or 1337day. I guarantee at least one of your plug-ins is susceptible to XSS or FPD, or maybe ever SQLi.
 
Never heard of that bot before. BTW there's no captcha on login screen and I am sure you know that too :)
starcity83 said:
This sounds like a Captcha code breaker bot of some type, nothing to worry about.
Click to expand...



I am using a secure password. Any free dual auth enabling plugin(s)? your favorite one?
BTW I'll check those sites you mentioned for security checks of WordPress.
Dante848 said:
This is clearly, and I mean clearly a bot. This happens to me all the time, the cPanel on my VPS gets at least 400+ attempts daily. These are not people, they are bots attempting brute force. I switched to SSH and SFTP to stop them from trying, not that they would get in, but I'm sick of the emails from cPanel. If you have a secure pass don't worry about it. Try a dual auth plug-in for WP. These are nothing but bots, ignore them and move on. And make sure you do security checks for your version of WordPress on exploit DB or 1337day. I guarantee at least one of your plug-ins is susceptible to XSS or FPD, or maybe ever SQLi.
Click to expand...



I am scared. What should I do now? ;)
tejsin said:
mate, if they are after you (you are done) :P
Click to expand...
 
That's exactly what I wrote above :) I have installed Cloudflare to give a little boost to my website that's all.
After configuring W3 Total Cache and Cloudflare properly my website's Google Page Speed score is changed to 95/100 and according to Pingdom my website load faster than 93% tested website.

B. Friendly said:
What does Cloudflare, a content delivery network, have to do with securing a website against hacking?
Click to expand...



Do you believe in their 'we'll secure your website by doing this and that and that'?
cgimaster said:
https://www.cloudflare.com/features-security
:) that speaks for itself

Its not bullet-proof either but its pretty interesting, never had to use it anyway.
Click to expand...


EDITED:
Sorry for my ignorance :(
 
Last edited:
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top