It's Crazy How much WP Websites get Attacked...

Sugirl

Sugirl

Power Member
Joined
Jun 12, 2010
Messages
621
Reaction score
556
I do run few medium-sized websites, and I could not believe how many brute force attempts my /wp-admin page gets after installing the plugin that limits brute force attempts and logs login attempts.
Most of my websites get around 400-700 DIFFERENT login tries per day all from different IP's, with each sending multiple password tries, so essentially even with brute force limiting I get around 2000-2500 password tries per day sent :D

God only knows how many it was before the brute force limiter...Blows my Mind that there are so many people trying to ''hack'' websites.

When installing new wordpress installation, change your username from admin to something else , but not your website name as they try for it quite frequently..
also..Install a plugin that changes the location of your login page to something else..
 
Advertise on BHW
It's pretty common overall WP getting hacked I have been hired a few times to fix hacked Wordpress.
 
What plugin do you use?

I remember using a plugin for the same thing but it was showing fake made-up attempts in order to get me buy the Premium version of the plugin.
 
I use wordfence.. or wordforce.. something like that.

But even if a hacker gained admin access, what the hell they gonna do? Not like i keep my crypto private keys in my wordpress website files.

Whatever hacker, move along sir, nothing to see here :p
 
ikr? This is one of the reasons I left wp. I was too paranoid with security. If someone thinks he is safe, try looking at your nginx/apache log and you will change your mind. I don't know if this is still possible, but there used to be a method to change the login page url with the plugin/theme api. Perhaps try that. It could also help having another nginx server which will pass the traffic (proxy_pass) to your application. That way you will be able to block those requests before they reach your application.
 
Gogol said:
ikr? This is one of the reasons I left wp. If someone thinks he is safe, try looking at your nginx/apache log and you will see. I don't know exactly, but there used to be a method to change the login page url with the plugin/theme api. Perhaps try that. It could also help having another nginx server (proxy_pass) which will pass the traffic to your application. That way you will be able to block those requests before they reach your application.
Click to expand...

Well if your site wasnt so popular you wouldnt have this problem.

Works for me bro.

Hahahhahaha
 
Just install these useful security plugin for WP. They should reduce the most common attacks by 90%.

WPS Hide Login (free)
BBQ Free or Pro
Stop User Enumeration (free)
 
Scorpion Ghost said:
Well if your site wasnt so popular you wouldnt have this problem.

Works for me bro.

Hahahhahaha
Click to expand...
loool....
I suppose the most common use would be to transform your website into linkfarm :D
or change your affiliate links/ads.
Either way...If anyone gets access and your website is larger than 5 pages... good luck putting it all back :D
 
Doesn't come as a surprise so many people use nulled themes so they deserve it if you look at it that way
 
Sugirl said:
loool....
I suppose the most common use would be to transform your website into linkfarm :D
or change your affiliate links/ads.
Either way...If anyone gets access and your website is larger than 5 pages... good luck putting it all back :D
Click to expand...

I dont need luck, i have backups. Its like formatting windows really.

Garbage out, garbage in :D
 
Scorpion Ghost said:
I dont need luck, i have backups. Its like formatting windows really.

Garbage out, garbage in :D
Click to expand...
What if you add content every day and your backups are taken maybe once a week?
What if you make $500/day from your site, it would massively suck if you had to loose that $ for a couple of days , or even worse, get your website's search engine rankings fcked up...
 
Sugirl said:
What if you add content every day and your backups are taken maybe once a week?
What if you make $500/day from your site, it would massively suck if you had to loose that $ for a couple of days , or even worse, get your website's search engine rankings fcked up...
Click to expand...

Yeah i dont bank like that. But if i did you better believe id be making a backup daily, find an automated way of doing it.

But on most of my sites i post once per month, so i do a manual backup every 2-3 months, and its all good.

I just dont make money like that, always shaking because of rankings. Fuck rankings. Id rather spam the internet to death and hunt clients down than worry about ranking. Ranking is stupid, spam is more controllable :p
 
Scorpion Ghost said:
Well if your site wasnt so popular you wouldnt have this problem.

Works for me bro.

Hahahhahaha
Click to expand...
I bet you get login attempts too. It does not have to depend on the popularity even. It could be because of your ip range. Hackers may target the whole subnet for that matter. It's always good to be safe than being sorry later. :)
 
Gogol said:
I bet you get login attempts too. It does not have to depend on the popularity even. It could be because of your ip range. Hackers may target the whole subnet for that matter. It's always good to be safe than being sorry later. :)
Click to expand...

Yeah i do. Sometimes i get an email from wordfence that a user has been locked out from being able to sign in. Usually the user uses the username "Admin"

Lol genius :D
 
Remember to delete/block/disable xmlrpcc so they can't also send bulk login attempts at you. No idea why WordPress hasn't done this by default since it's depricated. Huge attack vector.

For quite some time now I've been thinking of getting my own custom-made cms i could use on all my websites, but damn, its a hard bullet to bite from the development cost + the loss of all those plugins.
 
Zakch93 said:
How do you know if your wp got hacked?
Click to expand...


  1. Well many forms exist but same ways you can find out if you find out your website is linking out to other websites you never posted you are sure off
  2. Site very slow but your server not to full
  3. Your site redirections to another domain
  4. Your site foreign words on the metags such in Chinese
  5. You login to your server and find a lot of files which were not done by you or sound weird
  6. Password changed or new username appeared on posts or pages.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top