Someone is attacking my website

sparkh

sparkh

Junior Member
Joined
Apr 25, 2020
Messages
118
Reaction score
77
Guys i don't get why someone is trying to bruteforce users on a website i own with less than 1000 monthly views... Their tried everyday for the last 50 days and trying to bruteforce even normal users without priviledges

What's the point of it? :confused:

I even changed login page and they are just getting 404s the last 5 days but wtf XD

Someone has a lot of free time and resources:confused:
 
Advertise on BHW
Put a recaptcha on the login that will really slow them down.
 
Like i said before .. it's what u call a cockroach trying to enter your house for some reason.
 
sparkh said:
Guys i don't get why someone is trying to bruteforce users on a website i own with less than 1000 monthly views... Their tried everyday for the last 50 days and trying to bruteforce even normal users without priviledges

What's the point of it? :confused:

I even changed login page and they are just getting 404s the last 5 days but wtf XD

Someone has a lot of free time and resources:confused:
Click to expand...
I am sure it's a bot. Nobody is doing it manually, obviously.
 
sparkh said:
Guys i don't get why someone is trying to bruteforce users on a website i own with less than 1000 monthly views... Their tried everyday for the last 50 days and trying to bruteforce even normal users without priviledges

What's the point of it? :confused:

I even changed login page and they are just getting 404s the last 5 days but wtf XD

Someone has a lot of free time and resources:confused:
Click to expand...


What are the IP addresses?

Do you have Wordfence or similar on your site?
 
1. Are you on a shared server / hosting? IF so it might be another site they are going after not yours.

2. If you have the firewall records showing it's coming after you. Have you made sure everything is up to date? I.e theme, plugins, db version of wp (or whatever your using) could be something in one of those that the user is trying to exploit for email or similar..
 
I remember back some long time ago when I first started experimenting with porn sites - I owned a porn site that I did not send much traffic too but it still got a few hits monthly and it was making me some little money. It was hosted on a free host and was using a nulled theme. BIG MISTAKE.

I was still a big noob as it was my first tube site. Anyway, one day I checked it out and I saw that it was hacked and turned into some ISIS website or some shit. There was a big background text saying "HACKED BY *RANDOMASSHOLE* and some arab text with pictures of dead people all around the website. It was screwed up and I learned to never use nulled themes and shitty hosting and to use better protection.

I feel sorry for the people that visited this niche porn site and had to see dead people instead before I had to take it down.

I guess some people love being dicks and hacking websites feeling good about themselves? Bunch of scums and waste of sperm IMO.
 
Luca Jones said:
I remember back some long time ago when I first started experimenting with porn sites - I owned a porn site that I did not send much traffic too but it still got a few hits monthly and it was making me some little money. It was hosted on a free host and was using a nulled theme. BIG MISTAKE.

I was still a big noob as it was my first tube site. Anyway, one day I checked it out and I saw that it was hacked and turned into some ISIS website or some shit. There was a big background text saying "HACKED BY *RANDOMASSHOLE* and some arab text with pictures of dead people all around the website. It was screwed up and I learned to never use nulled themes and shitty hosting and to use better protection.

I feel sorry for the people that visited this niche porn site and had to see dead people instead before I had to take it down.

I guess some people love being dicks and hacking websites feeling good about themselves? Bunch of scums and waste of sperm IMO.
Click to expand...

That's so shitty tho

t2van said:
1. Are you on a shared server / hosting? IF so it might be another site they are going after not yours.

2. If you have the firewall records showing it's coming after you. Have you made sure everything is up to date? I.e theme, plugins, db version of wp (or whatever your using) could be something in one of those that the user is trying to exploit for email or similar..
Click to expand...

Yes and something is not updated. I have a plugin from wordpress that i got from festinger and i can't update it.... i can't afford it right now
 
sparkh said:
That's so shitty tho



Yes and something is not updated. I have a plugin from wordpress that i got from festinger and i can't update it.... i can't afford it right now
Click to expand...

Check online for patch notes IF it's some JS or something you might be able to find it on GitHub or a Fork of it and copy the replacement over. MIGHT help but I figure something is not up to date is going to be some of the issue!
 
Well, defend. When you have the power, launch a counter-attack. :D
 
Are the IPs from the same C-net? If so, just block the entire net on firewall level with your host.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top