Tracking Down A Wordpress Hacker

cataratas said:

Greetings all.

I wonder whether any of you have spent more than a moment trying to identify one of the 878 people trying to hack your site every single day.

I shouldn't take it personally but I do.

I want to stand in front of them and poke them firmly in the eye.

Then knee them in the bollocks.

And because I'm English, then wish them a nice day.

Click to expand...

PeteAFC said:

I get a contact form email via my wix website from someone using a Tor browser every few days. It's a randomised name, email address and word. Makes no sense. Anyone else?

Click to expand...

Voo said:

Yup happens to a bunch of my wix sites too. It’s odd and cryptic.

Click to expand...

cataratas said:

I want to stand in front of them and poke them firmly in the eye.

Click to expand...

Rick Ferraz said:

I keep getting attacked by the same fucking person putting a virus on my website that untitle all my posts, recently i discovered that he was the system admin on Hostinger which used to be my website was hosted... i simply wrote then about the issue, i had proof about their invasion, their ip was stamped in all logs, they blocked my services... wish i had power to destroy that company...

Click to expand...

bertbaby said:

Thanks for the update on Hostinger

Click to expand...

Th3 Technician said:

Beside the tips mentioned above such as changing default WordPress URLs, I would like to oppose some tips that aren't commonly known as a security engineer :

1- Remove/Hide "generator" meta tags such as :

Code:

<meta name="generator" content="WordPress 5.2.5" />
<meta content="Divi v.3.25.3" name="generator"/>

2- Remove all of the README files you can find

Removing meta tags & readme files will significantly lower the amount mass scanners scanning your site for vulnerabilities as they are used in mass scanners to identify if the site is using WP or not and to target specific vulnerable WordPress version and/or Plugin.

Click to expand...

bertbaby said:

Will removing the meta tags impact updates and other plugin functionality?

Click to expand...

remove_action('wp_head', 'wp_generator');