1,000/Day Hacking My Site

11 years ago

If you have a site of 10,000+ active members, this is actually pretty common as people forget their login information all of the time and will try usernames of other forums/sites they are apart of. Though if it's for a site with little to no members, it's definitely an interesting occurrence.

Thanks

Signature

>>> I'm a membership site guru! Let's team up! (CLICK HERE) <<<

{{ DiscussionBoard.errors[7688282].message }}

Daniel Gates

11 years ago

This is nuts. But then again, this may create an opportunity for entrepreneurs to sell products to protect our blog :rolleyes:

Thanks
1 reply

Signature

[Need Traffic?] Laser Niche Targeted Traffic @ Less Than 1c Per Prospective Customer!

{{ DiscussionBoard.errors[7688293].message }}

robestrong 11 years ago

Probably just 1 person scaling his efforts via more proxies and/or multiple accounts.
- Thanks
{{ DiscussionBoard.errors[7689819].message }}

Alex Blades

11 years ago

Might be a bot trying to get in to install a link, or malware. I think there are plugins that can have your login page on a custom url...

[ 1 ] Thanks

Signature

" I knew that if I failed, I wouldn't regret that.
But I knew the one thing I might regret is not ever having tried. "

~ Jeff Bezos

{{ DiscussionBoard.errors[7688298].message }}

Resale Rights Ninja

11 years ago

when you are online you are constantly under attack. I spend a lot of time online and my computer I am on, and my sites are always dealing with threats. And on top of that you get people trying to social engineer you over the phone, Skype, and email. It is relentless.

mostly it is kids. eventually they grow up and get jobs as security professionals. if people spent their time on im instead they would actually make money instead of just wasting their time.

Thanks

Signature

PM Me Now!

{{ DiscussionBoard.errors[7688315].message }}

Maui Joe

11 years ago

needs more login lockdown

WordPress › Login LockDown « WordPress Plugins

Thanks

{{ DiscussionBoard.errors[7688356].message }}

Jeffery

11 years ago

Bruce,

Reality check for you sir.. most site owners are not professional webmasters. Professional webmasters secure a site 'before' it is live on the internet. Example: if it is a WordPress site simply create a custom .htaccess file. There are lots of tips about securing any type of site with .htaccess, i.e. wordpress, html, php.

You may not have anything that you think people may find or want on your own site. You could be wrong.. there are ways to redirect your traffic to different sites, i.e. your visitors or just hits to different sites.

Jeffery 100% :-)

Thanks

Signature

In the minute it took me to write this post.. someone died of Covid 19. RIP.

The Best Source of Free Traffic is in This Very Forum.

Sticky: < ! S U C C E S S ! > See how I get my "first 10,000 Youtube Subscribers"

{{ DiscussionBoard.errors[7688383].message }}

hajro

11 years ago

Install some captcha plugin, or change login location ex. wp-admin change to 2423jdsfk

[ 2 ] Thanks

{{ DiscussionBoard.errors[7688582].message }}

Bruce Wedding

11 years ago

Just installed the SI Captcha Anti Spam plugin. We'll see how it goes. I'd already installed Better WP Security plugin.

Thanks

Signature

$2,300 in a Week With Teespring

{{ DiscussionBoard.errors[7688680].message }}

Cool Hand Luke

11 years ago

[DELETED]

{{ DiscussionBoard.errors[7688691].message }}

Bruce Wedding

11 years ago

Originally Posted by Cool Hand Luke

Bruce, also make sure to install the Limit Login Attempts plugin if you haven't already. You can set it so that brute force login attempt attacks can't work. Depending on your settings, it will automatically lock IPs out of even accessing your login page after a certain amount of failed tries.

Actually "Better WP Security" includes that feature, which I've implemented. I just tightened it up though to allow fewer attempts per user and host.

Thanks

Signature

$2,300 in a Week With Teespring

{{ DiscussionBoard.errors[7688829].message }}

drewfioravanti

11 years ago

I don't know how reliable this is, but it scans your website for malware.

Sucuri SiteCheck - Free Website Malware Scanner

Thanks

{{ DiscussionBoard.errors[7688706].message }}

MartinPlatt

11 years ago

That looks more like honest attempts to log in, rather than someone trying to brute force or dictionary attack your site....

Thanks
1 reply

Signature

Martin Platt
martin-platt.com

Stuck with earning commissions online? Get this get this uncensored affiliate marketing guide for free (sold as coaching for $4,997)

{{ DiscussionBoard.errors[7689608].message }}

KirkMcD

11 years ago

Originally Posted by MartinPlatt

That looks more like honest attempts to log in, rather than someone trying to brute force or dictionary attack your site....

Yeah, something else is going on. Those aren't hack attempts. They wouldn't be choosing random, real looking names like that and they would be trying with the same name much more than once.

Thanks
2 replies

{{ DiscussionBoard.errors[7689653].message }}

onegoodman

11 years ago

Originally Posted by KirkMcD

Yeah, something else is going on. Those aren't hack attempts. They wouldn't be choosing random, real looking names like that and they would be trying with the same name much more than once.

I agree with KirkMcD, if it is a bot or a hacker trying to break through, would pick one username and try more often. I personally would go for admin / administrator

lol

Thanks
1 reply

Signature

5 figure passive income

Hire Quality Virtual Assistants at affordable rate

{{ DiscussionBoard.errors[7689687].message }}

Bruce Wedding

11 years ago

Originally Posted by onegoodman

I agree with KirkMcD, if it is a bot or a hacker trying to break through, would pick one username and try more often. I personally would go for admin / administrator

lol

You'd fail there because I NEVER use those

Thanks

Signature

$2,300 in a Week With Teespring

{{ DiscussionBoard.errors[7689712].message }}

Bruce Wedding

11 years ago

Originally Posted by KirkMcD

Yeah, something else is going on. Those aren't hack attempts. They wouldn't be choosing random, real looking names like that and they would be trying with the same name much more than once.

This site has about 300 members and NONE of their names are showing up in that list and I'm not getting any complaint emails. I'm not sure what's going on but it's not my regular members. Look at the timing.

Thanks

Signature

$2,300 in a Week With Teespring

{{ DiscussionBoard.errors[7689708].message }}

so11

11 years ago

Hello,

1000/day sounds like a pretty persistent attack.

1. Make sure that all authentication related configurations are harden.
2. If you can, use IP lockout feature (3 attemps is more than enough).

good luck

Thanks

Signature

www.groupesoloviev.com
We help businesses manage cyber risk and compliance requirements.

{{ DiscussionBoard.errors[7695875].message }}

karlmay1980

11 years ago

Will be a bot trying to put malware on no doubt, blogs are big targets for this type of thing. They can do quite a lot of damage if successful including getting you banned from the likes of Google.

WordPress security is good business and it is one of the better cms platforms for security too!

Thanks

Signature

Want To Make Your First Â£10,000 Online?

I Am Taking On 25 People To Mentor!"

{{ DiscussionBoard.errors[7696011].message }}

Bruce Hearder

11 years ago

Howz this for an idea to get back at the hackers/spammers trying to get into your website.

Modify your WP signup/login form so that all login attempts to your site that are not real users, get sent to a page that looks like they have logged in (They are not actually logged in at all

)

On that page you can :
1. Get them to click a FB like button to progress further. As soon as this is done, they are thrown to Google or some othr website.

2. Open an iFRAME and cookie stuff them so that you can make some affiliate commissions out of them..

3. The possibilities are endless.. Let your mind run amok with ideas..

Sneaky WP tricks is a good way to turn the tables on WP spammers and hackers..

Hope this gives you a few you a few ideas..

Bruce

Thanks
2 replies

{{ DiscussionBoard.errors[7709684].message }}

CyberAlien

11 years ago

Originally Posted by Bruce Hearder

Howz this for an idea to get back at the hackers/spammers trying to get into your website.

Modify your WP signup/login form so that all login attempts to your site that are not real users, get sent to a page that looks like they have logged in (They are not actually logged in at all

)

On that page you can :
1. Get them to click a FB like button to progress further. As soon as this is done, they are thrown to Google or some othr website.

2. Open an iFRAME and cookie stuff them so that you can make some affiliate commissions out of them..

3. The possibilities are endless.. Let your mind run amok with ideas..

Sneaky WP tricks is a good way to turn the tables on WP spammers and hackers..

Hope this gives you a few you a few ideas..

Bruce

Most of the automated bots that I have trying to get in to my control panel are originating from China. After 2 failed login attempts I have it set to automatically redirect them here so they can deal with their own government lol: http://www.gov.cn/im-hacking-your-website-china

Thanks

{{ DiscussionBoard.errors[7709722].message }}

sonas

11 years ago

Originally Posted by Bruce Hearder

Howz this for an idea to get back at the hackers/spammers trying to get into your website.

Modify your WP signup/login form so that all login attempts to your site that are not real users, get sent to a page that looks like they have logged in (They are not actually logged in at all

)

On that page you can :
1. Get them to click a FB like button to progress further. As soon as this is done, they are thrown to Google or some othr website.

2. Open an iFRAME and cookie stuff them so that you can make some affiliate commissions out of them..

3. The possibilities are endless.. Let your mind run amok with ideas..

Sneaky WP tricks is a good way to turn the tables on WP spammers and hackers..

Hope this gives you a few you a few ideas..

Bruce

Nice out of the box thinking! Offence is the best form of Defence as they say

Thanks

{{ DiscussionBoard.errors[7709736].message }}

rodneys

11 years ago

This is most likely a bot. Where is the traffic originating from? See if securiilock.com can help.

Thanks

{{ DiscussionBoard.errors[7767701].message }}

John Romaine

11 years ago

Its probably the security plugin that you've installed doing this, so you run around telling everyone how great it is at preventing unwanted hack attempts.

Just like you've done here

Thanks

Signature

BS free SEO services, training and advice - SEO Point

{{ DiscussionBoard.errors[7767710].message }}

1,000/Day Hacking My Site

Trending Topics

Best AI for spell checking & grammar (2024)?

Google Ads, landing pages, and Clickbank links

Carry out better target audience research

A Very Strange Internet Problem

YouTube gets shopping display tools and affiliate partnership updates