WordPress.org

Ready to get started?Download WordPress

Forums

Multiple Attacks in the last 2 days (6 posts)

  1. jrydell
    Member
    Posted 3 years ago #

    In the last 2 days I have had multiple attempts at hacking into my login. Please see below:

    WordPress Firewall has detected and blocked a potential attack!
    Web Page: janellerydell.com/wp-login.php
    Warning: URL may contain dangerous content!
    Offending IP: 193.105.240.173 [ Get IP location ]
    Offending Parameter: log = wp_admin

    This may be a "WordPress-Specific SQL Injection Attack."

    I'm not sure if you take the information or not and submit the IP address to any authorities. The IP is in Paris, France and I have had at least 8-10 attempts in the last 2 days.

    I'm not sure what to do. I think if I change my password, then that is what they want as they may have attached a "key tracker" or something to my computer.

    Please advise. Thank you.

    Janelle

  2. timstellmach
    Member
    Posted 2 years ago #

    If the attackers had had a key logger on your computer, it's hard to see why there would be a *failed* attack. Yes, I suppose they could be trying to induce you to log in, but that seems a little elaborate when they could just wait.

  3. martcol
    Member
    Posted 2 years ago #

    Hello,

    I use WP Firewall2 and have the same warning message a couple of times a day for the last 3 weeks or more. I have no idea what it is or what to do about it. In the email I get, it has the same IP location as @jrydell.

    So far, there is not detrement to the site. But I wonder if I should be alarmed or take any action.

    Thanks

    Martin

  4. timstellmach
    Member
    Posted 2 years ago #

    If someone on the consistently same IP address is pulling hijinx, you can consider denying them access to your site in your .htaccess file. Then when they try to connect to your login page (or anywhere on your site, really), they'll just get an error message. Just Google "htaccess"

  5. martcol
    Member
    Posted 2 years ago #

    Thank you.

    That's a good idea, I'll check it out.

    Martin

  6. taghaboy
    Member
    Posted 2 years ago #

    see this :
    http://www.ipillion.com/ip/193.105.240.173
    i think it's a BOT

Topic Closed

This topic has been closed to new replies.

About this Topic