good plugin but…

I install this plugin and weeks later my site gets hacked… just very coincidently some random text is entered on pages… exactly what the premium version of Sucuri would fix for me. Nothing else happened

Pretty strong accusation, but I think you are making a flawed leap here between your attack and the security plugin as:

a) all plugin code is audited before inclusion here in the WordPress repository
b) the plugin code is open-source and so anyone, including you, can examine it
c) Sucuri is a well established and respected security company which is hardly likely to risk its reputation to try and collect a few more paying customers
d) hackers have a range of motivations, and not all choose to hide their tracks/deactivate plugins/deface/spam/attack all sites on the network
e) there are multiple routes for a hacker to locate your admin name and password (username enumeration, compromised server, insecure credentials’ storage on a local machine, weak username/password combinations, insecure use of FTP, use of third party plugins, etc.etc.)

I would advise you to consider the points raised in (e) and look into the hardening of your installation.

Accusation of an accusation retracted 🙂

The hardening WordPress guidance is excellent, and if you’re into .htaccess you can also consider the 5G blacklist, which plays well with most wordpress security plugins.

Good luck!

I am not using the aforementioned plug-in but have had hackers hit my sites from some of the same IP addresses you listed. I have recently started keeping a blacklist of my own (http://www.removepcvirus.com/blacklist.html) to help spread the word.

One pattern I have noticed is that hackers will try to gain access to WordPress sites using whatever usernames appear on posts on the target website. Using a screen name (nickname) for posts, which is different from the user login name, is advisable.

Today, I discovered Google finds my site malicious, Firefox calls it an “attack site”, and there is malware somewhere. I have Sucuri Security plugin – did a scan from the dashboard – no malware found.

However, if I go to Sucuri’s SiteCheck (https://sitecheck.sucuri.net//) and put in my site I get:

Status: Infected With Malware. Immediate Action is Required.
Web Trust: Blacklisted (10 Blacklists Checked): Indicates that a major security company (such as Google, McAfee, Norton, etc) is blocking access to your website for security reasons. Please see our recommendation below to fix this issue and restore your traffic.

What is up with that?

Needless to say, I’ve open a ticket with the Sucuri support desk.

It’s possible for any anti-malware software to miss something. Review all the plugin options and settings to be sure that your system is appropriately configured.

See these resources:
google.com/webmasters/hacked
codex.wordpress.org/FAQ_My_site_was_hacked
[Moderated]
http://www.stopbadware.org

If you don’t feel comfortable with the technical level of the articles above, you might consider getting some outside technical assistance.

I had the same idea. I traced some ip’s I saw and they were just coming from websites.