Am i getting hacked

Resolved Yascin
(@yascin)

6 years, 3 months ago
In Live traffic log i got these strange information. Look here

These web addresses they visited is not my domain.

Am i being hacked because is strange that wordfence saying they visited another site. I never saw this is wordfence. Can someone explain what is happening.

My developer guy say this.
“You see that reports because of wordfence network showing same visitor when that visitor browsing other sites.”

But i dont believe thats true.
- This topic was modified 6 years, 3 months ago by Yascin.
- This topic was modified 6 years, 3 months ago by Yascin.
- This topic was modified 6 years, 3 months ago by Yascin.
- This topic was modified 6 years, 3 months ago by Yascin.
- This topic was modified 6 years, 3 months ago by Yascin.
The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)

WFGerroald
(@wfgerald)

6 years, 3 months ago

Hey @yascin,

Can you send me a Diagnostics report so I can get a better overview of your environment? Please navigate to Wordfence > Tools > Diagnostics. Here you can select SEND REPORT BY EMAIL. Please include your WordPress.org username and update this thread after you’ve sent it.

Please let me know.

Thanks,

Gerroald

wfdave
(@wfdave)

6 years, 3 months ago

Hi @yascin,

What do you have for Wordfence -> All Options -> How does Wordfence get IPs (and Trusted Proxies)

For example: https://i.imgur.com/uUG93Gf.png

Note that it’s possible for a visitor to spoof their referring address – but I’m not sure what exactly is going on in this case.

In any case, I do not believe that these visitors are being connected to your site from those other sites.

Dave
Thread Starter Yascin
(@yascin)

6 years, 3 months ago
I sent the mail

How does Wordfence get IPs= Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites. (Recommended)

The same like in you picture.
- This reply was modified 6 years, 3 months ago by Yascin.
Thread Starter Yascin
(@yascin)

6 years, 3 months ago

I also find this.

https://wordpress.org/support/topic/live-traffic-shows-bots-viewing-a-domain-thats-not-mine/

wfdave
(@wfdave)

6 years, 3 months ago

Hi @yascin,

In that linked post, another website was actually linking to his site. I don’t believe this is the case with your website.

The domains that are pointing to your site are not pages:

Your site: https://boxun.com
His site: https://bluejeansjam.com/office-space-farmhouse-office-decor/office-decor-best-kids-homework-room-images-on-pinterest-rhahtapotorg-black-and-white-home-makeover-revealrhtheshabbycreekcottagecom-black-office-space-farmhouse-office-decor-and-white-home-makeover-j

I’m not sure if bots can spoof this URL, but I don’t think this is an indicator that you are being hacked.

Dave

Thread Starter Yascin
(@yascin)

6 years, 3 months ago

Thanks for ansver.

One last question

Will it be better to use this option.

“Use PHP’s built in REMOTE_ADDR and don’t use anything else. Very secure if this is compatible with your site.”

wfdave
(@wfdave)

6 years, 3 months ago

Hi again,

There is no best option. If your site is behind a proxy, you need to use one of the forwarding options or else the IP detected by Wordfence will be incorrect. However, if your site is not behind a proxy, you will want to use REMOTE_ADDR or else IP spoofing might be possible.

Dave

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Am i getting hacked’ is closed to new replies.