russian IP (2 posts)

  1. rcktech
    Posted 5 years ago #

    Hi All,

    I have the (session manager)plugin; the plugin is used to store simple live session data about the site visitors.

    lately I have been getting session reports as follows:

    Guest j56mf 1 /2009/08/05/black-bean-soup-with-orange-zest/?action=lostpassword

    I traced the IP, it's from Russia. Not sure what to make of this, it's been occuring three four times a day, I only have three users on my site, one is my wife the other is a relative and the third is my neighbor, so I know nobody from Russia is trying to recover their password. (assuming I interpreted this correctly) Could someone shed some light on this please?

    Thank you all.

  2. Adam Harley (Kawauso)
    Posted 5 years ago #

    Probably just someone trying to perform a hack on your WordPress install... badly. The only thing that comes to mind is an exploit in WordPress versions pre-2.8.4 that allowed someone using a specially crafted URL to reset an admin's password (not actually get it though, just reset it and send a reset email) using the lost password system. You'd need to access the login page for that though.

Topic Closed

This topic has been closed to new replies.

About this Topic


No tags yet.