{"id":13835353,"date":"2020-12-26T22:27:23","date_gmt":"2020-12-26T22:27:23","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/spurious-password-reset-request\/"},"modified":"2020-12-26T22:43:15","modified_gmt":"2020-12-26T22:43:15","slug":"spurious-password-reset-request","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/spurious-password-reset-request\/","title":{"rendered":"Spurious password reset request"},"content":{"rendered":"<p>I run a small and newish WordPress site in the Netherlands. Today (26 Dec) I, as webmaster, received an email from WordPress asking for a password reset. The email says &#8220;if this is a mistake, you can ignore this email&#8221;. The request came from an IP in Germany, and our site is strictly Dutch. <\/p>\n<p>Our Contact page gives my webmaster email address, but as an inline PNG with a <code>mailto:<\/code> link, to avoid scraping.<\/p>\n<p>I did some tests and it looks as if somebody clicked &#8220;forgot password&#8221; and filled in the webmaster email address. Easy enough for a human, but a robot would need to be quite sophisticated to extract the email address and use it correctly. And our website (sustainable living in the city center) is hardly a high-value target. I have looked over the site and see no visible changes. I receive some spam but Akismet keeps it under control.<\/p>\n<p>I assume it is some sort of hacking attempt, but cannot understand how it was intended to work. If the hacker has compromised my email provider then s\/he can break in without my knowledge, and if not I see no possible advantage. <\/p>\n<p>Can I safely ignore the incident? How did the hacker intend to proceed?<\/p>\n","protected":false},"template":"","class_list":["post-13835353","topic","type-topic","status-publish","hentry","topic-tag-password-reset"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/13835353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/13835353\/revisions"}],"predecessor-version":[{"id":13835394,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/13835353\/revisions\/13835394"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=13835353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}