Warning for new Members of GPWA.org, wordpress

[joert]

Hi all, friendly warning here. I ask alot of Newbie questions on here and I've noticed that every time I come on here (which is every couple of months) a large bunch of assholes start attacking my site trying to hack in, thinking I haven't set up good security.

If you're using Wordpress, My number one tip to thwart these sad bastards is change your username from admin to something else as soon as you install wordpress, and then delete the username 'admin' as soon as you do. Then add all of the free security plugins (limit login attempts etc.) that you can get with wordpress, and spend a half hour configuring them.

I have a rotating bunch of c*nts that keep trying to break into our sites using admin as the username, despite the fact that they can only put two attempts in at a time before being locked out for a week. The IP's are from the US and south east asia generally, probably proxies. These people either want to destroy your site for fun, or replace your affiliate links with their own, and therefore get your signups.

So they're Obviously watching this site intently for newbie's coming on asking questions and then assuming they haven't set up proper security on their site yet.

You have been warned.

MODS, can you please modify this post and add any tags that might help new users find the post in future. And might I suggest making it a sticky possibly? Cheers

[lots0]

It is not just newbees they go after.

I get hit regularly, usually after I post something here the little vermin don't like.

I would suggest that you IP block countries that these hacking attacks come from.

I would start with China and a couple of eastern European countries.

[joert]

Ive had six lockout attacks since posting this thread lol

[lots0]

LOl now I am getting hit by a proxy server located in Germany, but the code is encoded Chinese.

[-Shay-]

How is it that you reckon they are learning what sites you own? From links dropped in previous posts or are you suggesting the forum is not secure?

[lots0]

How is it that you reckon they are learning what sites you own? From links dropped in previous posts or are you suggesting the forum is not secure?

Are you kidding?
You really can't figure out what sites we are promoting?

[joert]

despite me saying delete the username admin, these fools keep trying it to log in.

Shay, in the signatures or in your profile, or yes, even from previous posts

[-Shay-]

Are you kidding?
You really can't figure out what sites we are promoting?

LOL... I'm not hacking into anything - so it doesn't matter what I can or cannot figure out.

I was asking if he was implying these clowns were attempting to be shady by following links dropped in post or listed through here or if there were implications of deeper issues.

[rak]

Also drop this meta from your theme / wordpress

< meta name="generator" content="WordPress 3.5" / >

Helps stops spiders used maliciously to scan for WP sites to mess with.

Don't use admin as a username.
Use a password with lowers, capitals, numbers and a few of these !@#$%^&*()

I believe there is a plugin which will also lock accounts or ban IP's which try fail 3 login attempts.

45+ Wordpress Sites, and not one has been hacked. Protect your business, and your investment.

[DaftDog]

Wordfence is a good security plugin for WordPress.

[lots0]

LOL... I'm not hacking into anything - so it doesn't matter what I can or cannot figure out.

I was asking if he was implying these clowns were attempting to be shady by following links dropped in post or listed through here or if there were implications of deeper issues.

All you have to do to find out what sites we promote is look at our logos or click on our names.

Most of us here are in business so we don't try to hide our sites.

[universal4]

This sadly, is a normal occurrence.

Believe it or not, I hang out at a certainly web hosting forum and when I forst started posting there I saw a number of targeted attacks, afew of which were actually larger then some others.

If you do however pin down any pattern, be sure to let us know either publicly or by contacting the security team or staff here so we can look into it.

Rick
Universal4