Wordpress warning - and why my hosting company is better then yours.

matt_62 Prominent Member

Messages:: 1,827

Likes Received:: 515

Best Answers:: 14

Trophy Points:: 350

#1

I dont normally do this, but after reading a message from my hosting company, I have decided to pass it on. I know that there is ALOT of people here using wordpress for their site. So please, if you have wordpress look over this information and act accordingly.
I dont have permission to do this, neither am I affiliated with the hosting company. So if I am asked to, I will have this thread removed.

I would also like to clarify that the hosting company I use, is Ferngullygraphics.com
They are heads and shoulders over alot of other hosts.

Message sent from Ferngullygraphics.com :

Its has been brought to our attention that there is currently a global botnet (BruteForce) attack going on with Wordpress installs (If you are not using wordpress, you can disregard this message). We noticed over the course of the past few days that every wordpress site hosted at FGG was targeted by a Brute Force attack. Initially we thought this was something simply going on with FGG servers, however after doing research, just about every web host on the net (Small to Big) is experiencing the same type of activity.

If you are unfamiliar with BruteForce attacks, its when a hacker targets a specific login entry point (EX: Wp-Login) and then proceeds to have thousands of bots attempt to crack the username/password using various Combinations. Since wordpress is a third party software, there is no way for us to install a global firewall to protect the wordpress installs from this type of attack (cPanel is protected from these types of hacks, but software like wordpress is not, unless installed at the user level). We have put together a list of steps we recommend you take immediately to insure your wordpress install does not become compromised.

* Note, if your site is managed/developed by FGG, these preventative measures have already been taken *

- Update your wordpress install to the latest version of wordpress.

- Install: http://wordpress.org/extend/plugins/bulletproof-security/ and make sure all .htaccess files are protected (this will protect you from injection attacks).

- Install: http://wordpress.org/extend/plugins/better-wp-security/ (this will help prevent BruteFoce attacks as it will block ips after a certain number of failed login attempts, along with other preventative measures). Make sure you go through the dashboard and enable all the basic prevantives (Ex: making sure the Admin username is not being used).

- Make sure you are using strong passwords (with multi characters) and update your passwords frequently.

- Make sure your email address is up to date within your WP-Admin area (so you can be notified of suspicious activity via the better WP security plugin).

There are obviously more preventive measures that can be taken, however the above are the most basic steps which EVERY wordpress install should take. We suspect that this latest attack on Wordpress is an initial stage of a bigger attack as Hackers often times run BruteForce attacks to initially gain access (remain dormant) and then launch their attack at a later time. So just because you don't notice anything off about your Wordpress site, does not mean it has not been compromised. Make sure you take the above necessary steps (to help keep a better eye on your wordpress site) and if you notice anything suspicious going on with your wordpress install, notify us immediately.
Click to expand...

So tell me, does your host care enough about you to warn you of impending attacks? Or do they just laugh at you and charge you $25 for the backups?

If this thread has helped you, please let me know.
Cheers.

matt_62, Apr 12, 2013 IP

youronlinestuff Greenhorn

Messages:: 17

Likes Received:: 0

Best Answers:: 0

Trophy Points:: 11

#2

the cyber police will backtrace it you shill

youronlinestuff, Apr 13, 2013 IP

mrmax Well-Known Member

Messages:: 389

Likes Received:: 5

Best Answers:: 0

Trophy Points:: 140

#3

it is a good way to make money for hosting companies!

mrmax, Apr 13, 2013 IP

matt_62 Prominent Member

Messages:: 1,827

Likes Received:: 515

Best Answers:: 14

Trophy Points:: 350

#4

mrmax said: ↑

it is a good way to make money for hosting companies!
Click to expand...

Yeah i know. Hostgator used to charge $25 per restoration from their backups, and i am certain most others are the same

@youonline. Cyber police? Your funny bro.
Almost like jumping off a building and saying its ok because you believe in superman.

matt_62, Apr 13, 2013 IP

Log in or Sign up

Advertising (learn more)

Wordpress warning - and why my hosting company is better then yours.

matt_62 Prominent Member

youronlinestuff Greenhorn

mrmax Well-Known Member

matt_62 Prominent Member

Log in or Sign up

Advertising (learn more)

Wordpress warning - and why my hosting company is better then yours.

matt_62 Prominent Member

youronlinestuff Greenhorn

mrmax Well-Known Member

matt_62 Prominent Member

Useful Searches