Where Are Potential Hackers Getting Access?
 

Just began building a site, mainstream, nothing but Wordpress software there. But hackers are looking to disrupt the business already, before it begins.

The dot com are all amazonaws.com. The rest are, gee, surprising, huh?!

Commercial (com)
Network (net)
Ukraine
Local Network (lan)
Germany
Non-Profit (org)
Russian Federation
Thailand
Switzerland
Generic TLD (info)
European Union
China
Seychelles
Sweden
St. Helena
United States

USA had ONE user. Commercial had 972. Over 100 from Seychelles, islands most never heard of. St. Helena surprised me, but the rest are the usual unsecured packets, unsecured computers and unsecured networks.

Fregat.ua had the most logins. /wp-admin/load-scripts.php was the most hit URL. mycingular.net was the most popular cell login attempt and no.no.cox.net the most popular home login attempt.

I like to analyze what’s being accessed and attempted every month or so. I get notified when they hit a username often. Soon I’ll search for an app or software that follows IP addresses and/or hosts. Googlebot.com tried too often, considering the site isn’t open and the url hasn’t been posted anywhere.

Years ago I had custom scripts for stats and would check a few dozen sites daily. It’s good to track holes, direct linking, exploits, and where the traffic is from. If you have exploits or backdoors, where they’re posted is vital to know You’ll find hacker forums, cracker forums, photo- stealing forums and more. They love to brag of theft, viruses, backdoors and more. Sometimes you catch a whale but usually you can’t do anything as they change IPs faster than we blink.

Of course, you can stalk them by nickname on forums, especially if you have alternative IPs to login from. Play with them, jack them around, have fun. I read that somewhere; I’d never have a hacker or exploiter take action. 😇. Just imagine... payback IS a bitch.

The things you learn on the Internet are shocking and amazing. :winkwink:

********** I’m not endorsing illegal activity by any means. Simply check your stats carefully and just imagine... the power ...

Probably just Sandy Rand surfing the site.

:2 cents:

They have scripts that automatically probe domains. They are looking for holes in your security before you have security fully up and running.

Install the Wordfence plugin to protect your site.