Monitor Your Website Security!

It pays to monitor your website security! 

I run the WordFence security plugin.  Every so often I go into the live traffic records and look at who and what has been trying to access my website. youbeenhacked.blk.grn150

This is one of the things I love about WordFence, it allows you to easily see IP addresses of those trying to access your website via wp-admin or some other way.  

It also has a section for “pages not found” which is one of the main ways a hacker tries to backdoor your website and inject malicious code into you database.

About a month ago I found an entry in my Security logs and found this info about a hacking attempt:

From SPAIN:  Using IP address IP: 37.247.121.179 with NameServer: NS1.ALOHADOMINIOS.COM

This hacker tried to do a  “remote code” or sql injection to my website using the “PHP XMLRPC Code injection vulnerability”.

This is how the “page not found” entry looked:

http://MyDomainNameWebsite.com/xmlrpc.php\“%20/>___<!–%20This%20site%20is%20optimized%20with%20the%20Yoast%20WordPress%20SEO%20plugin%20v1.5.3.3%20-%20https:/yoast.com/wordpress/plugins/

Now, I am not that knowledgeable about “code” and internet jargon but I bw.hacking.smcan see where this does not look like a legitimate and maybe an accidental 404-page not found entry. It is interesting that the hacker tried to use the Yoast plugin as a means of hacking.  Either way, I would take notice of entry like this and do a little research on it to see if it is indeed a hacking method. 

WordFence did it’s job and saved my website from this hacking attempt that would have wrecked havoc on my website.

My next post will list several IP addresses and associated name servers of those that have attempted to hack one of my websites.

 

 

WordFence Security Plugin
WordFence offers a free and paid version of their fabulous Security plugin. You can find them at WordFence.com.  By the way, WordFence does not have an Affiliate program nor is this a paid article or promotion for WordFence.  I write about them because they have a great product!  

Qlossal Media/QlossalMedia.com © 2010-2015 Frontier Theme
Optimization WordPress Plugins & Solutions by W3 EDGE