Hackers! Must Be Monday!

Once again Wordfence has done it’s job and alerted me to hackers trying to log into a clients site. It’s obviously coming from some kind of bot network that is going through commonly used usernames and passwords.

  • 5:42 am CST | Login: noreply | User IP: 180.183.246.232 | User hostname: mx-ll-180.183.246-232.dynamic.3bb.co.th | User location: Bangkok, Thailand
  • 5:42 am CST | Login: noreply | User IP: 117.102.64.14 | User hostname: 117.102.64.14 | User location: Yogyakarta, Indonesia
  • 5:43 am CST | Login: noreply | User IP: 115.84.92.29 | User hostname: 115.84.92.29 | User location: Sainyabuli, Laos
  • 6:40 am CST | Login: admin<domainname> | User IP: 2.119.45.57 | User hostname: host57-45-static.119-2-b.business.telecomitalia.it | User location: Monterotondo, Italy
  • 6:40 am CST | Login: admin<domainname> | User IP: 143.255.152.234 | User hostname: 234-152.customer.enredes.com.ar | User location: Chapuy, Argentina
  • 6:40 am CST | Login: admin<domainname> | User IP: 187.16.55.30 | User hostname: 187.16.55.30 | User location: Sinop, Brazil
  • 7:26 am CST | Login: data-protected | User IP: 138.204.69.212 | User hostname: 138-204-69-212.wantel.net.br | User location: Petrolina, Brazil
  • 7:26 am CST | Login: data-protected | User IP: 41.38.214.93 | User hostname: host-41.38.214.93.tedata.net | User location: Alexandria, Egypt
  • 8:09 am CST | Login: admin<domainname> | User IP: 5.133.62.25 | User hostname: 5.133.62.25 | User location: Perugia, Italy
  • 8:09 am CST | Login: admin<domainname> | User IP: 143.255.154.36 | User hostname: 36-154.customer.enredes.com.ar | User location: Chateaubriand, Argentina
  • 8:09 am CST | Login: admin<domainname> | User IP: 130.0.30.70 | User hostname: 130.0.30.70 | User location: Shkoder, Albania
  • 8:09 am CST | Login: <domainname> | User IP: 202.137.155.171 | User hostname: 202.137.155.171 | User location: Laos
  • 9:08 am CST | Login: <domainname> | User IP: 177.104.242.178 | User hostname: 177-104-242-178.provecom.com.br | User location: Tucurui, Brazil
  • 12:32 PM CST | Login: <domainname> | User IP: 186.182.233.148 | User hostname: host148.186-182-233.claro.com.py | User location: Asunción, Paraguay
  • 12:32 PM CST | Login: <domainname> | User IP: 202.137.155.156 | User hostname: 202.137.155.156 | User location: Laos
  • 12:32 PM CST | Login: <domainname> | User IP: 196.202.94.26 | User hostname: host-196.202.94.26-static.tedata.net | User location: Cairo, Egypt

If you are running WordPress you need a security plugin such as Wordfence. If you need help installing and configuring the plugin contact me or your web development professional.