Hackers! Must Be Monday!

Once again Wordfence has done it’s job and alerted me to hackers trying to log into a clients site. It’s obviously coming from some kind of bot network that is going through commonly used usernames and passwords. 5:42 am CST | Login: noreply | User IP: 180.183.246.232 | User hostname: mx-ll-180.183.246-232.dynamic.3bb.co.th | User location: Bangkok, Thailand 5:42 am CST…

WordPress Vulnerability Discovered

If you are currently running WordPress 4.9.6 or older, which is currently all installations, a new critical vulnerability has been discovered. According to reports it allows “an attacker the capability to delete any file of the WordPress installation”. It seems there is some debate whether this is a big deal or not. If a hacker…

Good Morning Vietnam!

When I woke up this morning I checked my email and came across thirteen Wordfence Alerts from a clients website. There was a coordinated attempt occurring to brute force a login into the WordPress admin. Luckily the admin username is not common or guessable. It started at 12:22 am and it is still going on…