Protect Your Website

Boy did I get a surprise the other day!

I received the following email from one of my websites:

Warning!

************

This email was sent from your website “YYYYYYYYeY” by the aaaaaa plugin at Sunday 11th of October 2020 at 04:40:00 AM
The aaaaaaaa administrative URL for this site is: https://tttttttttttttt.comA user with IP addr 223.204.237.90 has been locked out from signing in or using the password recovery form for the following reason: Used an invalid username ‘XXXXXXXX’ to try to sign in.
The duration of the lockout is 2 months.
User IP: 223.204.237.90
User hostname: mx-ll-223.204.237-90.dynamic.3bb.co.th
User location: Chachoengsao, Thailand

*********

Blocking

Yes, we have all heard about websites been hacked but I didn’t expect this kind of activity. Not only were they trying to hack my website they were doing it time and time and time again.

I blocked them several times, but they tried through another server and another server and another server from different countries. It was not just on this website but on two of them.

Fortunately, I was able to block them permanently or blocked the IP addresses.

But they continue to try from other locations across the dark parts of the world.

Protect Your Business

Sadly, too many of us lose our business and income because we do not understand how to, or lack the skills to protect our business. We are under the impression that installing protection is more like voodoo or black magic, only understood by geeks.

We can go along the route of employing security plugins to protect us most of the time. But do we really understand what they are doing?

Do we know what parameters of our website they are changing? Do we understand the impact of the changes they make?

It is a fact of life that as we attempt to make our websites more secure by implementing more and more controls we are in reality constraining the performance of the site.

Our bad habits mean that we often neglect the basics. We are too lazy sometimes to change.

The reality is that everyone who can create. WordPress site can take some basic steps to protect themselves.

Strong Passwords

So, in the meantime, I have strengthened my passwords and am investigating additional ways to protect myself. Ways that anyone can implement without expert help.

Now the curious thing is that they also used my real name, which I do not use on this website; it is not even directly associated with this website in any way.

Protect Your Identity

My identity is protected so how did they associate my real name with the website? I have to investigate.

 

I’m still trying to explore this but what the whole point of this exercise is it shows you how important it is to make sure your website is protected in a thoroughly professional manner.

 

Keep your eye out for new emails, I will be bringing you tips on how to protect your website.

Ash

 

 

 


Ash
Ash

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.