Protect Your Website
Boy did I get a surprise the other day!
I received the following email from one of my websites:
This email was sent from your website “YYYYYYYYeY” by the aaaaaa plugin at Sunday 11th of October 2020 at 04:40:00 AM
The aaaaaaaa administrative URL for this site is: https://tttttttttttttt.comA user with IP addr 22.214.171.124 has been locked out from signing in or using the password recovery form for the following reason: Used an invalid username ‘XXXXXXXX’ to try to sign in.
The duration of the lockout is 2 months.
User IP: 126.96.36.199
User hostname: mx-ll-223.204.237-90.dynamic.3bb.co.th
User location: Chachoengsao, Thailand
Yes, we have all heard about websites been hacked but I didn’t expect this kind of activity. Not only were they trying to hack my website they were doing it time and time and time again.
I blocked them several times, but they tried through another server and another server and another server from different countries. It was not just on this website but on two of them.
Fortunately, I was able to block them permanently or blocked the IP addresses.
But they continue to try from other locations across the dark parts of the world.
Protect Your Business
Sadly, too many of us lose our business and income because we do not understand how to, or lack the skills to protect our business. We are under the impression that installing protection is more like voodoo or black magic, only understood by geeks.
We can go along the route of employing security plugins to protect us most of the time. But do we really understand what they are doing?
Do we know what parameters of our website they are changing? Do we understand the impact of the changes they make?
It is a fact of life that as we attempt to make our websites more secure by implementing more and more controls we are in reality constraining the performance of the site.
Our bad habits mean that we often neglect the basics. We are too lazy sometimes to change.
The reality is that everyone who can create. WordPress site can take some basic steps to protect themselves.
So, in the meantime, I have strengthened my passwords and am investigating additional ways to protect myself. Ways that anyone can implement without expert help.
Now the curious thing is that they also used my real name, which I do not use on this website; it is not even directly associated with this website in any way.
Protect Your Identity
My identity is protected so how did they associate my real name with the website? I have to investigate.
I’m still trying to explore this but what the whole point of this exercise is it shows you how important it is to make sure your website is protected in a thoroughly professional manner.
Keep your eye out for new emails, I will be bringing you tips on how to protect your website.