Word Press Shenanigans? Anyone seeing strange activity today?

Published: 2014-03-14. Last Updated: 2014-03-14 15:10:36 UTC
by Richard Porter (Version: 1)
4 comment(s)

We are getting different activity reports (Thanks for those!) on Word Press. Beyond the ping back issue that has been happening, is anyone else seeing strange WP behavior?

 

Richard Porter

--- ISC Handler on Duty

Twitter: Packetalien

Blog: packetalien.com

Keywords: odd activity word press wp
4 comment(s)

Comments

Haven't seen anything yet, but saw this on the PCWorld site: http://www.pcworld.com/article/2106940/large-ddos-attack-brings-wordpress-pingback-abuse-back-into-spotlight.html

Anonymous

Mar 14th 2014
1 decade ago

Nothing unusual for the WordPress sites we are hosting, except for the regular brute force logins attacks.

Mitigating measures we took
1) Rename admin lgoin
2) Implement captcha
3) Restrict /wp-login.php (WordPress login page) to a small subnet of IP addresses only

Anonymous

Mar 15th 2014
1 decade ago

ISC Diary from yesterday was linked to wordpress according to comments.

https://isc.sans.edu/forums/diary/Web+server+logs+containing+RS/17803

Anonymous

Mar 15th 2014
1 decade ago

Nothing that I can see in my server logs.

Anonymous

Mar 15th 2014
1 decade ago

Login here to join the discussion.


Top of page
Diary Archives