Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Word Press Shenanigans? Anyone seeing strange activity today? - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Word Press Shenanigans? Anyone seeing strange activity today?

We are getting different activity reports (Thanks for those!) on Word Press. Beyond the ping back issue that has been happening, is anyone else seeing strange WP behavior?


Richard Porter

--- ISC Handler on Duty

Twitter: Packetalien



173 Posts
ISC Handler
Mar 14th 2014
Haven't seen anything yet, but saw this on the PCWorld site:
Nothing unusual for the WordPress sites we are hosting, except for the regular brute force logins attacks.

Mitigating measures we took
1) Rename admin lgoin
2) Implement captcha
3) Restrict /wp-login.php (WordPress login page) to a small subnet of IP addresses only

43 Posts
ISC Diary from yesterday was linked to wordpress according to comments.

12 Posts
Nothing that I can see in my server logs.

1 Posts

Sign Up for Free or Log In to start participating in the conversation!