Discussion:
[Wordfence Alert] designer89.com User locked out from signing in
Viktor Sahni
2015-12-22 17:14:18 UTC
Permalink
This person keeps trying to hack my servers. Please handle your clients.
---------- Forwarded message ----------
From: "Viktor Sahni" <***@gmail.com>
Date: Dec 22, 2015 12:12 PM
Subject: Re: [Wordfence Alert] designer89.com User locked out from signing
in
To: "Kartik Mistry" <***@debian.org>, "Viktor Sahni" <
***@gmail.com>
Cc:

You've been reported;
https://bugs.debian.org/cgi-bin/pkgreport.cgi?ordering=normal;archive=0;src=nginx;repeatmerged=0
User IP: 46.148.18.162 points to nginx on Debian with bug report and your
email address. Why is that?
Hi,
This isn't my server. Infact, I don't have any servers :)
Thanks for understanding.
PS: Fix your server and wordpress installation.
Hey I keep getting hacking attempts from your server. Can you cease from
attacking my servers immediately? I will be notifying the proper
authorities.
This email was sent from your website "Designer89" by the Wordfence
plugin
at Monday 21st of December 2015 at 03:06:13 PM
http://designer89.com/wp-admin/admin.php?page=Wordfence
A user with IP address 46.148.18.162 has been locked out from the
signing
in or using the password recovery form for the following reason: Used
an
invalid username 'designer89' to try to sign in.
User IP: 46.148.18.162
User hostname: 46.148.18.162
User location: Republic of Lithuania
NOTE: You are using the free version of Wordfence. Upgrading to the
paid
version of Wordfence gives you
two factor authentication (sign-in via cellphone) and country blocking
which are both effective methods to block attacks.
A Premium Wordfence license also includes remote scanning with each
scan
of your site which can detect
several additional website infections. Premium members can also
schedule
when website scans occur and
can scan more than once per day.
As a Premium member you also get access to our priority support system
located at http://support.wordfence.com/ and can file
priority support tickets using our ticketing system.
Click here to sign-up for the Premium version of Wordfence now.
https://www.wordfence.com/zz1/wordfence-signup/
--
http://designer89.com/wp-admin/network/admin.php?page=WordfenceSecOpt
http://designer89.com/wp-admin/network/admin.php?page=Wordfence
--
Kartik Mistry | IRC: kart_
{0x1f1f, kartikm}.wordpress.com
Colin Watson
2015-12-24 00:43:47 UTC
Permalink
Post by Viktor Sahni
This person keeps trying to hack my servers. Please handle your clients.
---------- Forwarded message ----------
Date: Dec 22, 2015 12:12 PM
Subject: Re: [Wordfence Alert] designer89.com User locked out from signing
in
You've been reported;
https://bugs.debian.org/cgi-bin/pkgreport.cgi?ordering=normal;archive=0;src=nginx;repeatmerged=0
User IP: 46.148.18.162 points to nginx on Debian with bug report and your
email address. Why is that?
Kartik Mistry maintains the nginx package in Debian, but that doesn't
make them (or, for that matter, the Debian or nginx projects as a whole)
responsible for or even remotely related to everyone who uses it! It's
free software, and anyone at all in the entire world with suitable
hardware and internet connectivity can install it. Given that nginx is
a piece of web server software, it's also pretty unlikely to be
implicated in attempts to attack your system; I understand that you're
looking for somebody to blame, but this really isn't a very sensible
target.

"whois 46.148.18.162" says:

remarks: *************************************************
remarks: * For spam/abuse/security issues please contact *
remarks: * ***@infiumhost.com, not this address *
remarks: *************************************************

... so I would suggest that you start there, and you might actually get
somewhere useful.

Regards,
--
Colin Watson [***@debian.org]
Loading...