Hacking attempts on your blog, have you ever experienced this?

[seonotes]

Recently I have came across a very strange situation. Some spammer is hacking one my old blog (High Traffic still) and inserting Iframe codes which download some stats from page called wp-stats.php. I feel basically some one is using a clocking script to redirect the traffic to a casino site. (I had the URL of the site)

I have changed my password several times, Checked all the admin, theme folders, almost checked all the pages installed in wp and yet to identify from where he is sneaking in?

Does any one in house faced a similar problem?

Thanks in advance!

[temi]

Welcome to UK WW steve,
Hackers are always around and they get quite lucky with out of date software, that is why its always better to update one WP or other online application to the latest version.
You may also want to have a look at Bagi's hacker trap script: Hacker trap script

[seonotes]

Originally Posted by temi

Welcome to UK WW steve,

thanks temi

Yes I am using an older version of WP it's 2.2, I have not updated it as I almost forgot to do. I am doing this.

I like the hacker tracking script, I am thinking to give it a try. This is a very nice post on security issues, thanks for sharing with me.

[Bagi Zoltán]

Hi steve, warm welcome among us. I suggest you to install some kind of effective statistic program or use a log analyzer in order to discover the entry point of the attack. After you have it, you may easily reward the brave ones with the elegant IP ban solution.

[seonotes]

true!

I am just playing with your script and I accidentally reached to your /core/. Now I cant access your blog Your script is amazing.

All I need to add the IP's to text file and bingo!

[Bagi Zoltán]

Originally Posted by stevearun

Your script is amazing.

Thanks for the nice words.

Steve, i removed your IP, so now you may access the mentioned blog, though i suppose you can not understand a single word.

[seonotes]

Yup! Google says We are not yet able to translate from Hungarian into English. Are you from Hungary?

thanks for removing my Ip's I can now access your site.

[Bagi Zoltán]

Yes, I am from Hungary, not the easiest language to translate.

[xhan]

I've had my site hacked before, my host made all WP files only accessable to admins but that also meant that wp ran with so many bugs, I was running the most up to date one at the time too. I had a few problems with that host thankfully I was just leaving whe I was hacked.