djbaxter

Administrator
Administrator
Moderator
Joined
Jun 28, 2012
Messages
3,513
Reaction score
1,660
If you haven't done a security audit on your WordPress sites recently, do it now!

Breaking: Aggressive WordPress Brute Force Attack Campaign Started Today, 3am UTC
by Mark Maunder, Wordfence
December 18, 2017

A massive distributed brute force attack campaign targeting WordPress sites started this morning at 3am Universal Time, 7pm Pacific Time. The attack is broad in that it uses a large number of attacking IPs, and is also deep in that each IP is generating a huge number of attacks. This is the most aggressive campaign we have seen to date, peaking at over 14 million attacks per hour.

The attack campaign was so severe that we had to scale up our logging infrastructure to cope with the volume when it kicked off, which makes it clear that this is the highest volume attack that we have seen in Wordfence history, since 2012.

The campaign continues to ramp up in volume during the past hour as we publish this post. A graph of the attack volumes is shown below which shows the number of attacks per hour and the number of attacking IPs that we see each hour.

massive-brute-force-attack-Dec18.jpg

Our infrastructure automatically blacklisted the participating IPs in real-time and distributed those to our Premium customers. This all happened unattended early this morning. We continue to monitor the campaign and are analyzing its origin and who is behind it.

What we know at this time:
  • The attack has so far peaked at 14.1 million attacks per hour.
  • The total number of IPs involved at this time is over 10,000.
  • We are seeing up to 190,000 WordPress sites targeted per hour.
  • This is the most aggressive campaign we have ever seen by hourly attack volume.

Read more

massive-brute-force-attack-Dec18.jpg
 
Similar threads
Thread starter Title Forum Replies Date
WAHamilton Main listing filtered by duplicate, after duplicate is marked as 'closed' Google Duplicates & Merges 6
Jeffrey Marking GMB as moved Moving or Name Changes 12
Koray Tuğberk GÜBÜR Review Schema Mark up and Google My Business Reviews Local Search 4
J Somebody marked my GMB as permanently closed Google My Business & Google Maps 2
F Practitioner Listings being marked as Duplicate - Law firm category Google My Business & Google Maps 0
A Repeatedly being marked as open by Google Google My Business & Google Maps 3
M Missing reviews after business erroneously marked as a duplicate Google Duplicates & Merges 6
freerunr Email Notifications: Listings marked as duplicates Google Duplicates & Merges 2
ABuck Verify and Mark as Permanently Closed or Mark as Permanently Closed? Google My Business & Google Maps 4
sixthcitysarah USPS Has Marked this Address Inactive? Recycle Bin 1
B Google marked listing as duplicate but its not Google My Business & Google Maps 1
freerunr "Marked as closed from Google" Verbiage NAP, Categories, Dashboard Data 2
NevenaIvanova "Mark as temporarily closed" option in GMB not working Google My Business & Google Maps 4
GuyFinley Google marks temporary closure as permanent. Google My Business & Google Maps 2
kathleen.rhodes Business Marked as 'Permanently closed' Moving or Name Changes 2
razorclicks The Top 5 Factors for a Review to be marked Most Relevant Local Reviews 5
P Schema Markup - SameAS & HasMap - Does marking these up help with local ranking factors Local Search 0
dlee325 Apple Maps erroneously marking businesses as Closed - Anyone else have this issue? Local Search 4
freerunr Interesting Things in Local Finder: Question Mark and "Write a Review" Google News: Important Changes & Features 2
marcusdb GMB duplicate marked as "Place Doesn't Exist" - can you recover the deleted listing? Google Duplicates & Merges 2
nbrimhall Departments at same address marked as duplicate Google Duplicates & Merges 4
C GMB Marking Service Listings as Duplicate Google My Business & Google Maps 8
JoyHawkins Should you Mark up Testimonials to get Gold Stars? Local Reviews 28
Tim Colling Rude call from Google employee (?) and moved office gets marked as closed Local Search 5
A Local Schema Mark Up for Multi-Locations Questions Multi-Location Issues 3
A Local Schema Mark Up for Multi-Locations Questions Multi-Location Issues 3
R Listings Not Showing - Marked as Spam Google My Business & Google Maps 8
Christa Morgante Main/Practitioner Listings Marked as Duplicate Addresses in GMB Google My Business & Google Maps 6
Rich Owings Duplicate listing marked closed Help & Support for Google Local 4
Linda Buquet Schema: WHAT Should I Mark Up? EVERYTHING - Per Google! Local Search 0
amy.inbound 2 Listings showing in Places Dashboard, Can't edit one - "Marked as Duplicate" Help & Support for Google Local 9
Linda Buquet No Verifcation Check Mark? New Type of Page OR??? Google My Business & Google Maps 2
djbaxter New feature: Mark Thread Unread For Later Reading Forum Tech Support 2
L Marking Listing as Closed Local Search 1
S Marking a business as closed Help & Support for Google Local 7
Daniel C Berman Business with Active Google Places profile, but Marked Closed in Mapmaker Help & Support for Google Local 10
R Marking a G+ Listing as Closed vs Deleting the Listing? Moving or Name Changes 6
R Marking a G+ Listing as Closed vs Deleting the Listing? Moving or Name Changes 6
M Hi from Mark in Vancouver Introduce Yourself - We're Friendly 1
Barb Davids Jump in analytics for one day Organic SEO 3
mihir23192 What could have caused the sudden jump in Number of Google Reviews? 50 to 3500 Help & Support for Google Local 2
FriarTuck00 Big Jump in Number of Google Reviews - Why? Local Reviews 3
valentinb13 Big jump in campaign sessions after site relaunch Local Search 6
R How to "Jump" over returns not physically local Local Search 2
A Strong in organic, poor in maps (rank jumps when you zoom in or out) Local Search 3
Caroline Linking GMB with Adwords- jump in rankings? Google My Business & Google Maps 1
K Home Advisor Jumping into the Google Local Spam Game? Spam on Google 11
Linda Buquet Dead Simple Google Reviews via Mobile - Bypass the Hoop Jumping Local Reviews 16
R Ranking jumping back and forth 350 at a time Help & Support for Google Local 6
djbaxter WordPress: The NoneNone Brute Force Attacks: Currently Active Websites, Software, and Security 0

Similar threads

Login / Register

Already a member?   LOG IN
Not a member yet?   REGISTER

Most UpVoted Answers

Trending: Most Viewed

LocalU Podcasts

  Promoted Posts

New advertising option: A review of your product or service posted by a Sterling Sky employee. This will also be shared on the Sterling Sky & LSF Twitter accounts, our Facebook group, LinkedIn, and both newsletters. More...
Google Product Exert


Top Bottom