Question re different IPs…?

  • Resolved crzyhrse

    (@crzyhrse)


    6 years, 4 months ago

    Thank you much for this plugin…

    May I ask what this might suggest to you…?

    The IP via this plugin is described in IP Lookup as a godaddy IP in Arizona… I have Wordfence installed, and it gave me notice of a new registration and then rather immediately the notice of the new user login, with the login IP and location, which is in Estonia in Europe… I confirmed that with another IP lookup…

    I think I know what it might suggest but wanted some more expert opinion, rather than jumping to conclusions…

    Kind regards,
    John.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    Two thoughts jump into my mind. Are all new users getting the Godaddy IP or just this one person?

    If it’s everyone, then ‘something’ is filtering the IP before it’s saved by WP, which is not abnormal for a proxy service like WordFence offers (and I have no idea if you’re using that).

    If it’s the one person, then they may be using a VPN or a TOR proxy.

    Thread Starter crzyhrse

    (@crzyhrse)

    No, not using a proxy, Wordfence or otherwise, and also no the godaddy IP is for just this registration…

    VPN or Tor was one thought I had… I also wondered if a Godday site was hacked could it be being used to register, then somehow from somewhere else there is an auto login… Guessing of course, am I’m not intimate with such terrain… Also, I forgot to mention that there was a password change right after the login… All three actions from register to login to pass change happening within a few minutes at most…

    Curious…?

    Plugin Author Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    I would be hella suspicious of it, block the account, and the IPs.

    And I’d go through my site to make sure I wasn’t hacked.

    But I’m a neurotic.

    Thread Starter crzyhrse

    (@crzyhrse)

    Did all of the above, including running a Wordfence scan…

    I appreciate your attention and feedback, @ ipstenu, and all the ways you help make WordPress the huge blessing to world community that it is…

    Warm regards,
    John.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Question re different IPs…?’ is closed to new replies.