Security warning – log in attempted

  • Resolved paulmc911

    (@paulmc911)


    6 years, 7 months ago

    Hi there,

    I recently received this message from my Sucuri plugin:

    Event: Post Update
    Website: https://www.bibliophone.com
    IP Address: 66.249.66.223
    Reverse IP: crawl-66-249-66-223.googlebot.com
    Date/Time: August 6, 2018 6:11 pm

    Message: Page status has been changed; details: ID: 1796,Old status: new,New status: publish,Title: Login Customizer

    This wasn’t me, is it something I should be concerned about?? Within a few minutes I then received this from Sucuri:

    Event: Post Update
    Website: https://www.bibliophone.com
    IP Address: xxx[my ip address]
    Reverse IP: xxx[my ip address]
    Date/Time: August 6, 2018 6:19 pm
    User: ******[my username]****

    Message: Post status has been changed; details: ID: 1797,Old status: new,New status: auto-draft,Title: Auto Draft

    Any clues on this anybody?

    Thanks!

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)

  • The first alert was triggered by Google’s web crawler after it scanned your website for new content. You also have a plugin called “Login Customizer” that seems to be working in a strange way. When Google’s web crawler scanned your website, it triggered an action in this plugin that forced an update in a post or page that they may be using to control the layout of a form that you previously designed.

    The second alert was triggered by WordPress itself when you were inspecting the content of an existing post or page, or while idle during the creation of a new one.

    I suggest you to review the content of those two posts with ID 1796 and 1797 to check if there is any malicious content, both in the text and source coming from the database.

    Marking as resolved, let me know if you need more information.

    Thread Starter paulmc911

    (@paulmc911)

    Thanks for your help. The thing is, I don’t have any posts on that site, only pages. Well, apart from the Hello World one which came with the installation and isn’t published. So I’m not sure how to locate those post ids?

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Security warning – log in attempted’ is closed to new replies.

Tags