Currently, WordPress is experiencing a global brute force attack. This is not limited to HostDime, but is affecting web hosts worldwide.
This attack is widespread and very vigorous. At this time, we suggest you log in to your WordPress account and change your password to a VERY strong password in accordance with HostDime’s suggested guidelines.
The attack is specific to WordPress installations at this time.
If you have been having any trouble with your WordPress today, you are likely vulnerable to more issues. If you have a Virtual Private Server or a Dedicated Server, your risk may be higher.
We are taking many proactive measures to mitigate this situation but the best defense starts with you. Please check your websites, your system and update your software. Change your WordPress password immediately. At this time, secure your WordPress installation and, as suggested update your passwords for all of your logins on a regular basis.
We have methods for assisting you in this attack. If you have multiple issues that are beyond your ability to mitigate, or you are unsure what to do, please do hesitate to submit a ticket via Core or contact us via Live Chat. We have support personnel here 24/7 to assist you with any issues you may have.
Thank you for assisting us in keeping your information safe and secure.
UPDATE #1 (12:25 PM EST): There’s a substantiated rumor that Joomla and other open source installations have been attacked as well. More information to follow soon.
UPDATE #2 (4:20 PM EST): Support Manager for HostDime Aric P. has authored a post to help you protect your password from attackers. You can read that post here.
[divider]
HostDime.com is ranked in the top 50 hosting sites in the world. Check out our product line and follow us on Facebook and Twitter for breaking news.
can we use cloudflare to tackle it ?
it is not limited to wordpress, also includes Joomla and other open source installations
Correct, this is spreading to even non-CMS websites. But it started with WordPress and is still primarily focused on WordPress sites at least for the brute-force portion of the show.
If you have a WordPress site that was attacked, here is how you can recover, check for and remove hacks, and secure your site:
http://calladeveloper.blogspot.com/2013/04/global-wordpress-brute-force-attacks.html
Thank for the input. I have an account associated with you guys and my blogs can’t be hacked, because I take extra care for all of them.I have written an article about WordPress security. I hope it helps in general 🙂
http://www.blackhatworld.com/blackhat-seo/blogging/495526-guide-make-your-wordpress-blog-hackproof-complete-guide.html#post4821645