Good evening. This post is going to be short and sweet, but something that any current and past SurvivalRing website users should be aware of.
Since Monday of last week, December 2nd, there has been a sustained and continuing multi-pronged attack by an unknown group trying to hack into the SurvivalRing website. At this point, in less than 10 days, there have been at least 10,000 attempts to gain access via code injections, fake log-in names, password recovery attempts, and admin account brute force login attempts.
It is continuing 24 hours a day, and my website tracking and security tools are showing hundreds of proxy (hidden or obscured) IP addresses, IP addresses and/or referring domain sources from all over the world, and the US (usually signifying someone’s infected PC systems being control by a malware infected and manipulated botnet from Europe, China, or Russia) addresses from all over the nation (government .gov sites, k-12 school sites, and many more).
What does this mean to you? Nothing right now.
If you notice the site may get slow or not respond, try it again in a few minutes. If you have an account and can’t log in, shoot me an email and I’ll verify the automation in the security system hasn’t accidently logged you out due to the overt hacking attempts. Right now, any fake user name logins or unverifiable IP address attempts are having the IP address attempt of the attack source permanently locked out. For the first few days I was doing this manually, but now have the site set to automatically deal with this for me.
Here’s an example of the kind of attempts I’ve getting 100’s of times a day…
This alert was generated by Word****** on “SurvivalRing” at Wednesday 11th of December 2013 at 10:22:18 PM
A user with IP address 18.104.22.168 has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username ‘TaylahReinhart’ to try to sign in.
User IP: 22.214.171.124
User hostname: 94-23-76-121.kimsufi.com
This alert was generated by Word****** on “SurvivalRing” at Wednesday 11th of December 2013 at 10:44:25 PM
A user with IP address 126.96.36.199 has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username ‘FaustinoGarica’ to try to sign in.
User IP: 188.8.131.52
User hostname: ppp-static6-119.tis-dialog.ru
or even this…
This alert was generated by Word****** on “SurvivalRing” at Wednesday 11th of December 2013 at 10:32:20 PM
A user with IP address 184.108.40.206 has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username ‘TylerHixson’ to try to sign in.
User IP: 220.127.116.11
There have been no successful intrusions, code injections, or defacements of SurvivalRing for close to a year now. The security tools, and the backup protocal for the site have been perfected, and everything is working like it’s supposed to.
I’m not sure if any other survival and/or prep sites are seeing these kinds of daily site attacks, but I would hazard to guess it’s a definitive ‘hell, yes’, and that it’s only going to get worse.
Bottom line? My website is secure, and backed up, and working fine. Bad guys aren’t getting past the gates. My home system is secure behind a plethora of the highest security hardware and software available. Any successful hacks (if and when they happen) will be dealt with swiftly, using the full power of the law.
Please, for both of us, make sure YOUR own computer security tools are updated, setup, and WORKING. If you don’t know how, contact me. I’ve shared before here at SurvivalRing just how you can take care of your system security for free.