• Resolved sus

    (@susgeek)


    I manage multiple websites, but on only one of them do I have Jetpack installed, free version.

    On my Wordfence log, I observed recently multiple attempts to log in using my WordPress.com username and email address, which Jetpack is using to connect to WordPress.com.

    They don’t have the password, so the attempts were blocked by Wordfence.

    How did this hacker correctly discover which WordPress.com account was connecting to Jetpack? Also I don’t use my regular email address on WordPress.com, but an alternate, which the hacker correctly guessed.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support lastsplash (a11n)

    (@lastsplash)

    Hi @susgeek

    It seems like the likely cause of this would be that the email or username has been used elsewhere and that there is a bot attempting to access the site using that information.

    Are you using that email or username elsewhere? Is it easily guessable? You might want to try searching for the email on <a href=”https://haveibeenpwned.com/
    “>HaveIBeenPwned.com to see if it appeared in a data breach.

    Let us know what you find out.

    Thread Starter sus

    (@susgeek)

    Good news — no pwnage found!
    No breached accounts

    Wordpress.com is the only place this email/username pair is used.

    • This reply was modified 2 years, 7 months ago by sus.
    Plugin Support Bruce (a11n)

    (@bruceallen)

    Happiness Engineer

    Hi @susgeek

    That’s good news.

    If you’d like us to look into this some more for you, we’d like to run some more tests with you on your site to try to figure out what’s happening.

    Could you contact us via this contact form and mention this thread?

    Thread Starter sus

    (@susgeek)

    Message sent ??

    Plugin Support lastsplash (a11n)

    (@lastsplash)

    Hi @susgeek

    I see the message in our queue.

    Since we’ll be dealing with this over email now, I am going to mark this thread as “Resolved”.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Strange Jetpack Issue’ is closed to new replies.