Samara Oblast – Russian Hacking or SPAM Referral to your website?

Samara Oblast is a region in Russia that will easily drive more than 1,000 inquiries to your website every month.
This is not always good traffic.

 

Now when we look at a daily cyber attack report to the same server we can see the break down of Brute Force attacks by country and by danger level

Brute force attacks to hack passwords or failed logins

91.220.131.134, #5,  Russia
203.87.129.149, #1,  Philippines
196.206.83.103, #1,  –
46.59.37.219, #1,  –
96.244.114.116, #1,  –
78.189.137.46, #1,  –
95.96.115.9, #1,  –
31.130.96.20, #1,  Poland
114.143.140.110, #1,  –
189.125.69.66, #1,  –
166.62.38.236, #6,  –
112.135.79.193, #1,  –
82.79.190.145, #1,  –
59.182.101.17, #1,  –
62.31.12.203, #1,  –
188.167.82.21, #1,  –

Brute force attacks to find accounts

91.220.131.134, #5,  Russia
203.87.129.149, #1,  Philippines
196.206.83.103, #1,  –
46.59.37.219, #1,  –
96.244.114.116, #1,  –
78.189.137.46, #1,  –
95.96.115.9, #1,  –
31.130.96.20, #1,  Poland
114.143.140.110, #1,  –
189.125.69.66, #1,  –
166.62.38.236, #6,  –
112.135.79.193, #1,  –
82.79.190.145, #1,  –
59.182.101.17, #1,  –
62.31.12.203, #1,  –
188.167.82.21, #1,  –

admin

91.200.12.91, #3,  Ukraine
171.25.193.20, #1,  Sweden

 

For this and more information on the source of attacks

https://cleantalk.org/blacklists/203.87.129.149

We have been using a WordPress plugin by CLeantalk to subsidize our monitoring systems and it is doing an amazing job of alerting us of attacks which had gone undetected by off the shelf and other server side solutions.

Security & Firewall plugin by CleanTalk