Web virus attack every second

[maestrosonrisas]

Hello my wordpress has been constantly attacked every day, files were uploaded and redirections were made to others websites.

I instaled sucruri pluggin paying the annual fee, and no result. They keep acessing the web. And i uploading backup security.

Know i have instaled OSE wp firewall and seems that they are getting more dificulty accessing and uploading files. But still sending like 40 attacks every day.

Is ther any way to stop this?

were is some information of the blocked attacks

LOGTIME: 2013-02-22 10:58:01

FROM IP: http://whois.domaintools.com/27.153.210.183

REFERRER: http://www.propdental.com/index.php?option=com_registration&task=register

LOGTIME: 2013-02-22 10:52:09

FROM IP: http://whois.domaintools.com/2a00:1d70:c01c::69:61

URI: http://www.propdental.com/video//wp-admin.php

FROM IP 40 attacks this ip every two seconds:

http://whois.domaintools.com/2a00:1d70:c01c::69:61

URI: http://www.propdental.com/video//wp-admin.php

ACTION: Blocked

LOGTIME: 2013-02-22 10:49:10

FROM IP: http://whois.domaintools.com/103.31.186.82

URI: http://www.propdental.com/

METHOD: GET

LOGTIME: 2013-02-22 10:37:10

FROM IP: http://whois.domaintools.com/120.43.11.251

URI: http://www.propdental.com/blog/tag/carillas-de-porcelana-cerinate

METHOD: GET

USERAGENT: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.95 Safari/537.11

REFERRER: http://www.propdental.com/blog/tag/carillas-de-porcelana-cerinate

ACTION: Blocked

LOGTIME: 2013-02-22 10:28:52

FROM IP: http://whois.domaintools.com/36.251.43.51

URI: http://www.propdental.com/

METHOD: GET

USERAGENT: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1229.94 Safari/537.4

REFERRER: http://www.buyclassybags.com/

[EGOL]

I would hire a pro.

These types of problems can be very difficult to solve and can come from a variety of sources.

I would contact them and ask how much to clean a wordpress install.  I bet the price is lower than you think.

[maestrosonrisas]

You think that if i install wordpress again and all pluggins again this will stop?

in the last hour another 250 attacks to different urls

Any recommendation of someone who can handle this for me?

thanks

[EGOL]

If you do a full reinstall it might work.

The problem could be in the pluggins as they are installed - or they could have vulnerability that is exploited after install.  If you were running an old version of wordpress, it could have holes.

The problem could be on your computer and it gets into your wordpress when you upload files, the server could have openings that are being exploited.

There are so many ways for these things to happen.

[MarieHaynes]

I can recommend someone very good.  My website was affected by malware.  I first contacted my host and they did a few things that we thought fixed the problem but it came back.  Then I hired sucuri.  I believe that for many virus problems sucuri is good, but they couldn't get this one.  It came back every single day and got harder and harder to detect.

A friend recommended Michael VanDeMar.  (You can contact him here.)  It took him a little while but he uncovered the problem.  It was a sneaky malware that would only appear on computers using internet explorer, and not all the time.  Plus, it would hide itself when someone from the host's IP was trying to find it.  Michael fixed it for me.  His rates were really fair.  It cost me just a little bit more than sucuri.

[Brian-H]

A low cost short term solution, to buy time to think, would be to use cloudflare and their nameservers. They scan for attacks and block the ip. Almost everything from cloudflare is free and it will cause minimal disruption to real visitors.

Next I'd hire a system admin to audit the network and find out from the logs how and where they are getting in. It could be the server is not secure.

[maestrosonrisas]

I did also hired sucuri, but it was not worthing, becuase with the instaled pluggin they keep geting control of my web

now they can not get in my web just because they are being blocked by OSE wp firewall

[MarieHaynes]

You may have missed my point.  Sucuri didn't fix my problem either, but when I hired Michael (see link in my response above) he had the expertise to fix it.  I agree with EGOL that in some cases you need to hire a pro.

(I have no allegiance or connection to Michael other than the fact that he saved me so much headache after weeks of struggling with malware that other people couldn't fix.)