adtastichosting Posted November 17, 2010 Share Posted November 17, 2010 We run web analytics on our site and notice searches being conducted from overseas in which the person searching is using google and their search string is: "This order form is provided in a secure environment and to help protect against fraud your current IP address" Of course, if you run this test you will see that all that comes up are WHMCS sites. Call me paranoid but that leads me to believe someone is specifically targeting WHMCS sites for what reason? Usually this means some type of hacking attempt and in such a case that a vulnerability has been discovered and someone is trying to exploit it. We employ modsec and a good firewall and all kinds of other security precautions including renaming the admin area and I haven't found anything otherwise that leads me to believe any hacking attempt has been successful and maybe that is why and of course I believe that as things go WHMCS keeps up with its security and overall is a pretty secure program as far as that goes, but I simply find this very curious so thought I would mention it in case anyone else has any thoughts on this. 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Support Manager WHMCS John Posted November 17, 2010 WHMCS Support Manager Share Posted November 17, 2010 It's probably just a spammer/phisher looking for smaller hosting companies using WHMCS to automate account creation, so they can create an account and immediately start spamming/phishing before they are taken down. I find a lot of spammers/phishers are also referred by searches for "instant setup hosting" for the same reason. The fraud modules will usually catch these guys out though. 0 Quote Link to comment Share on other sites More sharing options...
adtastichosting Posted November 17, 2010 Author Share Posted November 17, 2010 It's probably just a spammer/phisher looking for smaller hosting companies using WHMCS to automate account creation, so they can create an account and immediately start spamming/phishing before they are taken down. I find a lot of spammers/phishers are also referred by searches for "instant setup hosting" for the same reason. The fraud modules will usually catch these guys out though. Well good luck on that! I find that Maxmind catches 99% of them. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.