What could cause 1000's of failed login attempts from my IP address
Hi Sorry not sure where to even post this.
I have been having a persistent issue where by my own IP address is being blocked by my overseas web host (not the ISP that provides the IP) resulting in me being unable to connect to my own website. Anyone else can, including if I try from my phone, through my Phone service provider (thus a different IP)
I have been in contact with the web host and they tell me that I am being blocked because there are many thousands of failed login attempts from my IP address (at a rate of 1 per second) , and so it gets blocked. Fair enough.
My first thought was a virus. I have ClamXav and ran that and it did find a suspicious file called called hide.php It has been quarantined though and the problem persists.
Lastnight we had thunderstorms and so I physically unplugged all my machines. According to the Webhost (DreamHost) there were still failed login attempts during that time. So really I fail to see how it could be my machines.
So my next thought is that someone has hacked my wifi and is using my connection. I have reset my router password and rebooted it to disconnect anything that was connected - I am waiting to chat with Dreamhost to see if the attacks are continuing
I have also contacted my Local ISP, to see if they can shed any light on this, but the team that can help don't work on the weekend…
I am running mix of machines everything from 10.5 to 10.9, though I believe the issue is related to my main machine that is running 10.7.5
Just hoping that someone out there can suggest something that I have missed.
Cheers
Craig
DualCore 2.3 G5, G5 iMac G4 933 x2 + G3 300 + iMac 500 + iMac 600 + 15 PB 1.67, Mac OS X (10.4.8)