Unknown User on my site

  • Unknown's avatar

    3 times over the last month I have been notified that a new user has been added to my account. I don’t know who they are. The email names are cryptic and strange.

    I delete them and all their content, but I am worried why this is happening. Does WordPress have to access my account to make changes? I can’t tell if they have done anything. Can they misuse my account information? Should I be concerned?

    Penny

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar

    I’ll tag this thread for a Staff follow-up. Please subscribe to the thread so you are notified when they respond and please be patient while waiting.

    Go to your email program and change the password to a very difficult one because that’s how many hackers gain access to blogs
    Read > http://en.support.wordpress.com/security/

    1. If you can log-in go here > Users > All Users and delete any user that does not belong there.

    2. Disable post by email > http://en.support.wordpress.com/post-by-email/

    3. Disable post by voice > http://en.support.wordpress.com/post-by-voice/

    4. Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password
    You can also reset your password via your Settings tab on the WordPress.com home page:
    http://wordpress.com/#!/settings/

    5. Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.

    6. To add another layer of home security, you can now enable Two Step Authentication, also known as Two-Factor Authentication http://en.support.wordpress.com/security/two-step-authentication/

  • Unknown's avatar

    Hi Penny,

    I can assure you that WordPress.com staff will not make changes to your blog or the users on your blog without your permission. I also checked your account and blog and I don’t see record of the new users you mentioned.

    Can you please copy and paste the exact message you received in the new user notification? That will help me investigate this for you.

  • Unknown's avatar

    This one came to me on June 16 and again on the 17th:
    New user registration on your site Penny Tyler, Writer:
    Username: misiaczekssk
    E-mail: (email visible only to moderators and staff)

    This one just came on July 5th:
    New user registration on your site Penny Tyler, Writer:
    Username: ZulmaU06breyx
    E-mail: (email visible only to moderators and staff)

    All three were from WordPress and said New User Registration as the header.
    I immediately deleted them and selected delete all content.
    I don’t know what they would want with my site, it’s pretty benign.
    I changed my pennychismtyler email password. I hope that fixes it.

  • Unknown's avatar

    Hi Penny,

    Those details (including the site title “Penny Tyler, Writer”) don’t seem to correspond to your WordPress.com site here: http://pennytyler.wordpress.com/

    Do you have another site other than that one? If so, can you please reply with a link to that site?

  • Unknown's avatar

    I use pennytyler.com hosted through GoDaddy with your format or whatever you call it. This is the site where the new users showed up and I was able to delete them.

    I may have started to build a free website with wordpress a long time ago, but I have never developed it or used it.

  • Unknown's avatar

    Hi Penny,

    Thanks for clarifying that. The support staff here at WordPress.com are only able to help with sites hosted here. It’s possible that something is happening at your self-hosted site at pennytyler.com, but I don’t have the power to tell what’s going on there.

    You can get more help with your self-hosted site in the WordPress.org support forums here:

    http://wordpress.org/support/

    You may also want to look at this support page, with more information about what to do in case your self-hosted site was hacked: http://codex.wordpress.org/FAQ_My_site_was_hacked

  • The topic ‘Unknown User on my site’ is closed to new replies.