@scottalanmiller Oh... I guess I misunderstood when the OP stated

No. It's a brand new Wordpress site at a new server for a domain that has been active for 20 years.

So the WP site is brand new, but is associated with a long existing domain.

@JasGot said in Casual and open discussion about how certain addresses are targeted for hacking.:

es, it was not. Which is why it is so weird (to me).

Or maybe it was being attacked and the other hosting company had previously blocked the requests like you did.

I'm assuming the site was also under attack prior to moving hosts. Have you confirmed that with the site owner?

Youtube Video

I've used AnyDesk for this in the past.

@Dashrender Anybody notify Accounting of these fraudent emails being forwarded to them?

https://www.theverge.com/2020/2/19/21143789/google-android-11-developer-preview-release-5g-security-early

https://krebsonsecurity.com/2020/02/hackers-were-inside-citrix-for-five-months/