Yes! Many users have reported constant errors and the horrible horrible WordPress White Screen of Death.

Some background about La Prensa

  • La Prensa is one of the biggest newspaper in the Nicaragua.
  • It runs on Worpdress. Previously to running on WordPress it ran on a custom CMS
  • It runs on AWS with EC2 instances and RDS databases.
  • It uses AWS CloudFront for cache service.

Below we are going to break down more info!

La Prensa’s core: WordPress

Yes, as you can see on the site itself runs on WordPress, we do not know which version as it is hidden for security purposes. What I do know about it is that is running on a WordPress Multisite edition.

We do know it also uses Contact 7 & a Flip book plugin for image Gallery.

A good thing that I noticed is that they have XML-RPC disabled, if you have been reading my blog, on previous articles I have stated that is is an important security fix to disable this feature to avoid bruteforce attacks.


La Prensa runs on Amazon Web Services (AWS)

Yes, let’s see the facts:

Name Servers – Amazon Route 53

Run this command on your terminal:

dig ns

and you will get this (or something similar): 160353 IN NS 160353 IN NS 160353 IN NS 160353 IN NS

Those nameservers are AWS Route 53 Nameservers. See more about AWS Route 53.

www A records

Then the next step is to determine where the is pointed at, so you go to your terminal again and run this command:


And you will get a similar output to the one below: 60 IN A 60 IN A

Now to know who that IP belongs to we can run the following command:


# ARIN WHOIS data and services are subject to the Terms of Use
# available at:
# If you see inaccuracies in the results, please report at
# Query terms are ambiguous.  The query is assumed to be:
#     "n"
# Use "?" to get help.
# The following results may also be obtained via:
NetRange: -
NetName:        AMAZON
NetHandle:      NET-54-144-0-0-1
Parent:         NET54 (NET-54-0-0-0-0)
NetType:        Direct Allocation
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        2014-10-23
Updated:        2014-11-13
OrgName:        Amazon Technologies Inc.
OrgId:          AT-88-Z
Address:        410 Terry Ave N.
City:           Seattle
StateProv:      WA
PostalCode:     98109
Country:        US
RegDate:        2011-12-08
Updated:        2014-10-20
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-266-4064
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-266-2187
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-266-4064
# ARIN WHOIS data and services are subject to the Terms of Use
# available at:
# If you see inaccuracies in the results, please report at

As you can see based on the all the facts, La Prensa Nicaragua is indeed in AWS.

La Prensa is cached by AWS CloudFront

After doing a quick review of the site’s source I found that it was using CloudFront using the following CNAMEs:


They are all CNAME’s for 

But even with CloudFront enabled we (and I mean Nicaraguans) have seen the site go down several times lately. There is something fishy right there.


  1. Due to the fact that this is a site with a lot of traffic. Which means that it probably takes 2 Million hits a month, I do think that the wp-login.php should either be changed/renamed/moved or that a security plugin should be implemented to limit the login attempts. I tried to login more than 10 times without getting not even a warning. This obviously leaves the door opened for someone to do a script that does a lot of HTTP POSTS to this file to try to authenticate.Some options are:

    – WordPress Limit Attempts by Johanee
    Bullet Proof Protection by AITpro
    Wordfence Security by Wordfence


  2. Improve the UI/UX. Clearly on this El Nuevo Diario is a huge winner by far.

What do you guys think I missed ?

Published by Sal Aguilar

IT Pro that focuses in solving problems and providing solutions for customers.

Join the Conversation

1 Comment

Leave a comment

Please log in using one of these methods to post your comment: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: