bigstef Posted July 25, 2010 Share Posted July 25, 2010 Every day for the last week or so I have had an ip address trying to access my website166 times, obviously malicious.They change their ip address all the time but they always attempt to get into my website 166 times.According to my logs they get a 404 error 166 times while attempting to get access to urls like phpMyAdmin-2.8.0-rc2/scripts/setup.php, phpMyAdmin-2.8.0.2/scripts/setup.php, phpMyAdmin-4/scripts/setup.php, /PMA2005/scripts/setup.php.The list goes on and on but every day they attack 166 times tring all different combinations to get access.I think they may evetually get in but how can I make it more difficult for them. Any software I should be running to give me the edge on them.Many thanks for any help. Link to comment Share on other sites More sharing options...
MrBaseball34 Posted July 26, 2010 Share Posted July 26, 2010 Are they using the same IP block? Link to comment Share on other sites More sharing options...
bigstef Posted July 26, 2010 Author Share Posted July 26, 2010 They use a different ip address every time they attempt a connection but they always attempt 166 times.I block their ip address using the htaccess file but they just change their ip and try the next day.Today is the first day they have attempted to hack in more than once and on all occasions they attempted access 166 times. Link to comment Share on other sites More sharing options...
GB Posted July 26, 2010 Share Posted July 26, 2010 Hi bigstef,Why you don't install http://www.crawlprotect.com/Upload the folder to your server (rename it whatever you want) create your admin pass and name and generate the htaccessHope this helps Link to comment Share on other sites More sharing options...
MrBaseball34 Posted July 26, 2010 Share Posted July 26, 2010 They use a different ip address every time they attempt a connection but they always attempt 166 times.I block their ip address using the htaccess file but they just change their ip and try the next day.Today is the first day they have attempted to hack in more than once and on all occasions they attempted access 166 times. Are the IP addresses they use from the same BLOCK? i.e.All begin with 89.185 etc???? Link to comment Share on other sites More sharing options...
bigstef Posted July 26, 2010 Author Share Posted July 26, 2010 I understood the question, they are completely different ip addresses every time.One attempt they use an ip from brasil then china, uruguay, uk and keep changing all the time. Link to comment Share on other sites More sharing options...
MrBaseball34 Posted July 26, 2010 Share Posted July 26, 2010 You will need to speak to your host about this one, I'm afraid. They may be able to help out with more info. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now