Strange activity

[casinolatte]

I have a question in my stats today i recieved strange activity I have all these hits to site/administrator/index.php, main/administrator/index.php, portal/administrator/index.php, joomla15/administrator/index.php and many more of these. Does anyone no what this is? I am just asking because I don't know if this is someone trying to get into my admin or what. I just have never seen this before.

[eaton2003]

Looks like a potential attempt at a hack but not sure.

[casinolatte]

Thats what I was thinking. I don't know what to do about this? Those links just bring up an error not found page.

[eaton2003]

Do nothing and relax because they are just searching for a backdoor but they are not finding it. You will notice when you get hacked as the log files go like crazy.

[casinolatte]

Thankyou! I apreciate your help!

[universal4]

If it is all from the same IP block the ip.

Rick
Universal4

[Renee]

The other thing I'd suggest is to check out the IP at project honeypot:

projecthoneypot.org

If the IP is a known spammer/hacker etc it will be listed there.
If not, perhaps google the IP address..

If you can't find it in either, send a report to projecthoneypot so they can record it for anyone else who may be getting the same thing.

Let us know how you go

Cheers

[universal4]

Project honeypot has more to do with spam than other hacking, although it may be listed there.

They are currently down for maintenance today. It's a good project so I am sure this is only temporary.

Rick
Universal4

[Renee]

Project honeypot has more to do with spam than other hacking, although it may be listed there.

They are currently down for maintenance today. It's a good project so I am sure this is only temporary.

Rick
Universal4

Yep you're right, but I've found it also lists bots and stuff like that, which is handy in a situation like this.

[casinolatte]

I so love the gpwa you guys are so great. Were else can someone get such great help! Thankyou very much.