Printable View
I have a question in my stats today i recieved strange activity I have all these hits to site/administrator/index.php, main/administrator/index.php, portal/administrator/index.php, joomla15/administrator/index.php and many more of these. Does anyone no what this is? I am just asking because I don't know if this is someone trying to get into my admin or what. I just have never seen this before.
Looks like a potential attempt at a hack but not sure.
Thats what I was thinking. I don't know what to do about this? Those links just bring up an error not found page.
Do nothing and relax because they are just searching for a backdoor but they are not finding it. You will notice when you get hacked as the log files go like crazy.
Thankyou! I apreciate your help!
If it is all from the same IP block the ip.
Rick
Universal4
The other thing I'd suggest is to check out the IP at project honeypot:
projecthoneypot.org
If the IP is a known spammer/hacker etc it will be listed there.
If not, perhaps google the IP address..
If you can't find it in either, send a report to projecthoneypot so they can record it for anyone else who may be getting the same thing.
Let us know how you go :)
Cheers
Project honeypot has more to do with spam than other hacking, although it may be listed there.
They are currently down for maintenance today. It's a good project so I am sure this is only temporary.
Rick
Universal4
Yep you're right, but I've found it also lists bots and stuff like that, which is handy in a situation like this.Quote:
Originally Posted by universal4
I so love the gpwa you guys are so great. Were else can someone get such great help! Thankyou very much.:hug: