Just a warning. This ip address 84.165.111.238 has been trying to log in to one of my admin panels.

Hi,

Yeah, we've had a lot of them too.

http://ripe.net/...=0&submit=Search

Its a german site, who try and do a PR boost via adding crap into your home tempalte.

A couple of our installations were compramised (nothing major, fortunatly, and its all be fixed up now).

They rely on people using weak passwords, such as "admin" and "admin", or "admin" and "1234". Yet another reason for people to be more alert in terms of what they use to protect their admin panels with =)

NB: You can send an abuse report here:


I've already sent several, and I'm sure others have too. Unfortunatly, appart from banning their entire IP range in Apache, there isn't a lot you can do

Cheers

Andy (mod)
andy@ultranerds.co.uk

---

Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!

Thanks Andy - I just reported them.

Hi, just as warning

Last night from this ip: 193.64.64.58 (somewhere in Finland) i've encountered a lot of hack attempts in my forum admin, community and also a various other scripts.

The scanned all my network even workstations with this crap

Cheers,
Boris

Facebook, Twitter and Google+ Auth for GLinks and GCommunity | reCAPTCHA for GLinks | Free GLinks Plugins

Yeah, people keep trying this recently :(

I'd suggest blocking them in Apache;


Hope that helps.

Cheers

Andy (mod)
andy@ultranerds.co.uk

---

Want to give me something back for my help? Please see my Amazon Wish List
GLinks ULTRA Package | GLinks ULTRA Package PRO
Links SQL Plugins | Website Design and SEO | UltraNerds | ULTRAGLobals Plugin | Pre-Made Template Sets | FREE GLinks Plugins!

Yeah Andy,

I have already done this, just wanted to alert the people for them.

p.s. I suggest to put this to your .htaccess guys , and hey Andy this one is simple


Cheers,
Boris

Facebook, Twitter and Google+ Auth for GLinks and GCommunity | reCAPTCHA for GLinks | Free GLinks Plugins

>>> deny from 193.64.64.0/255.255.240.0

Or, even more succinct: deny from 193.64.64.0/28
dave

Big Cartoon DataBase
Big Comic Book DataBase

Is this work?

While i read the apache manuals, haven't seen support for this type of netmask

May be i must go deeper.

Cheers,
Boris

Facebook, Twitter and Google+ Auth for GLinks and GCommunity | reCAPTCHA for GLinks | Free GLinks Plugins

Actually, I do not know specifically if Apache will use that format- But I do use it in ipfw in FreeBSD for blocking unwanted IP's... works fine there.
dave

Big Cartoon DataBase
Big Comic Book DataBase

Ah
In that case Yes

This will work fine, but here we started mention, case with the .htaccess to deny from apache side.

But your solution is very good in case you have control over the whole machine, not only the site

Cheers,
Boris

Facebook, Twitter and Google+ Auth for GLinks and GCommunity | reCAPTCHA for GLinks | Free GLinks Plugins