Forum Moderators: coopster

Message Too Old, No Replies

I got Attack.what's that mean?

I got attack on the phpmyadmain (main.php) but i dont know what is mean?

         

siu04sy

2:28 pm on Feb 23, 2006 (gmt 0)

10+ Year Member



GET /phpmyadmin/main.php
GET /PMA/main.php
GET /mysql/main.php
GET /admin/main.php
GET /db/main.php
GET /dbadmin/main.php
GET /web/phpMyAdmin/main.php
GET /admin/pma/main.php
GET /admin/phpmyadmin/main.php
GET /admin/mysql/main.php
GET /mysql-admin/main.php
GET /phpmyadmin2/main.php
GET /mysqladmin/main.php
GET /main.php
GET /phpMyAdmin-2.5.6/main.php
GET /phpMyAdmin-2.5.4/main.php
GET /phpMyAdmin-2.5.1/main.php
GET /phpMyAdmin-2.2.3/main.php
GET /phpMyAdmin-2.2.6/main.php

can you tell me what's that mean, and what the hacker wanted when he attacked me....I need your help please.

Thanks :)

coopster

5:40 pm on Feb 23, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Welcome to WebmasterWorld, siu04sy.

How do you know you were *attacked*? That looks like normal get requests to me, but I'm not a phpMyAdmin user either. Am I missing something?

phparion

6:14 pm on Feb 23, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



When and Where do you get this message? I dont think so that you have been hacked by someone, because you can use phpMyAdmin in two places,

1 - your local system.
then you are hacked by your some mistake.

2 - Host
well, mostly hosts ask for username and password from you to let you login to phpMyAdmin online. and if someone has hacked your username and password of your hosting plan from you then he has better options to play with why will he only attack your phpMyAdmin?

siu04sy

1:58 pm on Feb 24, 2006 (gmt 0)

10+ Year Member



thanks, yeah right, I think it is not attack, they just access mine, but can you tell me what they want to do by access phpmyadmin ... because i don't have an idea?

jatar_k

5:21 pm on Feb 24, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



a lot of common software/script packages have exploits out there and they do automated enquiries trying to get into sites. More than likely this is an automated query.

Unless you can find some proof that they actually logged in and changed something, though I would be surprised. Change your password and make sure it is up to date and that shoould be fine.

phparion

7:12 pm on Feb 24, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I agree with Admin, change your password and secret question to retrieve password,

however, you asked two times that what a hacker could do by accessing your phpMyAdmin. well the answer is that Whatever a hacker can do to get access to your database because phpMyAdmin is Graphical Interface to manipulate your database(s) and if someone can access this it means he can mis(use) your info and can do a real blunder.