I think someone is trying to hack my website

I’m looking at my 404 list (got around 200-something hits) and the list is mostly URL’s that end in something along the lines of:

//phpMyAdmin-2.5.6-rc1/index.php 2 -
//typo3/phpmyadmin/index.php 2 -
//phpMyAdmin-2.5.5/index.php 2 -
//phpMyAdmin-2.5.5-rc1/index.php 2 -
//xampp/phpmyadmin/index.php 2 -

What should I do? I found this out with Awstats in my HostGator cPanel.

That’s pretty common. I’m not sure it’s anything to worry about, but perhaps ask your host if you’re not sure.

Yes, I’ve seen this a lot. It’s automated systems trying to find weaknesses/ known attack vectors. They just scan hundreds if not thousands of sites every day, and if they find something which looks like a possible weakness, then the hacker will try to exploit it.

Generally, if you make sure your server is up-to-date and you properly protect stuff like PhpMyAdmin and any CMS’ you may be using (and update them whenever there is an update), you don’t need to worry about this.

Ok thanks. I just wish it would tell me which IP address it was coming from though so I can block them. So far, I went through my latest visitors and looked up their IP addresses and banned those who came up as spam bots, etc.