I think someone is trying to hack my website

Server Config
1

I’m looking at my 404 list (got around 200-something hits) and the list is mostly URL’s that end in something along the lines of:

//phpMyAdmin-2.5.6-rc1/index.php 2 -
//typo3/phpmyadmin/index.php 2 -
//phpMyAdmin-2.5.5/index.php 2 -
//phpMyAdmin-2.5.5-rc1/index.php 2 -
//xampp/phpmyadmin/index.php 2 -

What should I do? I found this out with Awstats in my HostGator cPanel.

2

That’s pretty common. I’m not sure it’s anything to worry about, but perhaps ask your host if you’re not sure.

3

Yes, I’ve seen this a lot. It’s automated systems trying to find weaknesses/ known attack vectors. They just scan hundreds if not thousands of sites every day, and if they find something which looks like a possible weakness, then the hacker will try to exploit it.

Generally, if you make sure your server is up-to-date and you properly protect stuff like PhpMyAdmin and any CMS’ you may be using (and update them whenever there is an update), you don’t need to worry about this.

4

Ok thanks. I just wish it would tell me which IP address it was coming from though so I can block them. So far, I went through my latest visitors and looked up their IP addresses and banned those who came up as spam bots, etc.