Re: [CentOS] PMA attacks

2012-06-20 Thread Bob Hoffman
On 6/19/2012 2:31 PM, m.r...@5-cent.us wrote: But now I'm seeing the same from Azerbaijan, and France, and elsewhere. Two questions: first, are other folks seeing this? and second, I can't imagine malware this stupid, to keep hitting the same sites over and over when it's not found, rather

[CentOS] PMA attacks

2012-06-19 Thread m . roth
It appears to be a low-level attack, not so frequent as to be banned permanently, just a number of times a day. I did google on this, and I gather it's looking for phpmyadmin. We've been getting one from one specific network in Russia for weeks Here are more information about 91.201.64.24:

Re: [CentOS] PMA attacks

2012-06-19 Thread John Hinton
On 6/19/2012 2:31 PM, m.r...@5-cent.us wrote: It appears to be a low-level attack, not so frequent as to be banned permanently, just a number of times a day. I did google on this, and I gather it's looking for phpmyadmin. We've been getting one from one specific network in Russia for weeks

Re: [CentOS] PMA attacks

2012-06-19 Thread Dennis Jacobfeuerborn
On 06/19/2012 08:31 PM, m.r...@5-cent.us wrote: It appears to be a low-level attack, not so frequent as to be banned permanently, just a number of times a day. I did google on this, and I gather it's looking for phpmyadmin. We've been getting one from one specific network in Russia for weeks