Question

I’ve noticed yesterday by looking into my apache error log that someone tried to get access to the website via calling a lot of sites like:

mywebsite.com/phpmyadmin
mywebsite.com/dbadmin
mywebsite.com/mysqladmin
mywebsite.com/foo.php#some-javascript
...

This caused a lot of 404 errors. What’s the best way to stop them doing so?
I thought about creating a fake-phpmyadmin dir with some php code that bans their ip address from my website when accessing this dir for about 12 to 24 h.

Is there a better way to deal with this kind of guys?

Answer 1

You can’t really prevent people from trying these sorts of attacks. The best you can do is log all these sorts of attempts like you’re currently doing and maybe implement some sort of temporary blacklisting.

The security of your site shouldn’t depend on people not trying to do these sorts of attacks, since you will never be able to fully prevent them.