myBB Admin Panel Login Attempts - Printable Version
-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: myBB Admin Panel Login Attempts (/showthread.php?tid=48875)
myBB Admin Panel Login Attempts by Tasha on 08-12-2005 at 10:06 PM
Well, i'm running myBB on my forums, and just now, i've had 12 emails saying the same thing, just with a couple of different logins (the several different logins and passwords are below, a couple of them were used twice), and same IP:
1. A user has tried to access the Administration Control Panel for Star Dust Graphics Forums. They were unable to succeed in doing so.
Below are the login details:
Username: \' or 1=1 /*
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)
2. Username: or 1=1
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)
3. Username: \'or 1=1/*
Password: (MD5: d41d8cd98f00b204e9800998ecf8427e)
4. Username: or 1=1
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)
5. Username: or 1=1
Password: (MD5: d41d8cd98f00b204e9800998ecf8427e)
6. Username: or 1=1 /*
Password: blank (MD5: 8e15625d6c158ec48f374efb77bd2714)
7. Username: or 1=1/
Password: (MD5: d41d8cd98f00b204e9800998ecf8427e)
I've had things like this in the past too. How do you stop these stupid things, apart from banning IP's, or what causes them to happen? Is it some stupid bot or command or something a person puts in, or just an idiotic person?
RE: myBB Admin Panel Login Attempts by Plik on 08-12-2005 at 10:09 PM
Some one who is trying to sql inject your login.
but because it adds slashes to the quotes then it is unsucessfull....
RE: myBB Admin Panel Login Attempts by mwe99 on 08-13-2005 at 02:34 AM
You could always change the admin user name and make sure you have the latest myBB
RE: myBB Admin Panel Login Attempts by Tasha on 08-13-2005 at 01:09 PM
quote:
Originally posted by mwe99
You could always change the admin user name and make sure you have the latest myBB
lol.. it wont really help to change the admin name. And i do have the latest myBB, and i'm sure I have all the latest patches.
Just got two more of the flipping emails, and banned the IP. :\ (it was the following one twice.)
1. A user has tried to access the Administration Control Panel for Star Dust Graphics Forums. They were unable to succeed in doing so.
Below are the login details:
Username: \' or 1=1 /*
Password: (MD5: d41d8cd98f00b204e9800998ecf8427e)
I feel like something really weird is going on. It's not just that i'm suddenly getting loads of these, but also, since last night, my reputation mod has stopped working, and now only the old one is on there. The files have not gone off the server, nor has anyone other than me, been in the admin panel. I checked my admin logs, and everything it said i'd done, I had done, and clearly remember doing so. This is so weird, and its freaking me out.
RE: myBB Admin Panel Login Attempts by absorbation on 08-13-2005 at 01:11 PM
someone has ftp access now 
i do and you do but i have been on it. check your raw access logs