Admin Tools

#10138 Is it normal to have so many attack?

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by nicholas on Thursday, 08 December 2011 03:14 CST

Wednesday, 07 December 2011 21:31 CST

user46704

Hi,
I've been using Admin Tools on few website and i've been very happy to see that it's doing a great job.

But i'm just curious to know if it's "normal" (if i can say) to have between 5 to 10 attack per day? A large amount of them being a RFIShield attack as per the log.

So i'm just wondering if it is a bad setting on my part or if they are so many "no-life" people on this planet spending their time trying to hack innocent, non-political website?

thanks

Thursday, 08 December 2011 02:20 CST

nicholas

If you only get 5-10 attacks, it's very quiet. Really. The usual amount of attacks on a moderately busy site is 50-100 every day. Some of them might be false positives, but I've rarely seen any false positives from RFIShield. So, yeah, there are a lot of people who don't have a life and they just try attacking random sites. What's even more sad is that they usually don't have a clue about what they're doing, they use the scripts written by real hackers and most of those scripts address vulnerabilities in component versions which were current 4 or 5 years ago. Sometimes they get a lucky break with a current exploit and they wreck havoc. Just take a look at the Wikipedia article for "Script Kiddie" to see what I mean.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Thursday, 08 December 2011 03:11 CST

user46704

thanks for the info.

Actually, now that I've said, I've receive even more notification from the Admin Tool.
But a few of them were actually legit access to the back-end.

I guess there is some fine tuning needed on my part.

Thursday, 08 December 2011 03:14 CST