Support

Hi, I am informed since yesterday / today more often by mail that attacks of the category MUA SHIELD are registered:

Report from AdminTools regarding the website of St. Ursula School.

Reason: MUA shield

IP Address: 51.77.111.216 -IP Lookup

Reason of blocking: MUA shield

Block Date: 2019-06-04 18:19:50 UTC

Accessed URL: https://www.st-ursula-schule.de/

Username: Guest

Land of attack: GB

Continent of the attack: EU

User agent: HACKING ATTEMPT DETECTED

Name of the page: St. Ursula School

Content of "admintools_breaches.php2" after attempted access as follows:

-------------------------------------------------------------------------------
Blocking reason: muashield
-------------------------------------------------------------------------------
Reason     : MUA Shield
Timestamp  : 2019-06-04 10:01:36 GMT
Local time : 2019-06-04 10:01:36 UTC 
URL        : https://www.st-ursula-schule.de/
User       : Guest
IP         : 51.77.111.216
Country    : GB
Continent  : EU
UA         : HACKING ATTEMPT DETECTED

Do you know the cause in detail? Anything to consider?
Thanks and Regards
Uli

Someone is up to no good. Admin Tools blocked them. Your site is fine.

The attack used a Malicious User Agent but the attempt was not successful. If you have Admin Tools set up to auto block the IP address, it will do that - if the attack comes fast enough to fall into your auto block settings. But blocking the IP address is mostly useless, they just move on to another address. You can prevent them from succeeding but you can't prevent them from trying.