Hi,

Someone tried to hack into my system via my PHP login script by brute force. I noticed it while it was being done because I detected an unsual amount of activity by my mysql database.

It was probably done using some standard hacking tool since it was trying common login name combinations.

I tried to congfigure apache to deny the ip address using mod_access but that didn't seem to work.
I tried using /sbin/route to reject the ip but it didn't work as well.

Any ideas suggestions what I should do? I have a raq3 and raq4.

Appreciate any help!

Eric

btw, the hackers ip is 210.227.58.18, seems to be from japan. Should I do something about it?

Make a .htaccess file and add this:


(Limit GET)
order allow,deny
allow from all
deny from ip.address
(/Limit)


didn't show up with < > so replace ( ) with < >