Attempting to log in as "admin"

JennM517 · 2010-03-07 7:20 pm

Both my sites have been hit repeatedly by "someone" attempting to log in as "admin". I checked the IP 78.189.174.220 and it's not in the database.

I don't have a user ID or email address associated with that IP to submit a report.

I banned that IP on one of my sites this morning, and I just noticed that "it" has been trying to log in as admin on my other site - so I just banned it from there too.

Is there a way to report IPs like that without user ID info? I guess I could report the user name as "admin" because that's what they are trying to sign on as - but I have no email address attached to it.

Jenn

computerforumz · 2010-03-07 7:46 pm

78.189.174.220

Host name: dsl78.189-44764.ttnet.net.tr
Country: Turkey
Country Code: TR
Region: Ankara
City: Ankara
Latitude: 39.9272
Longitude: 32.8644

Last edited by computerforumz (2010-03-07 7:47 pm)

JennM517 · 2010-03-07 8:29 pm

How did you find that?

I've blocked them from both my sites - I'd wanted to submit them to this site's database but without user ID and email address I was unable to.

Jenn

Alex Kemp · 2010-03-07 9:43 pm

JennM517 wrote:

How did you find that?

Use a Whois-lookup. Here is one of many:
http://whois.domaintools.com/

I've blocked them from both my sites

Without an email address that is all that you can do.

You may wish to consider that the IP is possibly a dynamic pool of IPs assigned to multiple customers. If so, once this abuser re-logons to his ISP, the IP address will be different. If true, unless you block the entire range for TurkTelekom (78.189.128.0/17 + 78.160.0.0/11), it will have no effect.

The alternative is to report the attempts to the TurkTelekom abuse email address. A pain, which may well have no effect.

diabolic.bg · 2010-03-08 6:53 am

In none of my 5 sites no login "admin". They can try as they want. Any novice attacker tries first "admin".

JennM517 · 2010-03-08 6:58 am

I have no "admin" either... I just thought it odd.

Jenn

cea · 2010-03-08 10:46 am

The SAME ip tied to login as 'admin' on my site today.....

#1 2010-03-07 7:20 pm

Attempting to log in as "admin"

#2 2010-03-07 7:46 pm

Re: Attempting to log in as "admin"

#3 2010-03-07 8:29 pm

Re: Attempting to log in as "admin"

#4 2010-03-07 9:43 pm

Re: Attempting to log in as "admin"

#5 2010-03-08 6:53 am

Re: Attempting to log in as "admin"

#6 2010-03-08 6:58 am

Re: Attempting to log in as "admin"

#7 2010-03-08 10:46 am

Re: Attempting to log in as "admin"

Board footer