1
vote
3answers
2k views

Setting up fail2ban to ban failed phpMyAdmin login attempts

We've been using fail2ban to block failed ssh attempts. I would like to setup the same thing for phpMyAdmin as well. As phpMyAdmin doesn't log authentication attempts to a file (that I know of), I'm ...
2
votes
1answer
167 views

How rare is a man in the middle attack?

I was wondering if I should set up a secure connection for the db administration application (phpmyadmin) for my sites. They don't store credit cards nor anything that could be valuable for a hacker. ...
1
vote
1answer
189 views

phpmyadmin login should not expire on ubuntu 10.04

On ubuntu 10.04 the phpmyadmin config is a little bit scattered. I want to set the loginexpiration time to zero, should never expire, this is a secured setup behind a firewall. I think it is 3600 by ...
4
votes
4answers
7k views

How to thwart PHPMyAdmin attacks?

We see a lot of requests for non-existent setup.php files in our access logs (see below). For some of our clients that use rewrite rules each of these requests will cause a PHP script to be executed, ...
1
vote
3answers
4k views

phpMyAdmin setup not password protected; getting hit a lot by hackers

The phpMyAdmin (version 2.11.9.5) setup screen of my server is not password protected. I have noticed a lot of attempts at accessing the screen in my log files, especially from automated requests ...
3
votes
1answer
425 views

Suspicious activity in access logs - someone trying to find phpmyadmin dir - should I worry?

I was looking over the access logs for a server that we are running on Amazon Web Services. I noticed that someone was obviously trying to find the phpmyadmin directory - they (or a bot) were trying ...
9
votes
8answers
8k views

How to secure phpmyadmin?

I checked out my apache logs, and, whooooaaa, there are a lot of bots trying to exploit phpmyadmin. The first thing i did was to change the directory name to something more obscure. But, are there ...
2
votes
6answers
1k views

Would you install phpmyadmin on a production web server?

I have been playing around with phpMyAdmin and I do think that it is a good tool, but I have read a lot on the internet about security holes. Would you recomend installing/using phpMyAdmin on a ...