Sageth, thanks for the information on TOAD. Downloaded that and will give it a run tomorrow. From the website, it appears they incorporate "plain English" into the GUI for easier manipulation for those of us who are prime candidates for phpMyAdmin for Dummies which is perfect for me :-)
Also, rearding a document-root install, this just came in tonight:
Code:
86.121.126.226 - - [15/Sep/2009:23:43:03 -0600] "GET //phpmyadmin//scripts/setup.php HTTP/1.1" 403 3112 "-" "ZmEu"
There are literally thousands of these types of scanners looking for phpMyAdmin installations (and name variations thereof) littering my logs. Though the referrer "ZmEu" is new to me, the GET is not. And GET in and of itself isn't important; it's the 200 POST that will make life miserable.
Remember, your weakest link in security is any old and outdated piece of software you have running on your account. That means, say, should you have an old copy of, perhaps phpBB2 2.0.4 running on your system, and that is hacked, there exists the possibility (depending upon the hack, of course), that it could be used as an entrance to your entire web space and access an at-risk version of phpMyAdmin through there (or any backdoor written by the hack).
It's not just the lone piece of software you're running. It's anything you're running and how well you maintain the update process of all software you have on your server.
Edit: This just in!!
Code:
85.214.16.111 - - [16/Sep/2009:06:52:34 -0600] "GET HTTP/1.1 HTTP/1.1" 403 766 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:34 -0600] "GET /admin/js/keyhandler.js HTTP/1.1" 403 3083 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:35 -0600] "GET /admin/pma/js/keyhandler.js HTTP/1.1" 403 3091 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:35 -0600] "GET /admin/phpmyadmin/js/keyhandler.js HTTP/1.1" 403 3105 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:35 -0600] "GET /db/js/keyhandler.js HTTP/1.1" 403 3077 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:36 -0600] "GET /dbadmin/js/keyhandler.js HTTP/1.1" 403 3087 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:36 -0600] "GET /myadmin/js/keyhandler.js HTTP/1.1" 403 3087 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:36 -0600] "GET /mysql/js/keyhandler.js HTTP/1.1" 403 3083 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:37 -0600] "GET /mysqladmin/js/keyhandler.js HTTP/1.1" 403 3093 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:37 -0600] "GET /typo3/phpmyadmin/js/keyhandler.js HTTP/1.1" 403 3105 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:37 -0600] "GET /phpadmin/js/keyhandler.js HTTP/1.1" 403 3089 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:38 -0600] "GET /phpMyAdmin/js/keyhandler.js HTTP/1.1" 403 3093 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:38 -0600] "GET /phpmyadmin/js/keyhandler.js HTTP/1.1" 403 3093 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:38 -0600] "GET /phpmyadmin1/js/keyhandler.js HTTP/1.1" 403 3095 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:39 -0600] "GET /phpmyadmin2/js/keyhandler.js HTTP/1.1" 403 3095 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:39 -0600] "GET /pma/js/keyhandler.js HTTP/1.1" 403 3079 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:39 -0600] "GET /web/phpMyAdmin/js/keyhandler.js HTTP/1.1" 403 3101 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:40 -0600] "GET /xampp/phpmyadmin/js/keyhandler.js HTTP/1.1" 403 3105 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:40 -0600] "GET /web/js/keyhandler.js HTTP/1.1" 403 3079 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:40 -0600] "GET /php-my-admin/js/keyhandler.js HTTP/1.1" 403 3097 "-" "Toata dragostea mea pentru diavola"
85.214.16.111 - - [16/Sep/2009:06:52:41 -0600] "GET /websql/js/keyhandler.js HTTP/1.1" 403 3085 "-" "Toata dragostea mea pentru diavola"
You get the idea :-)
And before anyone asks, "Toata dragostea mea pentru diavola" as I understand it, means something similar or equivalent to "All my love for the devil girl" in Romanian or somesuch.