Question about domain traffic

[duceman]

When I check traffic stats on my names I'll notice that a bunch of names have this exact same referrer http://######.COM/phpmyadmin/scripts/setup.php

Just wondering if this would be coming from a spider or bot? Because it shows up on all different types of domains. The domains all have different sectors, accounts, and whois.

thanks
Kerry

 

[katherine]

Not it's an attempt to find unsecured phpmyadmin installs on websites and gain access to databases and more
But these attacks are automated.

 

[south]

Yes, script kiddies. These have really picked up over the last few months.

 

[katherine]

A long-time google request goes along like this:

"phpMyAdmin running on localhost" root

I think it go so bad google had to tweak results...

 

[duceman]

Thanks for the info guy's and gal's