There seems to be something shady going on with IP 23.249.163.35. It sits on top ColoCrossing mega spammers/exploiters. Caught these 2 admin login attempts yesterday (I dont think its really qphoria...?):
@Admin 11-30-2014 03:06:18 PM Admin user qphoria failed to login via IP 23.249.163.35 [Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13] [sent to server log]
@Admin 11-30-2014 08:02:29 PM Admin user administrator failed to login via IP 23.249.163.35 [Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13] [sent to server log]
Its either someone being a shadeball or a probe...or both. Block it regardless, its 1 less Colocrossing affiliation you have to worry about.
https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.
Another one on Amazon AWS, 3 different user agents (spoofing): 52.4.152.143
Code: Select all
@Admin 05-14-2015 08:07:06 AM Admin user admin failed to login via IP 52.4.152.143 [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.11 Safari/535.19] [sent to server log]
@Admin 05-14-2015 10:09:34 AM Admin user admin failed to login via IP 52.4.152.143 [Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.803.0 Safari/535.1] [sent to server log]
@Admin 05-14-2015 10:27:37 AM Admin user admin failed to login via IP 52.4.152.143 [Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.8 (KHTML, like Gecko) Chrome/16.0.912.63 Safari/535.8] [sent to server log]
https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.
Who is online
Users browsing this forum: No registered users and 9 guests
