Hello, Guys today I try login into my phpmyadmin but I can't, look like someone change my password ? I use webmin+phpmyadmin I not update nothing afer finish instalation day before my whole server was slower then before anyone can give me some advice about this story ? Thanks All.
if you see anything weird other then change of password only then i will think it was hacked, because sometime we do tend to forget password , happens alot with me, so just try resetting the password and try
Login to the server using ssh or whm, then change the mysql root password and secure using ip based connectivity settings.
Try the following a. Renaming my phpmyadmin folder to something insanely vague b. Putting a htaccess file in there only allowing either my static IP or the local machine IP. c. SSL Certificate
One thing you would want to do is check your server for numerous connections coming from one IP address. You should be able to check this in SSH using a command like: netstat -an | grep :80 | sort Using netstat should assist you with checking whether or not you are actually under attack. But the recommendations made above may help as well. I'm sure there is also some software that you could install that will automatically block IP's if they attempt to make a ton of connections to your server as well, but changing around all the default settings/URLs/ports will help tremendously.