During these last days, I noticed in my dblog, that someone has been trying to sneak around.
The person tried finding the login url (my website isn't open for user registration) so they tried everything from my-domain.com/admin, my-domain.com/administrator.. and also my-domain.com/wp-login (which indicates that the person isn't familiar with drupal..)
Once the person ended up on /user he or she tried to login as admin by trying different usernames : admin, administrator etc... (I never use 'admin' as a username for the root user)
is there a way to prevent/protect a drupal website from this sort of things ?
ps : i'm interested in how to do this both for d6 and d7.