SQL injection happens when user provided input through forms or query string is directly used in a SQL query without any sanitation done to it. For example a badly coded login script would allow an attacker to login without knowing the username/password or login with full rights of admin users. Though this can happen to any web page developed in any language, this issue seems to be affected more PHP pages than .NET applications. Perhaps simplicity of PHP programming and inexperience coders are reasons for this. In any case, keeping following poins in mind while developing PHP sites should help avoid mistakes which can be prevented easily.

More...

Please stop attacking as I ensure you that you would not succeed in doing so. Here is the IP which is trying to SQL inject my blog.

1. 87.118.124.3
2. 87.118.116.150

I will add to this list as I get more bad IP's