We are happy to announce that Vesta is back under active development as of 25 February 2024. We are working on v1 candidate and expect to engage more with the community over the coming months. We are committed to open source, and we encourage contributors to help us build the future of Vesta.
Mariadb query attack
Mariadb query attack
Hello sometimes i'm getting query request like in picture.Its show millions query in short time.Mariadb down after this attack.How they attack me like this ?
Sorry for bad English.
Sorry for bad English.
Re: Mariadb query attack
I think these attacks coming from phpmyadmin login attempts.
I find an bug.I'm using Centos 7 with nginx php fpm and mariadb and i research phpmyadmin not logging phpmyadmin login attempts.So fail2ban not working with phpmyadmin for this.I should log to phpmyadmin logins and i will configure fail2ban to ban these attacks.
I havent find a solution on web i was working 5 hours about this any help ?
I find an bug.I'm using Centos 7 with nginx php fpm and mariadb and i research phpmyadmin not logging phpmyadmin login attempts.So fail2ban not working with phpmyadmin for this.I should log to phpmyadmin logins and i will configure fail2ban to ban these attacks.
I havent find a solution on web i was working 5 hours about this any help ?
Re: Mariadb query attack
Its not happening some times its happening startup.When i restart my server starting with these request.Do you live same things?
-
- Posts: 92
- Joined: Sat Aug 02, 2014 6:50 pm
- Os: CentOS 6x
- Web: nginx + php-fpm
Re: Mariadb query attack
Change phpmyadmin location. Never use yourdoman.com/phpmyadmin
Re: Mariadb query attack
I restrict other ips except local ip to access phpmyadmin but still sometimes its happening.
Re: Mariadb query attack
You can try to find out and catch moment with:
mysqladmin -i 10 processlist
mysqladmin -i 10 processlist