Page 1 of 1
Mariadb query attack
Posted: Mon Dec 14, 2015 11:31 am
by taliptako
Hello sometimes i'm getting query request like in picture.Its show millions query in short time.Mariadb down after this attack.How they attack me like this ?
Sorry for bad English.
Re: Mariadb query attack
Posted: Thu Dec 17, 2015 12:52 pm
by taliptako
I think these attacks coming from phpmyadmin login attempts.
I find an bug.I'm using Centos 7 with nginx php fpm and mariadb and i research phpmyadmin not logging phpmyadmin login attempts.So fail2ban not working with phpmyadmin for this.I should log to phpmyadmin logins and i will configure fail2ban to ban these attacks.
I havent find a solution on web i was working 5 hours about this any help ?
Re: Mariadb query attack
Posted: Mon Dec 21, 2015 12:33 pm
by taliptako
Its not happening some times its happening startup.When i restart my server starting with these request.Do you live same things?
Re: Mariadb query attack
Posted: Wed Dec 30, 2015 11:02 am
by RevengeFNF
Change phpmyadmin location. Never use yourdoman.com/phpmyadmin
Re: Mariadb query attack
Posted: Sun Jan 03, 2016 1:27 pm
by taliptako
I restrict other ips except local ip to access phpmyadmin but still sometimes its happening.
Re: Mariadb query attack
Posted: Thu Jan 07, 2016 9:18 pm
by skurudo
You can try to find out and catch moment with:
mysqladmin -i 10 processlist