Mariadb query attack

taliptako · Post by **taliptako** » Mon Dec 14, 2015 11:31 am

Hello sometimes i'm getting query request like in picture.Its show millions query in short time.Mariadb down after this attack.How they attack me like this ?
Sorry for bad English.

taliptako · Post by **taliptako** » Thu Dec 17, 2015 12:52 pm

I think these attacks coming from phpmyadmin login attempts.
I find an bug.I'm using Centos 7 with nginx php fpm and mariadb and i research phpmyadmin not logging phpmyadmin login attempts.So fail2ban not working with phpmyadmin for this.I should log to phpmyadmin logins and i will configure fail2ban to ban these attacks.
I havent find a solution on web i was working 5 hours about this any help ?

taliptako · Post by **taliptako** » Mon Dec 21, 2015 12:33 pm

Its not happening some times its happening startup.When i restart my server starting with these request.Do you live same things?

RevengeFNF · Post by **RevengeFNF** » Wed Dec 30, 2015 11:02 am

Change phpmyadmin location. Never use yourdoman.com/phpmyadmin

taliptako · Post by **taliptako** » Sun Jan 03, 2016 1:27 pm

I restrict other ips except local ip to access phpmyadmin but still sometimes its happening.

Post by **skurudo** » Thu Jan 07, 2016 9:18 pm

You can try to find out and catch moment with:
mysqladmin -i 10 processlist

Vesta Control Panel - Forum