LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 07-20-2018, 06:49 AM   #1
yeknafar
LQ Newbie
 
Registered: Jul 2018
Posts: 11

Rep: Reputation: Disabled
Is this a Dos attack?


Hello

Can you please take a look at this access log?
http://send.bullten.net/files/867fba...d9df29a552.jpg

They request some pages that doesn't exist on my site at the same time with my own IP (54.36.158.33) and the site get database error.

What's the problem?
How can I prevent it?

Thanks
 
Old 07-20-2018, 10:32 AM   #2
TenTenths
Senior Member
 
Registered: Aug 2011
Location: Dublin
Distribution: Centos 5 / 6 / 7
Posts: 3,487

Rep: Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557Reputation: 1557
If your server is behind a router doing inbound NAT then that may be the reason you're seeing your own IP.

The only "bad" requests I see 404 errors for are for apple icons and that's standard behaviour for iOS devices to request them.

The ones that are responding with 500 would indicate you've a broken script or something is crashing and preventing the backend (I'm guessing Wordpress) from doing its thing.

So it looks more like you've a misconfigured / under-spec server rather than a DoS attack.
 
Old 07-20-2018, 08:56 PM   #3
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,407
Blog Entries: 28

Rep: Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166Reputation: 6166
My guess is that it's series of random port scans. https://en.wikipedia.org/wiki/Port_scanner
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] HTTP DoS attack? circus78 Linux - Security 1 11-13-2014 05:25 AM
do the DOS attack bhupenpatel01 Linux - Wireless Networking 1 04-19-2013 01:06 PM
Is this a DoS attack? Skaperen Linux - Security 4 07-23-2012 07:01 PM
is this a Dos Attack?? xtremeclones Linux - Security 8 09-27-2006 01:40 AM
Are we under DOS attack? sarmadys Linux - Security 2 02-06-2002 09:41 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 11:50 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration