LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 11-13-2014, 03:44 AM   #1
circus78
Member
 
Registered: Dec 2011
Posts: 273

Rep: Reputation: Disabled
HTTP DoS attack?


Hi,
often my server run out of memory.
I suspect that it can be a dos attack against one of my virtual host (realized with Joomla CMS)

I noticed these lines on access log:

Code:
191.237.193.86 - - [13/Nov/2014:05:35:30 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"
191.237.193.86 - - [13/Nov/2014:05:34:39 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"
191.237.193.86 - - [13/Nov/2014:05:37:57 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"
191.237.193.86 - - [13/Nov/2014:05:35:39 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"
191.237.193.86 - - [13/Nov/2014:05:31:32 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"
191.237.193.86 - - [13/Nov/2014:05:33:54 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"
191.237.193.86 - - [13/Nov/2014:05:35:54 +0100] "HEAD /plugins/content/plugin_googlemap2_proxy.php?url=minecraft.net HTTP/1.1" 404 - "-" "Mo
zilla/4.0 (compatible: x)"


What is it? How can I stop this?
Thank you!
 
Old 11-13-2014, 05:25 AM   #2
circus78
Member
 
Registered: Dec 2011
Posts: 273

Original Poster
Rep: Reputation: Disabled
Ok, I founded it:

http://seclists.org/fulldisclosure/2013/Jul/158
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
do the DOS attack bhupenpatel01 Linux - Wireless Networking 1 04-19-2013 01:06 PM
Is this a DoS attack? Skaperen Linux - Security 4 07-23-2012 07:01 PM
http dos attack packets Linux - Security 2 03-07-2012 07:46 AM
is this a Dos Attack?? xtremeclones Linux - Security 8 09-27-2006 01:40 AM
Are we under DOS attack? sarmadys Linux - Security 2 02-06-2002 09:41 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:20 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration