What's going on with the server? Attack?


Warning: count(): Parameter must be an array or an object that implements Countable in /home/styllloz/public_html/qa-theme/donut-theme/qa-donut-layer.php on line 274
0 like 0 dislike
56 views
Hello, I decided to restart nginx, then went to watch the logs, and then I began to realize that the server is kind of strange nonsense.
Per second in the file error.log increases of 10-30 KB that's what I saw:
2018/04/25 21:17:00 [error] 1586#1586: *7 "/var/www/html/telegraph/tot2/PC-LOFT10_W10015063.F042C2276277C2D0D788BA9CFF25EBAC/14/conf/2/0/index.php" is not found (2: No such file or directory), client: 104.193.30.21, server: samp-telegraph.org, request: "GET /tot2/PC-LOFT10_W10015063.F042C2276277C2D0D788BA9CFF25EBAC/14/conf/2/0/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:01 [error] 1586#1586: *8 "/var/www/html/telegraph/jim168/USNASDT20135_W617601.A2027912657215733591E8A485146040/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 166.90.119.2, server: samp-telegraph.org, request: "POST /jim168/USNASDT20135_W617601.A2027912657215733591E8A485146040/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:02 [error] 1586#1586: *9 "/var/www/html/telegraph/ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 79.147.41.106, server: samp-telegraph.org, request: "POST /ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/PING/browser/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:02 [error] 1586#1586: *8 "/var/www/html/telegraph/jim168/USNASDT20135_W617601.A2027912657215733591E8A485146040/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 166.90.119.2, server: samp-telegraph.org, request: "POST /jim168/USNASDT20135_W617601.A2027912657215733591E8A485146040/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:03 [error] 1586#1586: *9 "/var/www/html/telegraph/ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 79.147.41.106, server: samp-telegraph.org, request: "POST /ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/PING/browser/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:04 [error] 1586#1586: *8 "/var/www/html/telegraph/jim168/USNASDT20135_W617601.A2027912657215733591E8A485146040/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 166.90.119.2, server: samp-telegraph.org, request: "POST /jim168/USNASDT20135_W617601.A2027912657215733591E8A485146040/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:04 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:04 [error] 1586#1586: *9 "/var/www/html/telegraph/ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 79.147.41.106, server: samp-telegraph.org, request: "POST /ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/PING/browser/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:05 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:06 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:06 [error] 1586#1586: *10 "/var/www/html/telegraph/ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/DPST/browser/index.php" is not found (2: No such file or directory), client: 79.147.41.106, server: samp-telegraph.org, request: "POST /ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/DPST/browser/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:07 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:07 [error] 1586#1586: *10 "/var/www/html/telegraph/ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/DPST/browser/index.php" is not found (2: No such file or directory), client: 79.147.41.106, server: samp-telegraph.org, request: "POST /ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/DPST/browser/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:08 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:09 [error] 1586#1586: *10 "/var/www/html/telegraph/ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/DPST/browser/index.php" is not found (2: No such file or directory), client: 79.147.41.106, server: samp-telegraph.org, request: "POST /ser0322/MARIAPC_W10016299.741F223F5A53A4604E2ED6CAE5BC0E28/64/injectDll/DPST/browser/ HTTP/2.0", host: "185.228.232.139" 2018/04/25 21:17:09 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:12 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:13 [error] 1586#1586: *11 "/var/www/html/telegraph/del7/RFA-PBS03_W617601.C96EB63EBCE7D9CDB058BC8A75E4A13A/5/spk/index.php" is not found (2: No such file or directory), client: 171.33.197.142, server: samp-telegraph.org, request: "GET /del7/RFA-PBS03_W617601.C96EB63EBCE7D9CDB058BC8A75E4A13A/5/spk/ HTTP/1.1", host: "185.228.232.139" 2018/04/25 21:17:14 [error] 1586#1586: *1 "/var/www/html/telegraph/lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/index.php" is not found (2: No such file or directory), client: 66.60.240.3, server: samp-telegraph.org, request: "POST /lib1/CWDZ0R1_W617601.CC3A2D228A37150BB7C0E4BD5124D3C2/64/injectDll/PING/browser/ HTTP/1.1", host: "185.228.232.139"

As I understand it, my server sent POST requests with a bot?
I would believe that this is a DDoS, but:
1) server Load is not, as it issued an error page, and the monitoring shows that the load is 1-3%, and that from me, so I decided to test MySQL using PHP
2) About the server, domain, know 10 people who don't care for him
And who cares at 5 am?
Here I sit, not know what to do :/
by | 56 views

1 Answer

0 like 0 dislike
Cheers, congratulations, you've now learned that the Internet is bots-crawlers.
The easiest option is to do nothing. Such bots may be dozens or hundreds per day, much of a load they are given, and the fight against them is almost pointless, because addresses change.
by

Related questions

0 like 0 dislike
4 answers
0 like 0 dislike
1 answer
0 like 0 dislike
1 answer
asked May 22, 2019 by Tash1moto
110,608 questions
257,187 answers
0 comments
40,796 users