MyBB Community Forums

Full Version: Apache Killed by CONCAT? (please read)
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hello Mybb Members:

I request some help regarding apache service
It looks like i got attacked and at the moment i haven't made a damage check

But this is the log

As far i know concate is to mix tables or rows.. maybe im wrong..

But this surprised me

Please give me your oppinions about this

Error log: http://pastebin.com/QkNe5rwd
Access log: http://pastebin.com/U9CPAHgm
You shouldn't be giving out error logs and access logs to everyone that reads this thread
That's a scan for SQL Injection vulnerabilities. You should ban the IPs via HTACCESS so they can't hit your site.

IP location is in Chile

I even did an IP check at HF with no matches just to see if it was someone from there.

I have altered my httpd.conf so that request length is very short. By default it's 8190 characters.

http://httpd.apache.org/docs/2.2/mod/cor...equestline

I suggest lowering it to 500. I have mine even lower but I think 500 is reasonable. MyBB itself can fully function with a url length limit of about 250-300 depending on your url and paths to your images.
(2010-04-20, 08:14 PM)labrocca Wrote: [ -> ]That's a scan for SQL Injection vulnerabilities. You should ban the IPs via HTACCESS so they can't hit your site.

IP location is in Chile

I even did an IP check at HF with no matches just to see if it was someone from there.

I have altered my httpd.conf so that request length is very short. By default it's 8190 characters.

http://httpd.apache.org/docs/2.2/mod/cor...equestline

I suggest lowering it to 500. I have mine even lower but I think 500 is reasonable. MyBB itself can fully function with a url length limit of about 250-300 depending on your url and paths to your images.
Thanks Labrocca
I know who are the attackers
i will block them asap and will patch httpd.conf