I had a personal wiki set up with mediawiki on my server with nginx. Recently I noticed that all my sites that used php (Mediawiki and all Wordpress sites) were not responding or timing out.
Then I found a lot of requests in my /var/log/nginx/error.log like this :
request: "GET /index.php?title=Benutzer:MikeHofmann54 HTTP/1.1"
and posts :
"POST /index.php?title=Special%3ARunJobs&tasks=jobs&maxjobs=1&sigexpiry=1484304501&signature=a39943b5794bdc95b3d874bad2273afadb6bbd01 HTTP/1.1", upstream: "fastcgi://unix:/var/run/php5-fpm.sock:"
I (re)moved the mediawiki but the requests keep trying to reach the domain. The other sites started working and behaving normally again, but I am worried that the ongoing POST and GET requests could do something harmful to my server. Or are those 'normal' DDOS attacks?
I'm not sure how to proceed with protecting my server.