Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: I think my server is under attack. |
|
| Author |
|
Megunticook
Joined: 03 Feb 2018
Posts: 12
Location: Maine
|
 Posted: Tue 21 Aug '18 14:16 Post subject: I think my server is under attack. |
 |
|
My web server became briefly unresponsive this morning and looking at the log it looks like it was getting hammered with requests from a suspicious IP. My network activity monitor spiked and there were a bunch of these events in the log:
This happened a couple days ago (different IP address), and I added this to my httpd.conf:
<Proxy "*">
Require ip 18.188.18.89
</Proxy>
But apparently I need to do more here. If anybody can explain exactly what these malicious servers are trying to do and how I harden Apache against it I'd be most grateful. I blacklisted the IP but I that's not a total solution as other attackers will exploit the same vulnerability. |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7371
Location: Germany, Next to Hamburg
|
| Posted: Mon 27 Aug '18 15:07 Post subject: |
|
|
| Block those IPs on a firewall level, not apache. |
|
| Back to top |
|
|
|
|
|
|
