logo
Apache Lounge
Webmasters

 


About

Forum Index Downloads Search Register Log in  RSS Apache Lounge
 


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Apache Lounge is not sponsored.

Your donations will help to keep this site alive and well, and continuing building binaries.



I think my server is under attack.

 
Post new topic   Reply to topic    Apache Forum Index -> Apache



View previous topic :: View next topic  
Author Message
Megunticook



Joined: 03 Feb 2018
Posts: 12
Location: Maine

PostPosted: Tue 21 Aug '18 14:16    Post subject: I think my server is under attack. Reply with quote

My web server became briefly unresponsive this morning and looking at the log it looks like it was getting hammered with requests from a suspicious IP. My network activity monitor spiked and there were a bunch of these events in the log:

Quote:
[proxy_fcgi:error] [pid 27335:tid 139984352806656] (70007)The timeout specified has expired: [client 94.242.62.244:45600] AH01075: Error dispatching request to : (polling), referer: https://www.instagram.com/explore/tags/trending/


This happened a couple days ago (different IP address), and I added this to my httpd.conf:

<Proxy "*">
Require ip 18.188.18.89
</Proxy>

But apparently I need to do more here. If anybody can explain exactly what these malicious servers are trying to do and how I harden Apache against it I'd be most grateful. I blacklisted the IP but I that's not a total solution as other attackers will exploit the same vulnerability.
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 6552
Location: Germany, Next to Hamburg

PostPosted: Mon 27 Aug '18 15:07    Post subject: Reply with quote

Block those IPs on a firewall level, not apache.
Back to top


Post new topic   Reply to topic    Apache Forum Index -> Apache
Page 1 of 1