Apache Lounge



Forum Index Downloads Search Register Log in  RSS Apache Lounge

Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.



A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Apache Lounge is not sponsored.

Your donations will help to keep this site alive and well, and continuing building binaries.

I think my server is under attack.

Post new topic   Reply to topic    Apache Forum Index -> Apache

View previous topic :: View next topic  
Author Message

Joined: 03 Feb 2018
Posts: 12
Location: Maine

PostPosted: Tue 21 Aug '18 14:16    Post subject: I think my server is under attack. Reply with quote

My web server became briefly unresponsive this morning and looking at the log it looks like it was getting hammered with requests from a suspicious IP. My network activity monitor spiked and there were a bunch of these events in the log:

[proxy_fcgi:error] [pid 27335:tid 139984352806656] (70007)The timeout specified has expired: [client] AH01075: Error dispatching request to : (polling), referer: https://www.instagram.com/explore/tags/trending/

This happened a couple days ago (different IP address), and I added this to my httpd.conf:

<Proxy "*">
Require ip

But apparently I need to do more here. If anybody can explain exactly what these malicious servers are trying to do and how I harden Apache against it I'd be most grateful. I blacklisted the IP but I that's not a total solution as other attackers will exploit the same vulnerability.
Back to top
James Blond

Joined: 19 Jan 2006
Posts: 6604
Location: Germany, Next to Hamburg

PostPosted: Mon 27 Aug '18 15:07    Post subject: Reply with quote

Block those IPs on a firewall level, not apache.
Back to top

Post new topic   Reply to topic    Apache Forum Index -> Apache
Page 1 of 1