logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: I think my server is under attack.
Author
Megunticook



Joined: 03 Feb 2018
Posts: 12
Location: Maine

PostPosted: Tue 21 Aug '18 14:16    Post subject: I think my server is under attack. Reply with quote

My web server became briefly unresponsive this morning and looking at the log it looks like it was getting hammered with requests from a suspicious IP. My network activity monitor spiked and there were a bunch of these events in the log:

Quote:
[proxy_fcgi:error] [pid 27335:tid 139984352806656] (70007)The timeout specified has expired: [client 94.242.62.244:45600] AH01075: Error dispatching request to : (polling), referer: https://www.instagram.com/explore/tags/trending/


This happened a couple days ago (different IP address), and I added this to my httpd.conf:

<Proxy "*">
Require ip 18.188.18.89
</Proxy>

But apparently I need to do more here. If anybody can explain exactly what these malicious servers are trying to do and how I harden Apache against it I'd be most grateful. I blacklisted the IP but I that's not a total solution as other attackers will exploit the same vulnerability.
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7288
Location: Germany, Next to Hamburg

PostPosted: Mon 27 Aug '18 15:07    Post subject: Reply with quote

Block those IPs on a firewall level, not apache.
Back to top


Reply to topic   Topic: I think my server is under attack. View previous topic :: View next topic
Post new topic   Forum Index -> Apache