F5 attack?

Need help installing PHP, configuring a script, or configuring a server? Then come on in and post your questions! We'll try to help the best we can!

Moderator: General Moderators

Post Reply
User avatar
evilmonkey
Forum Regular
Posts: 823
Joined: Sun Oct 06, 2002 1:24 pm
Location: Toronto, Canada

F5 attack?

Post by evilmonkey »

Hi everyone,

I have a dedicated server, and it seems my server has been victim of an 'F5 attack'. I am looking at the number of requests apache process simoultaniously. Normally, it's 10-30, but it sometimes jumps to 500+ and kills my server (most of the connections are "sending reply" or "keepalive"). I am forced to restart httpd each time that happens. Seems to me that causing something like this is as simple as holding down the F5 key while on a page, while more complicated methods (such as JournalMacro) can be much more effective at the task of killing my Apache server. What can I do about this? Thanks. :)
User avatar
hawleyjr
BeerMod
Posts: 2170
Joined: Tue Jan 13, 2004 4:58 pm
Location: Jax FL & Spokane WA USA

Post by hawleyjr »

I'd start with blocking the IP address the attack is coming from.
User avatar
evilmonkey
Forum Regular
Posts: 823
Joined: Sun Oct 06, 2002 1:24 pm
Location: Toronto, Canada

Post by evilmonkey »

How can I do that automatically (and prevent my site from doing down)?
User avatar
evilmonkey
Forum Regular
Posts: 823
Joined: Sun Oct 06, 2002 1:24 pm
Location: Toronto, Canada

Post by evilmonkey »

I made a mistake. Most of the offennding packets are K or R (mostly R), so they're requests.
Post Reply