PDA

View Full Version : Strange type of HTTP attack?

hadyabed
04-24-2008, 09:02 PM
Hello,
I host several high risk websites, and today I'm noticing a weird type of what seems to be HTTP attack, which is actually just targeted at one virtualhost and is using that virtualhost's PHP resources, and it's causing just that one site to lag. If I PM a lsws staff member my lsws details, can they take a look? BTW, I'm running PHP with PHPSuExec.
Thanks.
-Hady Abed
vivek
04-24-2008, 09:04 PM
Do you have mod_security installed ?
hadyabed
04-24-2008, 09:05 PM
Do you have mod_security installed ?

No, I do not, though the attack seems to be subsiding now.
-Hady Abed
hadyabed
04-24-2008, 10:54 PM
This is occuring again, but now it's starting to effect other websites. Please help.
Thanks,
-Hady Abed
hadyabed
04-25-2008, 10:23 AM
I'd appreciate if LiteSpeed staff could take a quick look at this as soon as possible.
Thanks,
-Hady Abed
mistwang
04-25-2008, 11:25 AM
You have to find out the IPs that attacks that site and block them at firewall.

Create a static page and replace the PHP page may help.
hadyabed
04-25-2008, 11:29 AM
You have to find out the IPs that attacks that site and block them at firewall.

Create a static page and replace the PHP page may help.

No, there is no IP's with a lot of connections. It's just a very weird attack or whatever it is. I've PM'd you my lsws login. Please take a look.
Thanks,
-Hady Abed