This question already has an answer here:
- I am under DDoS. What can I do? 3 answers
I have two directories, under /var/www/vhosts: mydomain/ and default/. Files in default directory can be accessed using IP address of our server.
I have checked Apache log and somebody is constantly, trying to access random files under that directory - is performing "mapping". Also IP address, from which request is coming appears always different in Apache's error log. I have also a suspicion that this mapping causes Apache to run out of available slots, and jam at the end.
Here is a snippet from Apache log:
[Mon May 14 16:04:04 2012] [error] [client 126.96.36.199] File does not exist: /var/www/vhosts/default/htdocs/manager [Mon May 14 16:05:29 2012] [error] [client 188.8.131.52] File does not exist: /var/www/vhosts/default/htdocs/manager [Mon May 14 16:19:12 2012] [error] server reached MaxClients setting, consider raising the MaxClients setting
Is there any way to prevent these attacks?