0
votes
0answers
52 views

Apache logs full of empty POST /

A customer's site access_logs tons of empty POSTs requests on / from hundreds of different source IPs: X.X.X.X - - [27/Aug/2013:16:54:23 +0200] "POST / HTTP/1.1" 200 20718 "-" "Mozilla/4.0 ...
0
votes
1answer
163 views

Parse Apache logfile and ban IPs

My server is under attack, it is flooded with request with the following pattern: Thousands of IPs Each IP request the same page "GET / HTTP/1.1" with the same referrer 3-5 times per second (same ...
1
vote
1answer
407 views

Logging UDP flood DDOS attacks? [closed]

How do I log UDP flood DDOS attacks? Right now I am thinking about detecting if the server is receiving more than X megabytes per second for Y seconds, and then doing trafshow > logs.txt as root ...
1
vote
1answer
1k views

Logging Timeout'd Request in Apache 2.X

I am migrating some applications from Apache 1.3 to 2.2. We used to run some tests where attacker opens some HTTP connection to our server, and do nothing. Apache 1.3 would log the following 408 ...