A customer's site access_logs tons of empty POSTs requests on / from hundreds of different source IPs: X.X.X.X - - [27/Aug/2013:16:54:23 +0200] "POST / HTTP/1.1" 200 20718 "-" "Mozilla/4.0 ...
My server is under attack, it is flooded with request with the following pattern: Thousands of IPs Each IP request the same page "GET / HTTP/1.1" with the same referrer 3-5 times per second (same ...
How do I log UDP flood DDOS attacks? Right now I am thinking about detecting if the server is receiving more than X megabytes per second for Y seconds, and then doing trafshow > logs.txt as root ...
I am migrating some applications from Apache 1.3 to 2.2. We used to run some tests where attacker opens some HTTP connection to our server, and do nothing. Apache 1.3 would log the following 408 ...