SlowLoris attack?

The last day or so my CPU and Memory have been going nuts (currently on the 4gb plan) cpu is going upwards of 350%, keep hittign maxclients with google reporting 9 active users?!?!

Someone pointed out to me this might be a Slowlaris attack? netstat -n | grep :80 reports more then 400 requests anyone know how to stop / fix this issue?

1 Reply

I would take a look at the tips here: http://www.techrepublic.com/blog/smb-te … n-attacks/">http://www.techrepublic.com/blog/smb-technologist/secure-your-apache-server-from-ddos-slowloris-and-dns-injection-attacks/

If it's a single incoming IP address (likely if it is a slowloris attack), I would block it.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct