On 25.08.2013 17:34, Michael Corliss wrote: > Hello,
>
> My site was running very slowly this morning, and when I looked at top
> it showed a lot more apache processes than usual. My apache logs show
> several generic-looking requests per second all day, all from different
> IPs but the same user agent:
I got a similar attack on my site today, a lot of "POST /wp-login.php
HTTP/1.0". All user agents were "Mozilla/5.0 (Windows NT 6.1;
rv:19.0) Gecko/20100101 Firefox/19.0", but they were distributed.
They took down my apache (oom) thrice, and my vm was too busy to
properly answer ssh, imap and smtp, but it was over in an hour or two.
