25 Aug
2013
25 Aug
'13
7:19 p.m.
On 25.08.2013 17:34, Michael Corliss wrote:
Hello,
My site was running very slowly this morning, and when I looked at top
it showed a lot more apache processes than usual. My apache logs show
several generic-looking requests per second all day, all from different
IPs but the same user agent:
I got a similar attack on my site today, a lot of "POST /wp-login.php
HTTP/1.0". All user agents were "Mozilla/5.0 (Windows NT 6.1;
rv:19.0) Gecko/20100101 Firefox/19.0", but they were distributed.
They took down my apache (oom) thrice, and my vm was too busy to
properly answer ssh, imap and smtp, but it was over in an hour or two.
--
N/A