Re: Apache under attack and eating resources?

From: Avleen Vig (lists-freebsd_at_silverwraith.com)
Date: 09/29/03

  • Next message: Devon H. O'Dell: "Re: FreeBSD patch question"
    Date: Sun, 28 Sep 2003 19:27:53 -0700
    To: security@freebsd.org
    
    

    On Mon, Sep 29, 2003 at 01:59:39AM +0200, Philip Paeps wrote:
    > This might be more related to an Apache-security list, but as the machine is
    > running FreeBSD, I thought I'd ask here first.
    >
    > In the last two weeks, I've been seeing some very strange errors in my logs a
    > few times daily around the same times. While this happens, load averages go
    > through the roof (I've seen 36+, which is outragous), and the machine becomes
    > very unresponsive.
    >
    > First there's a few million of these:

    [snip]

    Are you running any CGI's, or other server-side scripts? Bugs in your
    scripts could cause things like this, and make it look like it's apache
    which is at fault.
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: Devon H. O'Dell: "Re: FreeBSD patch question"

    Relevant Pages

    • Re: Newbie Question - what does the "...-p6" mean?
      ... In response to ograbme: ... R> I am running FreeBSD 6.1-RELEASE-p6 build with buildworld. ... result of e-mail transmission. ...
      (freebsd-questions)
    • Is this evidence of a break-in attempt?
      ... I have a server co-located at a data center, running FreeBSD 4.4 release. ... Furthermore, if I understand it correctly, a login failure at ttyv0 means it ...
      (FreeBSD-Security)
    • Texas Instruments Card Reader.
      ... I'm running FreeBSD 6.1-prerelease on my laptop and it is running really great, except my SD/MMC Cardreader. ... Its a Texas Instrumens Chip, I'l paste the interesting <snip> from pciconf: ...
      (freebsd-stable)
    • Re: Texas Instruments Card Reader.
      ... I'm running FreeBSD 6.1-prerelease on my laptop and it is running really ... great, except my SD/MMC Cardreader. ... paste the interesting <snip> from pciconf: ... I'm pretty sure there is a driver, ...
      (freebsd-stable)
    • Re: I think Ive been hacked...please help!
      ... > I'm running FreeBSD 4.5-STABLE and I recently noticed some ... > unknown ARP activity on my Cable connection when I wasn't ... [snip a bunch more of these] ...
      (Incidents)