Re: Web site being attacked!

From: Anthony (anthonyxxx@xxx.com)
Date: 07/18/02


From: "Anthony" <anthonyxxx@xxx.com>
Date: Thu, 18 Jul 2002 10:45:32 +0800


Where can I find IISLock?

"Shenan" <shenans@hotmail.com> glsD
:ujc6gqkk7aq425@corp.supernews.com...
> Have you installed IISLock?
> All patched?
> Report the IPs to your ISP/Network Admin and let them handle it.
>
> --
> Shenan
>
> "Anthony" <anthonyxxx@xxx.com> wrote in message
> news:ucqgdmfLCHA.1620@tkmsftngp10...
> > Dear all
> >
> > I am running a web site on W2K server and IIS 5.0. The usual no. of
> > concurrent connections is from 100 to 500 users during peak hours. In
the
> > past week, the web site has encountered a sudden increase in the no. of
> > concurrent users, and the no. of concurrent connections can jump to
3,000
> or
> > above, which overloads IIS and forces other visitors to leave. Each
attack
> > will just last for 15 mins or so.
> >
> > Revealing the output from netstat, I can find out the there are many
> > connections attached to port 80 in the server and the attackers are from
> one
> > of the local ISPs but they are sitting behind the proxy servers so it is
> > difficult to trace their real identities. I have thought of installing a
> > firewall but the cost is too high and I cannot afford it.
> >
> > I want to know is there any simple ways to block these attacks under
IIS?
> > Any suggestions are welcome.
> >
> > Thanks
> >
> > Anthony
> >
> >
>
>