how to fight back attacks on my web service

Posted by user12145 on Server Fault See other posts from Server Fault or by user12145
Published on 2011-02-12T03:56:47Z Indexed on 2011/02/12 7:26 UTC
Read the original article Hit count: 176

Filed under:

ip

|

attack

My apache webservice is getting a large quantity of requests over the days, each one with somewhat random login to gain access.
I identified about 60 such ips(a few sample below), all belong to google. is there a way to find more information about the origin of the attacker? or should I just block these ips. secondly, should I attempt to block the identified ips subnets(74.125.46.*) as a preventive measure?

72.14.194.65
64.233.172.20
74.125.75.19
72.14.194.33
74.125.46.87
74.125.44.91
74.125.46.91

© Server Fault or respective owner

Related posts about ip

Getting USB Wifi device to work

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have been trying to get an Olitec Wifi N USB dongle to work. At first it lit up but wouldn't connect. A little Googling suggested that it would need ndiswrapper to make it work. After installing and trying to add driver with ndisgtk, I got the error message FATAL: Module ndiswrapper not found.… >>> More
Cisco 800 series won't forward port

as seen on Server Fault - Search for 'Server Fault'
Hello ServerFault, I am trying to forward port 444 from my cisco router to my Web Server (192.168.0.2). As far as I can tell, my port forwarding is configured correctly, yet no traffic will pass through on port 444. Here is my config: ! version 12.3 service config no service pad service tcp-keepalives-in service… >>> More
Cisco 881 losing NAT NVI translation config after reload

as seen on Server Fault - Search for 'Server Fault'
This is a weird one, so I'll try to explain in as much detail as I can so I'm giving the whole picture. As I've mentioned in my other questions, I'm in the process of setting up a new Cisco 881 as my WAN router and NAT firewall. I'm facing an issue where NAT NVI rules that I have configured are not… >>> More
Bind an ip address to Postfix as outgoing ip

as seen on Server Fault - Search for 'Server Fault'
Is that possible to bind all available public ip addresses on a server to one Postfix instance as its outgoing ip pool and let it choose a random ip or specified ip from the pool each time it sends out an email? If above is not possible, can it be configured to listen on one public ip address per… >>> More
What approach to take for SIMD optimizations

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I am trying to optimize below code for SIMD operations (8way/4way/2way SIMD whiechever possible and if it gives gains in performance) I am tryin to analyze it first on paper to understand the algorithm used. How can i optimize it for SIMD:- void idct(uint8_t *dst, int stride, int16_t *input… >>> More

Related posts about attack

Malware Cross Site Scriptinig attack / XSS Attack?

as seen on Server Fault - Search for 'Server Fault'
I have been hit by an Cross Site Scripting / XSS / RFI Attack, where I cant find it anywhere in the source of the files and Hashes on files have not been changed according to OSSEC HIDS that I run real time monitoring on all webdirs. The Attack happens on IE9 Only it and appends java script code… >>> More
Linux Server Management Nightmare: Attack of the Killer Penguins

as seen on Internet.com - Search for 'Internet.com'
OS Roundup: When it comes to Linux server management, if your Red Hat Enterprise Linux distro isn't supported by Red Hat, is it it still Red Hat Linux, or is it 'Frankenstein Linux'? >>> More
Linux Server Management Nightmare: Attack of the Killer Penguins

as seen on Internet.com - Search for 'Internet.com'
OS Roundup: When it comes to Linux server management, if your Red Hat Enterprise Linux distro isn't supported by Red Hat, is it it still Red Hat Linux, or is it 'Frankenstein Linux'? >>> More
Microsoft Releases "Google Attack" Patch

as seen on Internet.com - Search for 'Internet.com'
The patch protects IE users from attacks like those directed at Google in China last week. >>> More
Microsoft Releases "Google Attack" Patch

as seen on Internet.com - Search for 'Internet.com'
The patch protects IE users from attacks like those directed at Google in China last week. >>> More