The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

stop attack!!

Discussion in 'General Discussion' started by kemo_beeh, Sep 30, 2005.

  1. kemo_beeh

    kemo_beeh Member

    Joined:
    Aug 9, 2005
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Hi
    the load on our server is about 1.0 - 2.0 and after 30 minute the load jump suddenly from 2.0 to 700 or 800 in 10 seconds!!
    when i stop http service and start it again the load become about 1.0-2.0 again and after about 30 minute the problem reappered
    our server host only a website but this site is very big and very important and have a very big vb
    what can i do to stop this attack???

    thnx alot
     
  2. NightStorm

    NightStorm Well-Known Member

    Joined:
    Jul 28, 2003
    Messages:
    286
    Likes Received:
    4
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Twitter:
    Most attacks have to be filtered by the upstream provider.
    What do your logs look like? Is there a recognisable trait to them that you can use to manually deny access to the attacking bots?
    Provide some of your web log, and I or someone else here will take a look at it.
     
  3. IPSecureNetwork

    IPSecureNetwork Well-Known Member

    Joined:
    May 28, 2005
    Messages:
    99
    Likes Received:
    0
    Trophy Points:
    6
  4. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    You basically need to either hire a server administrator to investigate the issue or ask your datacentre for help.
     
  5. kemo_beeh

    kemo_beeh Member

    Joined:
    Aug 9, 2005
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Thnx alot

    Thnx alot

    But when i read about botnet attack i found that botnet attack connects to IRC server but in my server all ports are closed except the important ports like ports for http,ftp,cpanel,whm....

    So , no one can connect from my server to IRC server

    Can anyone tell me what kind of attack is this??

    Thnx alot
     
    #5 kemo_beeh, Oct 1, 2005
    Last edited: Oct 1, 2005
  6. abubin

    abubin Well-Known Member

    Joined:
    Dec 7, 2004
    Messages:
    393
    Likes Received:
    1
    Trophy Points:
    18
    without any more details, I don't think anyone can figure out what kind of attack you are under (assuming it really is somekind of attack).

    Please do more monitoring like looking into logs and processes.
     
  7. kemo_beeh

    kemo_beeh Member

    Joined:
    Aug 9, 2005
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Thnx

    When i install mmcash the issu resolved

    Thanks everyone
     
    #7 kemo_beeh, Oct 4, 2005
    Last edited: Oct 5, 2005
Loading...

Share This Page