We’ve been having trouble the last few weeks with apache runaways on our webserver. We thought it was related to the dying hard drive – it’d throw a read error, maybe apache would freak out and go crazy, maybe it would pull bad data of the swap partition, we didn’t know; we were guessing.<\/p>\n
Now, that drive was<\/em> dying – hard, we barely made it to our scheduled replacement downtime weekend and getting back online by Sunday took lots<\/em> of work – so none of that time was wasted. But we went down under similar circumstances almost immediately.<\/p>\n So this time I was on watch, with a bunch of utilities running, when it happened again<\/em>.<\/p>\n We were under what amounts to a smallish DDOS attack. I don’t have the right kind of counting software, but I estimate it was northward of 10,000 requests per minute, mostly of GETs on random points throughout angelahighland.com and crimeandtheforcesofevil.com that invoked php. It was coming from a range of machines in Israel and Europe.<\/p>\n That all looks pretty standard, except for the part where they all go back to the same ISP. So now I’m wondering whether it’s less DDOS attack type intentional<\/em> and more DDOS attack type incompetent websweeping software under development<\/em>.<\/p>\n I’ve sent mail, but they’ve had a business day to respond, and haven’t.<\/p>\n Anyway, we handled it, via blocking and tools. Seeing one of these in progress – there were actually two separate rounds – was kind of exciting. The great part is that we stayed up throughout. They didn’t take us down, and while we were dropping a lot of requests, we never fell off the net. If this is affecting anybody I’d be really surprised, but if it is, let me know.<\/p>\n","protected":false},"excerpt":{"rendered":" We’ve been having trouble the last few weeks with apache runaways on our webserver. We thought it was related to the dying hard drive – it’d throw a read error, maybe apache would freak out and go crazy, maybe it would pull bad data of the swap partition, we didn’t know; we were guessing. Now, [&hellip<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3693","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/3693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/comments?post=3693"}],"version-history":[{"count":0,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/posts\/3693\/revisions"}],"wp:attachment":[{"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/media?parent=3693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/categories?post=3693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crimeandtheforcesofevil.com\/blog\/wp-json\/wp\/v2\/tags?post=3693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}