Is my Webserver Apache under attack?

Posted on 2010-01-08
Last Modified: 2012-05-08
My server: apache on Centos 5.2 32bit

My web server open port 80 and 443.
I use iptable to limit 30 SYN/s to anti attack DoS.

My problem: 2 last day, user access to port 80 very slow, access by http://myIP also slow like http://mydomain
But I test access https(443), it's quick as normal

I see log HTTP, very litle log, not like attack.
System status: Number process http only <50, and CPU only < 25%; RAM <500MB/ 2GB avalable, HDD not access much.

So , I wonder why my webserver slow only on port 80
Really difficult to understand!

Question by:bxglxbxglx2000
    1 Comment
    LVL 29

    Accepted Solution

    I would not think that.
    as you said, you are seeing very small log file

    if its a understack, you will see your error log is going high  and you will see too many connection to port 80 from same IP or from different IP( if they use different host for the attack)

    read the bellow one, here some nice tips to find out how many connections from which ip

    it could be, your isp is slow ... , they are having bandwith problem....


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now