Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 404
  • Last Modified:

Is my Webserver Apache under attack?

My server: apache on Centos 5.2 32bit

My web server open port 80 and 443.
I use iptable to limit 30 SYN/s to anti attack DoS.

My problem: 2 last day, user access to port 80 very slow, access by http://myIP also slow like http://mydomain
But I test access https(443), it's quick as normal

I see log HTTP, very litle log, not like attack.
System status: Number process http only <50, and CPU only < 25%; RAM <500MB/ 2GB avalable, HDD not access much.

So , I wonder why my webserver slow only on port 80
Really difficult to understand!

0
bxglxbxglx2000
Asked:
bxglxbxglx2000
1 Solution
 
fosiul01Commented:
I would not think that.
as you said, you are seeing very small log file

if its a understack, you will see your error log is going high  and you will see too many connection to port 80 from same IP or from different IP( if they use different host for the attack)

read the bellow one, here some nice tips to find out how many connections from which ip

http://www.cyberciti.biz/tips/netstat-command-tutorial-examples.html


it could be, your isp is slow ... , they are having bandwith problem....


0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now