win13 website slow

This abuse hits hard, and fast. I was wathcing it for the last 3+ hours and last checked it about 5 min ago and all fine, then it gets hit hard with abuses. Still trying to stop it permanently.
 
We are rebooting to restore access ASAP. I will point out this is not a DOS attack, as there is still network traffic happening but it drops a good 60%, instead of increasing like a DDOS, this is some sort of code abuse or attack on some vulnerable code that send CPU and RAM into a maxed out state making it non responsive or very slow.
I have issued commands some minutes back with no reply, try switching windows for a few minutes and can see it update but not change the display, etc.
 
win13 has been up for several minutes now. We are again watching it and I am going through some logs as well.
 
Win13 is being slow again, of course I ended my remote session literally 45 seconds before the alert and it was working fine then, so frustrating, we are working on it now.
 
Win13 is being slow again, of course I ended my remote session literally 45 seconds before the alert and it was working fine then, so frustrating, we are working on it now.

Better now, still a bit slow however, working to bring it back to speed.
We now know the exact cause and have the site responsible STOPPED.

BTW an access database is at the root of the problem. 170MB and highly active at times.
 
Back
Top