Win26 IIS Slow

It looks like win26 is rebooting on its own, and we are checking it, it is coming up for 45 minute or and hour, then rebooting again, downtimes are small, but had done it 3 times now.
 
We are stopping IIS for a few moments as we check things out more, will report back ASAP.
 
IIS is still down at the moment, and the server is staying more stable, we have found one issue we have stopped a site, but working to a complete resolution, before bringing IIS back up.

It will be at least 10 more minutes, update ASAP.
 
one site, that we suspected, is getting hit VERY hard by a botnet with many IPs, we are unsure why this was triggering a reboot, but watching closely and blocking IP ranges attacking.
 
we have had to block over 1000 IPs so far(some in ranges) but server is working stable in this time now.
 
Even with this + about 800 more now blocked, the attacks are flowing in. We have set it up to deny access for them to anything, but still quite something to watch how many infected machines some group can corral up to attack a site.
 
There are still IPs attacking this site today, but not getting too far with it. Server has been stable since the IIS came back up as posted here last night.
 
it looks like these attacks are back again, we have IIS down at the moment while checking.
 
another site being attacked on php scripts, and it is stopped, but attacks again coming hard like last time :(

also, IIS back up and going properly.
 
Some group is mad at this server, and taking attacks to the max, finding new sites with php vulnerabilities, and renewing attacks over and over, it is happening again today and working to stop it again.
They have obviously 1000's of PCs/servers at their disposal :(

IIS is not stopped, but was slow for a 4-6 minutes, we are checking it out still, but do not expecting any further major impact.
 
You must log in or register to reply here.
Back
Top