DDos attack on win18 - resolved

akshay · September 21, 2009, 10:45pm

we are checking it.

Stephen · September 21, 2009, 10:52pm

Re: DDos attack on win18

I am stopping IIS for a few minutes while working to process some logs to get attacker IPs.

Stephen · September 21, 2009, 11:03pm

Re: DDos attack on win18

will try to have IIS back up within 10 minutes, there are a multitude of attacking IPs on the shared IP. I am blocking them one at a time, with IIS running it is generating logs so quickly it is slowing the server.

Stephen · September 21, 2009, 11:10pm

Re: DDos attack on win18

I have started IIS again but it may have to go down again to continue blocking, I have blocked the top 10 source but 30 of them are very major, working to get all blocked

Stephen · September 21, 2009, 11:24pm

Re: DDos attack on win18

We found what they were attacking in logs after some personal analysis, it was a site on a DEDICATED ip but in the shared app pool, and it is down now, but the rest of the server is back 100% and only that domain is down.