Results 1 to 12 of 12

Thread: DDOS Attack?

  1. #1
    Join Date
    Dec 2004
    Location
    Toronto, Canada
    Posts
    31

    Question DDOS Attack?

    I get crazy amounts of "client denied by server configuration" in one of the accounts that we host. APF is setup by our management company to block IPs that are requesting too many connections at a time. Is it a DDOS attack on the site? It has been happening for quite some time now. Here's a sample of our error logs:

    [Thu Nov 24 10:30:38 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:37 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:37 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:37 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:37 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:37 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:37 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:37 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:35 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:35 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:35 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:33 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:33 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:33 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:33 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:32 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:32 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:31 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:30 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:30 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:29 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:29 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:29 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:28 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:26 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:25 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:25 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:24 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:21 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:21 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:21 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:21 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:21 2005] [error] [client 24.58.87.173] client denied by server configuration: /home/nethugs/public_html/images/bg-jelbeans.gif
    [Thu Nov 24 10:30:20 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:18 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:18 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:17 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:15 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:14 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:14 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:13 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:12 2005] [error] [client 24.125.13.106] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:30:12 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:12 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:11 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:11 2005] [error] [client 24.125.13.106] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:30:09 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:05 2005] [error] [client 68.253.23.117] client denied by server configuration: /home/nethugs/public_html/images/bg_computers.gif
    [Thu Nov 24 10:30:05 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:30:02 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:53 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:51 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:36 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:35 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:32 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:31 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:30 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:30 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:30 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:29 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:27 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:27 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:26 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:22 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:21 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:17 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:15 2005] [error] [client 66.67.150.172] File does not exist: /home/nethugs/public_html/audio/turkey.smi
    [Thu Nov 24 10:29:15 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:09 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:29:07 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:07 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:05 2005] [error] [client 69.62.167.37] File does not exist: /home/nethugs/public_html/All That Really Matters_files/index.htm
    [Thu Nov 24 10:29:05 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:04 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:02 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:02 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:29:02 2005] [error] [client 69.62.167.37] File does not exist: /home/nethugs/public_html/All That Really Matters_files/s.htm
    [Thu Nov 24 10:29:01 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:01 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:01 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:29:00 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:59 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:45 2005] [error] [client 69.62.167.37] client denied by server configuration: /home/nethugs/public_html/images/bg_trees3.jpg
    [Thu Nov 24 10:28:44 2005] [error] [client 69.209.169.156] File does not exist: /home/nethugs/public_html/audio/ch30.smi
    [Thu Nov 24 10:28:35 2005] [error] [client 69.209.169.156] client denied by server configuration: /home/nethugs/public_html/images/bg-jelbeans.gif
    [Thu Nov 24 10:28:24 2005] [error] [client 4.235.99.98] File does not exist: /home/nethugs/public_html/All That Really Matters Four_files/s.htm
    [Thu Nov 24 10:28:13 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:13 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:12 2005] [error] [client 71.115.17.243] File does not exist: /home/nethugs/public_html/Love is Magic_files/index.htm
    [Thu Nov 24 10:28:07 2005] [error] [client 69.72.110.219] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:07 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:07 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:06 2005] [error] [client 24.127.62.42] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:06 2005] [error] [client 24.62.164.153] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:06 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 69.209.169.156] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 24.127.62.42] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 24.62.164.153] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 69.72.110.219] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 69.209.169.156] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 24.62.164.153] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:05 2005] [error] [client 69.72.110.219] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:04 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:03 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:03 2005] [error] [client 67.163.247.219] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg
    [Thu Nov 24 10:28:03 2005] [error] [client 24.62.164.153] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:01 2005] [error] [client 69.209.169.156] client denied by server configuration: /home/nethugs/public_html/images/bg_farmland.jpg

  2. #2
    What is the output for

    netstat -n -p TCP | grep :80 | wc -l

  3. #3
    BTW if you have mod_dosevasive then this error is probably comming from it.

  4. #4
    Join Date
    Jan 2004
    Location
    Texas
    Posts
    1,556
    It could also be something like an .htaccess file or other httpd configuration that doesn't allow them to see the requested file.
    James Lumby

  5. #5
    Yes that too

  6. #6
    Join Date
    Dec 2004
    Location
    Toronto, Canada
    Posts
    31
    The "netstat -n -p TCP | grep :80 | wc -l" command did not work. It simple gave me a help screen on how to use netstat. Sorry I'm a Linux dummy!

    >> It could also be something like an .htaccess file or other httpd
    >> configuration that doesn't allow them to see the requested file.

    Everyone should be able to see these images as it is part of a greetings site.

    >> BTW if you have mod_dosevasive then this error is probably comming from it.

    mod_dosevasive was installed by our management company. So does this mean that the server is being hit by a DDOS attack and mod_evasive is doing it's job?

    I've told our management company to block IPs that request the same files too many times in a given period. Is this a smart idea or will I be blocking legitimate traffic?

    Thanks you all for replying. This thing is really getting to me.

  7. #7
    netstat -antp | grep 80 | wc -l

    Yes mod_devasive can block legitimate traffic. Looks like your management company tweaked it too much?

  8. #8
    Also forgot to ask how is the cpu usage and is apache behaving normally if cpu usage is normal then it is not a DOS or a DDOS attack, just configuration of mod_doevasive will help.

  9. #9
    Join Date
    Dec 2004
    Location
    Toronto, Canada
    Posts
    31
    This is what I got as the result of the command:

    root@ns1 [~]# netstat -antp | grep 80 | wc -l
    524

    CPU usage is normal most of the time but I do notice that pages will pull up slower when these errors are occuring.

    Looking at the error logs, mod_dosevasive seems to be blocking IPs that are pulling the same image file too many times. Example:

    [Thu Nov 24 10:29:00 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:59 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:54 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg
    [Thu Nov 24 10:28:46 2005] [error] [client 65.10.111.65] client denied by server configuration: /home/nethugs/public_html/images/bg_leaves_orange.jpg

    Doesn't this means mod_dosevasive is doing it's job? Why would an IP pull so many instances of the same image file in such a short period of time? Is this normal for an IP to do?

  10. #10
    Yes this looks like a DOS attack and mod_doevasive is doing its job.

    What is the server load like and do you have APF or some other firewal with DOS protection?

  11. #11
    Sorry i did not see you had already written that the CPU is in the normal range, it looks like a small attack to me cannot call it DDOS yet.

  12. #12
    Join Date
    Dec 2004
    Location
    Toronto, Canada
    Posts
    31
    The server load is usually fine at about 0.05 but when it hits it jumps up to around 4.0 load. Pages will start to load slower when it hits. Our managed company PSM also setup APF on our server.

    This has been going on for close to half a year now. Can an attack even last THAT LONG??? It almost seems to be an intentional bandwidth drain because it keeps on pulling background images. Is someone out to bring down our server? Are we being specifically targetted somehow? Are these IPs zombie computers used to attack our client's site?

    I really don't understand why this is happening.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •