Reply to thread

Message: <blockquote data-quote="Morohara" data-source="post: 467890" data-attributes="member: 93970">Deny the request. Check your apache log files the ip(s) should be in there.The attacks should look like GET requests inside of the file all the requests should be asking for the same file do not block ones that are requesting SWFS which you can read by reading the full line. Normally they'll be GET then some numbers like this.186.54.141.146 - - [20/Jan/2014:19:32:06 -0500] "GET /?458741274224646000 HTTP/1.1" 200 440 "Website" ""This is for a layer 7 ddos attack. Which are incredibly easy to stop by just adding some rules to your iis to block a connection after x amount of attempts at the same request.</blockquote>