5
votes
3answers
181 views

How to block an IP, if getting many http requests in a second

If some one tried force burst attack on my website, how can I block them? I mean, I want to block an IP if I have many http/Apache requests in a second. Thanks in advance.
8
votes
5answers
523 views

Apache/Linux server, DoS attack from own IP

I have an unusual problem I've been trying to diagnose for a while: It's about a Debian server running a custom compile of apache 2.2 with PHP, Red5, MySQL 5.5 (standard binary), sendmail (distro ...
1
vote
2answers
217 views

Secure against HTTP FLOOD ATTACK

What is the best way to defend your web site against HTTP FLOOD POST/GET ATTACK ?
1
vote
3answers
398 views

Disadvantages of HTTP GET/POST Flooding Attack?

I asked about What is HTTP GET/POST Flooding Attack? recently and I got a few detailed answers about what they are and how they work. Now I want to find out what are the disadvantages of them.
1
vote
3answers
1k views

What is HTTP GET/POST Flooding Attack?

I want to know what is HTTP GET/POST flood attack and what are their major differences and mitigation strategies ? I searched a lot but I really can't find some good articles nor examples about this ...
4
votes
3answers
2k views

Can I trust the source IP of an HTTP request?

As far as I've understood, if you try to issue a HTTP request with a spoofed IP address, then the TCP handshake fails, so it's not possible to complete the HTTP request, because the SYN/ACK from the ...
3
votes
1answer
210 views

Could somebody explain connect loop DoS?

I'm trying to understand this vulnerability. How can I reproduce this?