Ok, For a long time we have been running a bizarrely high load averages.
The site used to handle 8 times the traffic without breaking a sweat.
I was completely perplexed, but the sibsoft guys found out what was happening.
Our login page was getting hammered by a single request over and over sometime 40 times a minute per ip. And by multiple ips per minute.
SOOOOO... I started blocking these ips.
The ips are from all over the world...
My iptables block list is way more than 8000 ips long.
Something is very wrong with this picture.
I mean if they were using proxies... how the heck did they get so many so fast?
Has anyone else experienced the same thing?
Have any suggestions for me?
I tried installing csf... killed the site almost immediately
Thanks in advance
5 posts • Page 1 of 1