>
> I had what appeared to be a DoS attack last weekend that was similar.
> Something was spawning Apache threads for no apparent reason. It was
> disseminating from various IPs, one attacker at a time, and when I cut
them
> off with ipchains and restarted the Apache server, it's been up and
running
> for almost a week again without incident.
>
> The only evidence I had were '408' errors showing up in
> /var/log/httpd/access. Nothing showed up in the 'error' log. I posted
> questions about this with no replies last Friday or Saturday.
>
> Look for this sign and let me know if you find it!
>
> Thanks,
> Glenn
Hi Glen,
I searched my access logs for 408's but luckily there were none. :o)