too many connections to http port

[Abby]

My sites were all sow for the last 2 days, in WHC I was seeing load averages of 3 plus all the time and I opened a ticket at my host and they made things normal, it is running load averages of around 0.6 again they replied with

"We blocked network that created too many connections to http port."

What does that mean in English, not tech talk, was I getting hacked?

[bikker19]

yes seems like a ddos or some bot trying to crash your sites.

[calista]

yes seems like a ddos or some bot trying to crash your sites.

Those were my initial thoughts.

[BrasSmonkey]

yes seems like a ddos or some bot trying to crash your sites.

ddos or could be bots. google worked my ass over back in the day...

[alsporn]

A load average of 3 is not high enough for it to be a ddos when my sites were ddos attacked the load would go above 20.

[tacnet]

This will undoubtedly be a bot trying to probe your site

We get it all the time. Not much you can do but try and block the traffic at the server level

[CDSally]

This will undoubtedly be a bot trying to probe your site

We get it all the time. Not much you can do but try and block the traffic at the server level

My host once blocked a range of IP's because my sites were getting hit by bots,my question is what if real people using that IP range get blocked too.

[tacnet]

This will undoubtedly be a bot trying to probe your site

We get it all the time. Not much you can do but try and block the traffic at the server level

My host once blocked a range of IP's because my sites were getting hit by bots,my question is what if real people using that IP range get blocked too.

They would have to be on the same network

Generally your host will block the the first 3 numbers of the IP address (the network address) and leave a wildcard for the 4th number (the subnet)

eg 192.168.0.*

[jag]

When it happened to me one thing the host did was rebuild my Kernel don't ask me why, that and block some ip's. The load on my box dropped drastically.