KS-Soft. Network Management Solutions
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister    ProfileProfile    Log inLog in 

DOS attack detected first by.... HM

 
Post new topic   Reply to topic    KS-Soft Forum Index -> References & Opinions
View previous topic :: View next topic  
Author Message
timn



Joined: 20 Nov 2003
Posts: 184
Location: United States

PostPosted: Wed Jan 21, 2004 3:15 pm    Post subject: DOS attack detected first by.... HM Reply with quote

I realize that HM does not fall under the category of 'Intrusion Detection' tools, but it did give me the earliest notification today of an ongoing DOS attack on our web farm.

We monitor our web farm nodes for, among other things, ASP Current Sessions. An alert was generated today when ASP sessions on one node suddenly grew to about 50x normal. A quick check of the web log revealed a definite attempt at bringing down the server. A quick IP block added to the firewall and, presto, end of crisis.

It was not a distributed attack or even a very sophicated attack, but nevertheless, within 10 minutes, attack was detected, verified, and stopped. Thanks Alex -- I'm liking HM more everyday.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    KS-Soft Forum Index -> References & Opinions All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

KS-Soft Forum Index