According to our web host, we have multiple connections coming in from the same IP addresses, which they're handling by limiting the number of connections allowed per IP address. We don't want to set the limit too low, but going from 15 to 12 had little impact. We're setting it to 8 to see what happens. But they tell us that that isn't the main thrust of the attack. My understanding is that the attacking connections that get through are continually querying the website, using up resources. Has anyone heard of this? Is there anything we can do about it?
The site was developed with VS 2008 professional using the 3.5 framework. It's running on a dedicated Windows 2003 server, using SQL Server 2008 Express installed locally.
I've never dealt with anythng like this before, so any advice you can give will probably be very new to me, so baby steps and/or reference info would be appreciated!
...
Go to the complete details ...