ModSecurity: Access denied with code 400. Too many threads

Customer support forums for Atomic Protector (formerly Atomic Secured Linux). There is no such thing as a bad question here as long as it pertains to using Atomic Protector. Newbies feel free to get help getting started or asking questions that may be obvious. Regular users are asked to be gentle. :-)
Post Reply
brettpiatt
New Forum User
New Forum User
Posts: 1
Joined: Wed Oct 23, 2013 7:43 pm
Location: San Francisco

ModSecurity: Access denied with code 400. Too many threads

Unread post by brettpiatt »

I am running a wordpress blog in AWS. Server is running RedHat Linux. ASL is configured and installed.
Apache Version
httpd -v
Server version: Apache/2.2.15 (Unix)
Server built: Aug 2 2013 08:02:15

The server is behind a load balancer and I am getting the following in the apache error_log.
[Fri Oct 25 19:55:07 2013] [warn] ModSecurity: Access denied with code 400. Too many threads [11] of 10 allowed in READ state from 10.168.105.174 - Possible DoS Consumption Attack [Rejected]

I have added this IP to my white list.
cat /etc/asl/whitelist
10.168.105.174

After this error is reported the server gets dropped out of my load balance.

Any assistance or information you can provide to help solve this problem will be greatly appreciated.

Thanks
Top
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4149
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: ModSecurity: Access denied with code 400. Too many threa

Unread post by mikeshinn »

https://www.atomicorp.com/wiki/index.php/HIDS_31102
Top
Post Reply

Return to “Atomic Protector (formerly ASL)”