Modsecurity show 1500+ Attacks in 2 days

[bandzy]

Hello everybody,

yesterday I notice near 2000 Dedicated attacks in ModSecurity, some of them have "Atomicorp.com WAF Rules: xmlrpc DOS attack".
My question is do I have to worry about this, can I do anything e.g. block IP's and is this only informative message what ModSecurity done?
One more question: does that attacks have impact on website performance ?

[c.ivanov]

Hello,

Thank you for contacting us.

I am assuming that you are referring to the ModSecurity log available in the Hepsia control panel.

Since the attacks were logged, it means that ModSecurity has prevented them. The ModSecurity log available in the Hepsia control panel is for your information.
You can check the type of attack, the source IP address and what ModSecurity rule was triggered.

You do not have to worry about that and you do not have to do anything from your end.

It depends on the type of DOS attack but in some cases it may impact the website performance.

Best Regards,
Cvetan Ivanov