Been getting a lot of unclosed sessions in our jcr logs (using 5.4) and our publish servers have stopped responding a couple of times recently when hit with a burst of lame php hack attempts. The speed of them is what I think is doing us in, in combination with the session errors in particular, but ...