Announcement

Collapse
No announcement yet.

DDOS Attack,help me

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • DDOS Attack,help me

    Hello,
    I install mod_evasive, mod_security and CSF firewall but still server under ddos attack with 420 connections.

    420 connections in 1 IP .

  • #2
    Try blocking connection to that IP-Address?
    Banned the ip-address would be my only suggestion, at the moment..

    Comment


    • #3
      What is the IP? Are you sure your site isn't being spidered by Google or Yahoo or another search engine? It isn't uncommon for my site to be crawling with Google spiders like that occasionally.

      Comment


      • #4
        Originally posted by Danial_Faster View Post
        Hello,
        I install mod_evasive, mod_security and CSF firewall but still server under ddos attack with 420 connections.

        420 connections in 1 IP .
        That's a DDOS attack for sure.
        Run the following 2 commands in your SSH & post the outputs here...

        netstat -ant | grep ESTABLISHED | awk '{print $4}' | cut -d. -f1,2,3,4 | cut -d: -f1 | sort | uniq -c | sort -r

        netstat -ant | grep SYN | awk '{print $4}' | cut -d. -f1,2,3,4 | cut -d: -f1 | sort | uniq -c | sort -r
        GigaPros.com -- vBulletin Optimized Hosting with LiteSpeed!
        ZERO Overselling Enforced WebHosting. SEE HOW…
        FREE Site Transfer |24x7 True Support (Phone, Chat, Tickets)
        We host high traffic vB. See this example with 1.5 Millon posts!

        Comment


        • #5
          Originally posted by Danial_Faster View Post
          Hello,
          I install mod_evasive, mod_security and CSF firewall but still server under ddos attack with 420 connections.

          420 connections in 1 IP .
          Yes, the most obvious thing to do will be to block that I.P. address.

          Comment


          • #6
            If it continues with more IP's I would suggest contacting your host.
            Sound District

            Comment

            widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
            Working...
            X