Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I fix the issues from a DDOS attack without any SSH access at all.

My main domain is - is there any way of checking if it is under attack externally?


share|improve this question

closed as not constructive by John Gardeniers, voretaq7, Gilles, Sam Oct 14 '11 at 21:41

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

i can connect fine, pretty quickly, sounds more like you locked yourself out... flagging though – anthonysomerset Oct 14 '11 at 19:10
how did I lock myself out? Didn't do anything 0_0 – James Anderson Oct 14 '11 at 19:15
@arrocharGeek Here you go: – mailq Oct 14 '11 at 19:34
Use whatever out of band management option you have: console port, DRAC, iLO, LOM, dialup, etc. If you don't have out of band management, well, that sucks then. Do you have a MRTG box or anything of the sort that can monitor the network devices in front of/behind your server? They would be the best indicator of a DDOS. – Matthew Oct 14 '11 at 20:10
Get them on the phone then, because if you're getting hit by a DDOS its probably affecting more of their customers. They'll want to know about it. – Matthew Oct 14 '11 at 20:17
up vote 3 down vote accepted
  1. Your site (HTTP) seems fine from here, though SSH access appears to blocked ("connection refused", so either a firewall or the SSH daemon is not running).

  2. You are ALMOST CERTAINLY not being DDoS'd: In the 2 hours your question has been up your ISP would have probably noticed the attack, tracked you down as the target and called you to scream in your ear about the amount of traffic hitting their network.
    Also any DDoS worth its salt would have probably knocked your website down too.

  3. Just because something is not working does NOT mean you are being "DDoS'd". Jumping to this conclusion is entirely to common on ServerFault (search for "DDoS" to see how many times this same speech has been given).
    The more mundane answer (a misconfigured firewall, accidentally locking yourself out with failed password attempts, the SSH daemon being killed somehow) is almost always correct.

  4. If you do not have any out of band management / remote console functionality you should contact your provider and ask them to investigate the problem.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.