0
votes
2answers
133 views

Don't allow a host to be spammed [duplicate]

I run a proxy server with squid and I've just got a report that a user of mine tried a ddos using my proxy. I can I block such requests? Ex: Allow just max 5 requests on the same domain on the same ...
-1
votes
1answer
278 views

Find ddos attack on OpenVZ container [duplicate]

How do you figure out which OpenVZ contain is under attack from a dDoS? I know it is an attack because the b/w and incoming traffic shot WAY up. Can this be done with netstat? Are some attacks not ...
1
vote
2answers
264 views

Concerns about a Dedicated (Windows Server 2008) + DDoS [duplicate]

I am have today a dedicated server with these specs: Intel Core i5 750, 2x120GB (ssd + raid), Windows Server 2008 Web, 200Mbps Network, 24 Gb DD3 And I would like to know what are the best ...
0
votes
3answers
201 views

Ubuntu Server: Attack on blocked ports leads to Ping timeout [duplicate]

I was searching for a solution a long time but cant find anything useful. My webserver is secured by a firewall (iptables with ufw userinterface). Default is deny all and only some ports are open. ...
1
vote
1answer
131 views

DDoS nulling to some ips and other options? [duplicate]

I am looking for some information in regards DDoS in the follow scenario: I have a server that is behind a Cisco Guard and it will be DDoS'ed, I only care about a set list of IPS that by not means ...
-4
votes
2answers
97 views

Fail2Ban to block IPs that request the same URL repeatedly [duplicate]

Is it possible to use Fail2Ban to block IPs that request the same URL more than 5 times in 10 seconds? I'm not talking about a specific URL, but any random URL of the site that is being requested ...
0
votes
1answer
151 views

Looking for a good DDOS IPS system [duplicate]

Could I get some recommendations on an IPS solutions that incorporates some form of DDOS protection / what do you currently implement on your network? Thanks
1
vote
2answers
190 views

block fake google bots [duplicate]

How could I block DDOS attacks with fake Google bots? I found 2 solutions on the net. But both seems to block also correct google bots. # Block fake google when it's not coming from their IP range's ...
-6
votes
1answer
188 views

What are some acceptable easy solutions against DDOS? [duplicate]

IIRC the best way is to set up a firewall. But what are some easy solutions that doesnt require a lot of knowledge? I use nginx (but i hope the solution can be applied to lighttpd). Would changing ...
0
votes
1answer
175 views

Mitigate DDos on Windows box [duplicate]

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. I am ...
0
votes
1answer
128 views

DDoS Attack Mitigation Techniques [duplicate]

Our hosting is set up on Amazon EC2 servers, which have been performing great. The problem we run into are spikes in requests for invalid URLs from scripts/bots looking for security holes. When ...
0
votes
1answer
87 views

DDoS attacks are killing all my services [duplicate]

I've a few servers running as ssh proxy, someone started to DDOS me, i've installed ddos deflate and apf. The traffic made by ddos downgrade from 10 MB/s to 1 MB/s but it still make my users kick from ...
1
vote
2answers
132 views

How can I determine the method of this DDoS attack? [duplicate]

My server went down earlier - looks like a DDoS. A spike in traffic to around 13mbit, the swap goes from idle to maxed in about 5 minutes, and server stops responding. I would like to protect ...
0
votes
1answer
119 views

Simultaneous Requests To Site With JS Cause CPU Spike [duplicate]

someone is making many requests to a specific page on my site that has JS on it. Subsequently, it's driving the CPU load to 100+ if I don't restart apache. What I tried: - Reduce KeepAlive timeout - ...
-2
votes
3answers
113 views

Use two or more IP addresses to prevent DoS attacks [duplicate]

N00b question But say I had a dedicated server with two IP addresses, and the software (We'll just use Apache as an example) was using both IP address to serve content, in the event of a DoS attack ...

15 30 50 per page