Linked Questions

1
vote
0answers
35 views

Curl Sourced DDoS: How to detect it & how to stop?

Okay, an Ubuntu server I manage fell victim to a DDoS attack today. Usually this is unpleasant but not that big a deal. A few high server load moments & then it passes. Today was clearly ...
0
votes
1answer
49 views

Attack from strange IP address, how to block?

Looking through the mail logs I've noticed a lot of these: Apr 7 11:33:25 s123456 pop3d: IMAP connect from @ [::ffff:192.96.206.9]checkmailpasswd: FAILED: web14p3 - short names not allowed from @ ...
-2
votes
0answers
36 views

How can I stop an HTTP flood attack? [duplicate]

I have a lots of "W" Sending Reply, In HTTP log, I see lots of: 186.5.179.5 - - [07/Apr/2014:03:37:04 +0200] "HEAD / HTTP/1.0" 200 250 127.0.0.1 - - [07/Apr/2014:04:31:35 +0200] "OPTIONS * ...
5
votes
3answers
1k views

DDOS using ntp server

I've heard about new kind of DDOS where ntp is used for reflection . My questions are really simple : Can you please give details on how they work and clarify? Since ntp is ran over UDP, I suppose ...
0
votes
1answer
51 views

A botnet may be attacking our site right now, how should we respond? [duplicate]

Not sure if SO is the right forum, but we're in need of help and perhaps programmatic elements may comprise the final solution. Instead of downvoting, please recommend where to post this question, and ...
3
votes
3answers
336 views

Can't stop DDOS [duplicate]

I need a little help dealing with ddos. I'm experiencing 1gb ddos attack on my server and I don't know how to stop it. (1gbs is the maximum speed of the server.) I've the following iptables rules: ...
0
votes
1answer
34 views

DDoS Attack Mitigation Techniques [duplicate]

Our hosting is set up on Amazon EC2 servers, which have been performing great. The problem we run into are spikes in requests for invalid URLs from scripts/bots looking for security holes. When ...
0
votes
0answers
116 views

What advantages does mod_evasive have over mod_security2 in terms of DDOS protection?

I'm running an Apache2 server in front of a Tomcat and I need to implement a DDoS protection mechanism on the Apache2 layer. I have two candidates: mod_evasive and mod_security2 with the OWASP core ...
0
votes
1answer
76 views

DDoS Protection [closed]

Let's say I order a half rack (22U) at any colocation company. They give me a GiGe port and I need DDoS protection. If I use a slot in my rack for Arbor protection, will I be protected up to a certain ...
-1
votes
3answers
226 views

How to fight request spam (DDOS i guess) on CentOS server [duplicate]

lately i'm trying to fight DDOS on my CentOS 6.4 server. I have installed CSF and I've set it quite strictly. Yet there is a URL that have like 1000 requests and max 2 per IP (smart ddos-er I guess). ...

15 30 50 per page