2
votes
3answers
65 views

My server is getting SYN Flooded, i have a few questions

my server is getting attacked, it seems to be a syn flood, and he is spoofing IP's. sudo netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n returns this. ...
0
votes
0answers
34 views

ICMP DDoS, proper ACL?

We are having about a 3-4Gbps ICMP flood on one of our servers and I wonder.. I have a 20gbps of DDoS protection but the proetction seems ineffective against ICMP funnily (it worked well to block a ...
4
votes
0answers
32 views

ransom email, followed by DDos attack [duplicate]

2 days ago, we received an ransom email from Armada Collective, followed by 1 hour of DDos attack. This group has been in the news recently ...
0
votes
0answers
15 views

Massive DDoS hitting my VPS, no idea what to do [duplicate]

for the past few days there has been a massive amount of connections hitting my VPS. I am not sure whether my VPS is actually being attacked or just being used for DDoSing someone else's server. ...
2
votes
1answer
40 views

Thousands of requests with non-existent domains as HTTP_REFERER [duplicate]

For the last few days one of my websites has been receiving hundreds of requests per minute with non-existent random domains as HTTP_REFERER and from different IPs (therefore using deny from IP is not ...
0
votes
0answers
10 views

How to block fake googlebots with haproxy? [duplicate]

We want to block all requests coming from non google ips but identify as a bot from google.
1
vote
2answers
102 views

block fake google bots [duplicate]

How could I block DDOS attacks with fake Google bots? I found 2 solutions on the net. But both seems to block also correct google bots. # Block fake google when it's not coming from their IP range's ...
1
vote
2answers
52 views

Is it normal for a VPS provider to claim DoS attacks often? [closed]

I have been using a well-known VPS service for over an year. Everything is good except one thing that once in a while, there will be some DoS attack. And when it happens, my server becomes ...
0
votes
1answer
41 views

DDOS and Blocking IP's [duplicate]

I'm experiencing issues with the server and noticed that i'm under some sort of a DDOS attack, i have blocked the IP's in the Firewall, yet the IP's show up in netstat. Is this normal? tcp 0 ...
1
vote
0answers
28 views

Simple anti DDoS protection in FreeBSD [duplicate]

I have a lot of request from data centers to my web server on FreeBSD and sometimes it've have a lot of performance problem with my web projects. Adding to IPFW list all IP's data centers is ...
-3
votes
2answers
37 views

Restricting Access from BOTS

I would like to protect my server from too many hits from Bots. Considering a scenario, where in a server (physical) located in a private network and hitting my server continuously. Do i have a ...
1
vote
1answer
341 views

Firewall UDP Flood Dos/DDoS

Recently I have been suffering from what appears to be a UDP query flood attack. I am looking for a way to block the attack using a software firewall such as iptables, this should be possible, as ...
0
votes
0answers
13 views

Block connection through proxy in firewall [duplicate]

I'm getting some 'ddos' on my Linux machine (ubuntu 14.04 64bit). I have a lot of connections from IP which are proxy IP's (like tor), on specific port. Question: How to block all proxy connections ...
1
vote
2answers
102 views

High inbound and outbound network traffic

Over the last day or so, one of instances has had a large amount of bandwidth consumed. This means that we have nearly exceeded our allowance (roughly the same amount inbound and outbound). Looking ...
0
votes
1answer
151 views

Too many open connections [duplicate]

I have a dedicated server with 32GB RAM. It works all fine till some punters came to ddos my server. I had really high uplink bandwidth usage (over 150Mbps). I looked at netstat with the following ...

15 30 50 per page