Linked Questions

0
votes
1answer
3k views

DDOS Attack detection with netstat [duplicate]

I have a server, today load of my server over 20, i was found a command that detect alive connection to server for DDOS detection and reject IP. netstat -anp | grep 'tcp\|udp' | awk '{print $5}' | ...
0
votes
1answer
439 views

Pros vs Cons of Rate Limiting ICMP [duplicate]

I am configuring Config Server Firewall and here is the default config for ICMP. I have read on the internet that disabling or limiting ICMP can cause huge headaches on your server. However I have ...
0
votes
1answer
414 views

Why is nginx taking so long to reply? [duplicate]

I'm under a DDOS attack right now, and the attacker has his zombies sending POST requests to one of my pages. At first, nginx replies in only a few seconds, but after a while it starts building up; ...
0
votes
1answer
813 views

DDOS Mitigation for UDP Flood [duplicate]

We are currently under attack on one of our servers at a datacenter in Chicago. 1 gbps (peak) 600mbps average UDP flood port 80 (incoming) Consumed 20 TB bandwidth in 2.5 days We have 50TB of ...
0
votes
1answer
793 views

Multiple DDOS attacks per day [duplicate]

I run a popular tech website, and for weeks my site has been under DDOS attacks. The attacks happen at random times, and often about 10 times per day. Usually the attacks only last a few minutes, then ...
0
votes
1answer
331 views

It's possible to block an url path with htaccess? [duplicate]

Currently i'm getting a DDoS attack directly to this URL: myserver.com/?task=randompost, the "?task=randompost" doesnt exist anymore so they get redirected to the home webpage. Considering that they ...
0
votes
1answer
299 views

Help - DDOS Attack [duplicate]

I am under a DDOS attack. I'm trying to locate the IP address that is making 1100+ connections, however, when running the following command, it shows a 1100+ connection, but the ip address column is ...
0
votes
1answer
108 views

Simultaneous Requests To Site With JS Cause CPU Spike [duplicate]

someone is making many requests to a specific page on my site that has JS on it. Subsequently, it's driving the CPU load to 100+ if I don't restart apache. What I tried: - Reduce KeepAlive timeout - ...
0
votes
1answer
828 views

Preventing DDOS/SYN attacks (as far as possible) [duplicate]

Recently my CENTOS machine has been under many attacks. I run MRTG and the TCP connections graph shoots up like crazy when an attack is going on. It results in the machine becoming inaccessible. My ...
0
votes
1answer
261 views

DDOS Mitigation Services [duplicate]

Over the past week we have been a victim of two seperate ddos attacks varying in scale. The last one was very large and very hard to mitigate. We are looking at solutions from veriSign and Akamai ...
0
votes
1answer
150 views

Looking for a good DDOS IPS system [duplicate]

Could I get some recommendations on an IPS solutions that incorporates some form of DDOS protection / what do you currently implement on your network? Thanks
-1
votes
1answer
118 views

Find ddos attack on OpenVZ container [duplicate]

How do you figure out which OpenVZ contain is under attack from a dDoS? I know it is an attack because the b/w and incoming traffic shot WAY up. Can this be done with netstat? Are some attacks not ...
-2
votes
1answer
568 views

Possible form for a ddos attack? [duplicate]

I have kinda asked this before. I've set up a server that serves my website, dns and some gameservers. However, when I check my routers firewall log, I get alot of incoming UDP packets blocked on the ...
1
vote
0answers
170 views

Curl Sourced DDoS: How to detect it & how to stop?

Okay, an Ubuntu server I manage fell victim to a DDoS attack today. Usually this is unpleasant but not that big a deal. A few high server load moments & then it passes. Today was clearly ...
0
votes
0answers
143 views

What advantages does mod_evasive have over mod_security2 in terms of DDOS protection?

I'm running an Apache2 server in front of a Tomcat and I need to implement a DDoS protection mechanism on the Apache2 layer. I have two candidates: mod_evasive and mod_security2 with the OWASP core ...

15 30 50 per page