Linked Questions

0
votes
1answer
313 views

Help - DDOS Attack [duplicate]

I am under a DDOS attack. I'm trying to locate the IP address that is making 1100+ connections, however, when running the following command, it shows a 1100+ connection, but the ip address column is ...
0
votes
1answer
115 views

Simultaneous Requests To Site With JS Cause CPU Spike [duplicate]

someone is making many requests to a specific page on my site that has JS on it. Subsequently, it's driving the CPU load to 100+ if I don't restart apache. What I tried: - Reduce KeepAlive timeout - ...
0
votes
1answer
885 views

Preventing DDOS/SYN attacks (as far as possible) [duplicate]

Recently my CENTOS machine has been under many attacks. I run MRTG and the TCP connections graph shoots up like crazy when an attack is going on. It results in the machine becoming inaccessible. My ...
0
votes
1answer
277 views

DDOS Mitigation Services [duplicate]

Over the past week we have been a victim of two seperate ddos attacks varying in scale. The last one was very large and very hard to mitigate. We are looking at solutions from veriSign and Akamai ...
0
votes
1answer
151 views

Looking for a good DDOS IPS system [duplicate]

Could I get some recommendations on an IPS solutions that incorporates some form of DDOS protection / what do you currently implement on your network? Thanks
-1
votes
1answer
79 views

How to stop small DDOS attacks (443 port)?

On the server goes DDoS attack. ~# netstat -n -p | awk '{print $5}'|awk -F: '{print $1}' | sort -n | uniq -c | sort -nr | head -n10 48 109.229.9.53 47 31.207.244.130 45 87.252.227.83 ...
-1
votes
1answer
452 views

TCP DOS: How to terminate CLOSE_WAIT connections? [duplicate]

One of my servers is getting DOS'ed - there are a large number of connections in the CLOSE_WAIT state which are preventing legitimate users from connecting to the system. So is there any way to close ...
-1
votes
1answer
207 views

Find ddos attack on OpenVZ container [duplicate]

How do you figure out which OpenVZ contain is under attack from a dDoS? I know it is an attack because the b/w and incoming traffic shot WAY up. Can this be done with netstat? Are some attacks not ...
-2
votes
1answer
637 views

Possible form for a ddos attack? [duplicate]

I have kinda asked this before. I've set up a server that serves my website, dns and some gameservers. However, when I check my routers firewall log, I get alot of incoming UDP packets blocked on the ...
-6
votes
1answer
183 views

What are some acceptable easy solutions against DDOS? [duplicate]

IIRC the best way is to set up a firewall. But what are some easy solutions that doesnt require a lot of knowledge? I use nginx (but i hope the solution can be applied to lighttpd). Would changing ...
1
vote
0answers
401 views

Curl Sourced DDoS: How to detect it & how to stop?

Okay, an Ubuntu server I manage fell victim to a DDoS attack today. Usually this is unpleasant but not that big a deal. A few high server load moments & then it passes. Today was clearly ...
0
votes
0answers
17 views

Can't stop the UDP packets [duplicate]

My datacenter has stopped my cloud server because my server is producing excessive UDP traffic. I have run: tcpdump -i eth0 udp and following is a sample set of log. 13:09:42.789583 IP ...
0
votes
0answers
24 views

Windows Advanced Firewall - Advanced Rules? [duplicate]

my game server is being DDoS attacked (Windows Server 2012). Probably you would say there is nothing I can do but I don't think so because I can use my dedicated server in a normal way, it's just that ...
0
votes
0answers
83 views

How can I log and maybe even block IPs that send lots of incoming UDP traffic?

we run a voice / teamspeak server which receives legitmate traffic on port 9987 from many ips. Sometimes we get DDoSed. So people use single Servers and send 1-3 Gbits of UDP Floods to that port. This ...
-2
votes
0answers
33 views

How to block a DDoS attack? [duplicate]

My website is under a DDoS attack with bots. They are all coming in from different IPs so I can't block them all. Is it possible to make a CAPTCHA or a password just to connect to the site first for ...

15 30 50 per page