Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ddos]

A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers. These systems are compromised by attackers using a variety of methods.

A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers. These systems are compromised by attackers using a variety of methods.

For information on what to do about a DDoS attack that is underway, see How can I stop a currently active DDoS attack?

624 questions
-1
votes
1 answer

snort rule for rdp dos attack

i am very new in snort rules so i can't find the below rule exactly . is this rule send alert when tcp packets come from external network and any port to home network and port 3389? just check port , ip , protocol? if so , i think it can't detect…
sahar
  • 1
  • 1
  • 2
-1
votes
1 answer

How to reroute a DDoS attack to the attacker?

I would like to know if there is a way to block and reroute a DDoS attack I'm receiving on my website to the attacker website (I know the address of it). If so, how can I do that? I'm using CloudFlare and I was thinking to make it reroute all the…
step
  • 1
  • 1
-1
votes
1 answer

Possible DOS Attack or computer "freak out"

I am a dev-ops web developer with a site running two ec2.smalls behind a load balancer on AWS. Recently we saw 3-4 requests per second take down our clients site. The site was down and would not come back after multiple server reboots and errors…
zeros-and-ones
  • 315
  • 1
  • 3
  • 10
-1
votes
2 answers

How trustworthy are Arch's official repositories?

I have a server with Arch Linux installed and for some reason, it gets infected after a period of inactivity. I reinstall, remain inactive for some time and it gets infected again. Every time I reinstall the server, I run a script that also installs…
Albêr
  • 1
  • 2
-1
votes
2 answers

How to count the number of SYN, ACK, or SYN-ACK in a second?

I want to make a DDoS SYN Flood Detection, so i need to count the number of SYN, ACK, or SYN-ACK packet per second.
Gilang Ramadhan
  • 1
-1
votes
1 answer

Run shell script on the event of "possible SYN flooding"

I'd like to write a script that gets all the stats I need (top IPs, used memory, netstat, etc) at the time I got an SYN flooding, and write to a report file. So, is it possible to trigger a script/command when the kernel alerts for "possible SYN…
Nuno
  • 553
  • 2
  • 8
  • 26
-1
votes
1 answer

How can I only allow TCP connections for 1 port using iptables on Unbantu? How can I also set a maximum packet on a connection?

I'm running a server for public. I just want to allow TCP connections and I want to limit the packet to prevent ddosing a bit and setting a maximum IP/new connections per seconds with iptables. How can I do this?
File14
  • 1
  • 1
-1
votes
2 answers

Fallback between datacenters

What is the best way to do a fallback between datacenters. We have a dedicated server in one of the data centers and as our traffic increased i wanted to add more then backup i wanted redundancy and load balancing. The thing that happened in the…
disi
  • 1
  • 1
-1
votes
1 answer

DDos attack ToS Violation - Outbound DoS

Fount ddos attack on ubuntu server netstat -nputw given outout Local Address Foreign Address State PID/Program name 55.57.72.37:59792 123.166.137.95:25000 SYN_SENT 2890/ip6tablesu.sh I found on internet that…
mujaffars
  • 99
  • 3
-1
votes
1 answer

I think I am getting ddos-ed, have I taken proper precautions?

I noticed my SQL server was down on my wordpress website, 2 days ago. I couldn't figure out why I wasn't able to restart the SQL server so I looked at my logs. I noticed this one IP was hitting my xmlrpc.php file. The logs look like…
justinw
  • 101
  • 1
-1
votes
1 answer

Linux DDOS Protection / Gateway without NAT

I need help to configure a box for DDOS protection and provide external ip addresses to "internal" (which aren't really internal) servers. I have 32 IP addresses from my ISP. I want to configure a linux box with DDOS protection and put servers…
Webix
  • 1
-1
votes
1 answer

How to stop small DDOS attacks (443 port)?

On the server goes DDoS attack. ~# netstat -n -p | awk '{print $5}'|awk -F: '{print $1}' | sort -n | uniq -c | sort -nr | head -n10 48 109.229.9.53 47 31.207.244.130 45 87.252.227.83 42 81.27.152.6 42 109.251.197.99 41…
Art Pip
  • 111
  • 4
-1
votes
1 answer

Too large 127.0.0.1 connections with nginx - apache2

I use nginx as proxy-server apache2 and I have a problem with netstat output: $ netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n 5 109.195.36.169 6 109.195.33.205 8 194.190.59.4 14 83.246.143.75 19 109.195.33.201 725…
Sundved
  • 3
  • 2
-1
votes
2 answers

IPTables not blocking IPStresser

I have been trying four days to block DDoS attacks with no success. I want to block anything that isn't whitelisted. This is my idea on OS Centos 7: //Delete All Existing Rules iptables --flush //Set Default Chain Policies iptables -P INPUT…
Martini002
  • 11
-1
votes
1 answer

Are Google Apps implicitly DDoS protected?

Especially when talking about Google's Project Shield, people refer to an "internal anti-DDoS infrastructure". I could not find any more detailed information on such thing, and if it spans all the services that Google provides to the user, including…
Lorenzo Pistone
  • 109
  • 5
1 2 3
…
41 42