Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ddos]

A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers. These systems are compromised by attackers using a variety of methods.

A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers. These systems are compromised by attackers using a variety of methods.

For information on what to do about a DDoS attack that is underway, see How can I stop a currently active DDoS attack?

624 questions
-1
votes
2 answers

Block incoming traffic from unresolved IP address

How can I block all the incoming traffic from unresolved IP addresses? I am using CentOS with WHM/cPanel installed. I am getting huge junk traffic and 95% is from unresolved IP addresses and only 5% from resolved IP addresses. Is there any easy way…
Kars
  • 1
  • 1
-1
votes
1 answer

blocking all countries except 4 at vlan level, will cisco asa 5505 hold?

First our server hold an application that only serve 4 countries. We had a repeated ddos from bonnet so would like to block all traffic except for the 4 countries that the application serve. the idea is to block them by the vlan level. so will a…
user3376096
  • 11
-1
votes
1 answer

How to tell if the server was down because of DDoS of another reason?

my server was down for a couple of hours during the night. i see in the cpu load monitoring in the amazon AWS console that it was 100% load. also, the network in jumped (but no that dramatically) so how do i know if it was a DDoS or something else?…
Moshe Shaham
  • 109
  • 3
-1
votes
2 answers

Apache DDOS Prevention

Moved from Stackoverflow. I have a LAMP server running Ubuntu with security programs such as Denyhosts, Fail2ban and with Mod_security installed but seem to constantly be the target of a DDOS attack. Here is a section of the access.log: …
Thomas
  • 11
  • 3
-1
votes
1 answer

DDoS Attacks & Convictions

I could probably make a better title, edit it if you find a better way of phasing my problem. Basically what's happened is that a gameserver host thinks I keep attacking their dedicated server with a DDoS attack; but I do not. I have a theory that…
AStopher
  • 53
  • 1
  • 12
-1
votes
3 answers

How to fight request spam (DDOS i guess) on CentOS server

lately i'm trying to fight DDOS on my CentOS 6.4 server. I have installed CSF and I've set it quite strictly. Yet there is a URL that have like 1000 requests and max 2 per IP (smart ddos-er I guess). How do you fight and prevent people to spam…
ProDraz
  • 231
  • 1
  • 4
  • 10
-1
votes
1 answer

GRE tunnel / Route traffic based on which domain the user is trying to access

Imagine this kind of setup. 5 servers. 1 server will be the "front-end", all the traffic has to go through it first before going to the 4 other servers. I don't want people to know the IPs of the other servers, so they will be stuck at server 1…
viniciusmunich - AssabetTech
  • 41
  • 1
  • 5
-1
votes
7 answers

reroute DDOS to FBI Illegal?

Okay I know this might sound silly or dumb, but I would like to know (if anyone knows) if it would be illegal to reroute DDoS traffic to fbi.gov... I just thought it might be a good idea if you wanted to get your DDoS traffic investigated and I…
kernelPanic
  • 99
  • 1
  • 7
-1
votes
1 answer

Can the netstat command show what specific website a user is on?

I'm currently under an Apache DDoS attack and have 13 websites shared under one server. I can use the netstat command to see the # of connections per IP, but not what website they're actually on. I want to sign up with CloudFlare to stop the attack,…
Graham
  • 103
  • 2
-1
votes
2 answers

Router DDoS Protection by MAC

I was wondering if there are any DDoS defences where a (any) router will block all packets (for any period of time) from the MAC address of its attacker. If so, under what circumstances would this occur?
user176232
  • 1
-1
votes
1 answer

Any way to Improve performance of iptables DDOS whitelist?

I'm having a problem stopping a DDOS attack on a dedicated server. I have tried a lot of things (mod_evasive, apf, ddos deflate, bfd...). The attack is very big and from a lot of differents IPs, and the firewalls and protections don't detect…
user2351607
  • 13
  • 4
-1
votes
1 answer

CentOS server RAM usage 100%

I am using Linux CentOS 5.8 VPS. But my site is so slow in last two days. When i cehcked in server's web control panel; RAM usage is 99-100 %. But when i write "top" command; there is any usage on RAM. When i write netstat -ntu | awk '{print $5}' |…
pheaselegen
  • 7
  • 3
-1
votes
1 answer

Linux tools to choose suitable Cisco ASA 5500

I have a linux webhosting server which affects a high DDOS. I want to use Cisco ASA 5500 Series Adaptive Security Appliances to protect the linux server from this DDOS. I know there are many factors should you know before you choose the suitable…
linuxcore
  • 11
  • 3
-1
votes
1 answer

My Linux server is thought to be under a DDOS attack and no access to SSH - what to do?

How can I fix the issues from a DDOS attack without any SSH access at all. My main domain is http://www.reddexservers.co.uk - is there any way of checking if it is under attack externally? Thanks!
James Anderson
  • 3,107
  • 2
  • 17
  • 12
-1
votes
1 answer

My server is attacking other servers

I've been reached by OVH multiple times regarding a dedicated server which I bought from them, and they're saying that the server is attacking other hosts on their network. The first time, the server was an open proxy due to a misconfiguration (I've…
HDR
  • 1
  • 2
1 2 3
…
41 42