Welcome! Log In Create A New Profile

Advanced

I'm under (D)DoS attack, how to prevent?

Posted by Seregwethrin 
I'm under (D)DoS attack, how to prevent?
February 09, 2011 11:21AM
I'm really tired of this for one week i'm dealing with this issue

I've a vps with 512mb ram which is enough to handle my website users

I moved my server to a provider with CISCO firewall but that didn't help

I moved from apache to nginx with nginx limit-http-requests module but that didn't help

Also i was tried apache with mod_evasive, result was failure.

I set iptables to accept only established and related connections, that didn't do any good.

Attacks are to port 80. Problem is not bandwidth, problem is there's a lot of connections so the ram become full and vps could't handle any connections, event i can't make ssh connection.

Example netstat -avpn result is here after as soon as making web server (nginx) online:
https://docs.google.com/document/d/1LuxuYubTAOSxqKp8Fa1wvEKvjkLsxpz-s-3QidUM4hs/edit?hl=en&authkey=COCup6sM
And this is nothing, when i make the web server online for 10 minutes there are dozens of those ips

What can i do? Can I do anything at all? Yes I've already told the isp about this and they'll look into but my old isp could't do anything except null routing my vps's ip.

I'm really tired of it, too angry, too weak to deal with more... Do you have any suggestions?

[i]Note: if publishing those ips is not allowed by forum rules please pm me, but i'm gonna remove them after i get rid of this problem anyway.[/i]



Edited 2 time(s). Last edit at 02/09/2011 11:24AM by Seregwethrin.
Re: (D)DoS Attack
February 09, 2011 11:22AM
Check it out, new ips
https://docs.google.com/document/d/1xZQ2Lu8lsP5Nb9We046HDVpDnbzJVTKEBX-shsfIpuc/edit?hl=en&authkey=CNPHyP4L

I get those netstat result as soon as opening nginx. Maybe one second passed.

I have to close nginx after because if I not those connections increases.
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 272
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready