DDOS Attack - Page 2 - GoFuckYourself.com

borked · 01-22-2011, 02:14 AM

what type of DDOS attack?

if it's a SYN attack, drop the IPs with

Code:

for i in ` netstat -tanpu | grep "SYN_RECV" | awk {'print $5'} | cut -f 1 -d ":" | sort | uniq -c | sort -n | awk {'if ($1 > 10) print $2'}` ; do echo $i; iptables -A INPUT -s $i -j DROP; done

moeloubani · 01-22-2011, 02:31 AM

Quote:

Originally Posted by facialfreak

Here's the thing .... a managed host may be able to lighten the blow somewhat using DDoS Deflate, tightening up some firewall rules, temporarily reconfiguring your php.ini, etc., etc ... but if the attacker is stubborn enough, what's going to happen is that your site will stay "up", but it will be severely bottlenecked, as your load balances go up into the double (or even triple) digits ... which will mean half of your legit traffic is going to back out of your page before it even loads anyways!!!

Between the added expense of DDoS mitigation, and the loss of legit traffic, I would say this endeavor is a bad one before it even begins ...

For a site that is not making you any money, I have to wonder why you want to keep it up so badly?

Just as a matter of principle I don't want someone else to decide when one of my sites is up or down. If I thought that the site they are attacking was worth a serious attack then I'd say screw it but I doubt that someone sees this site and decides it warrants any real amount of resources or manpower to keep down.

dazzling · 01-22-2011, 06:03 AM

Just an idea, put a notice on your website that it is for sale. See who contacts you, it may actually give some indication as to who is behind this. If it is someone in competition with you, they will probably be curious enough to contact you for the price. Make it very cheap and see if you can find out who it is.
If that fails, after a few weeks post the website has been sold and transfer the domain to a different register using domain ID protect and see if the attack drops or continues. It may not be your website their after but you personally, so if they think its sold they may drop off.

Klen · 01-22-2011, 06:30 AM

Ddos attacks are easy to handle if you use proper tools.

01-22-2011, 02:14 AM	#51
borked Totally Borked Industry Role: Join Date: Feb 2005 Posts: 6,284	what type of DDOS attack? if it's a SYN attack, drop the IPs with Code: for i in ` netstat -tanpu \| grep "SYN_RECV" \| awk {'print $5'} \| cut -f 1 -d ":" \| sort \| uniq -c \| sort -n \| awk {'if ($1 > 10) print $2'}` ; do echo $i; iptables -A INPUT -s $i -j DROP; done __________________ For coding work - hit me up on andy // borkedcoder // com (consider figuring out the email as test #1) All models are wrong, but some are useful. George E.P. Box. p202

01-22-2011, 06:03 AM	#53
dazzling Confirmed User Industry Role: Join Date: Nov 2002 Posts: 579	Just an idea, put a notice on your website that it is for sale. See who contacts you, it may actually give some indication as to who is behind this. If it is someone in competition with you, they will probably be curious enough to contact you for the price. Make it very cheap and see if you can find out who it is. If that fails, after a few weeks post the website has been sold and transfer the domain to a different register using domain ID protect and see if the attack drops or continues. It may not be your website their after but you personally, so if they think its sold they may drop off.

01-22-2011, 06:30 AM	#54
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Ddos attacks are easy to handle if you use proper tools.