DDoS attack - How to make it stop?!

[the indigo]

Hello,

We are getting hit by a DDoS attack since a few days... and our ISP charges us $200/day for "DDoS mitigation" service.

It's that or we shut down... any people here have any experience. What should we do?

Thanks!!

[Ferus]

Use http://www.cloudflare.com/ddos

http://gcn.com/articles/2013/01/23/h...s-attacks.aspx

[pornguy]

get the persons personal info and use a base ball bat.

[EddyTheDog]

Originally Posted by Ferus

Use http://www.cloudflare.com/ddos

http://gcn.com/articles/2013/01/23/h...s-attacks.aspx

It actually does work...

[Creatine]

Use cloud flare, it's your best option,
DDOS attacks are very frustrating to deal with. Usually they stop after a couple hours.

[critical]

Move your sites to our network, we can handle that for you and we already have DDoS mitigation in place.

We have direct peering with blacklotus and cloudflare as well.

Hit me up on skype or aim:;

Skype: critical.net
AIM: NJesterIII

[_Richard_]

best of luck

[mikesouth]

if its a wordpress site hit me up

[KillerK]

Originally Posted by critical

Move your sites to our network, we can handle that for you and we already have DDoS mitigation in place.

We have direct peering with blacklotus and cloudflare as well.

Hit me up on skype or aim:;

Skype: critical.net
AIM: NJesterIII

you are a piece of shit, and anyone who deals with you is a fucking idiot.

[EddyTheDog]

Originally Posted by KillerK

you are a piece of shit, and anyone who deals with you is a fucking idiot.

Don't hold back - Tell us what you really think...

[brassmonkey]

go to church and light a candle

[Dankasaur]

Originally Posted by Ferus

Use http://www.cloudflare.com/ddos

http://gcn.com/articles/2013/01/23/h...s-attacks.aspx

This 1000 times.

[the indigo]

Thanks for the feedback. People using Cloudflare... is it only domain by domain like it looks like?

They are attacking our main server with 100's of domains so I might have to select which specific domains to protect.

[brassmonkey]

the lord will hook you up

[Ferus]

Originally Posted by the indigo

Thanks for the feedback. People using Cloudflare... is it only domain by domain like it looks like?

They are attacking our main server with 100's of domains so I might have to select which specific domains to protect.

Depends on your plan
https://www.cloudflare.com/plans

If you have 20+ high-traffic sites, you should contact them directly for a quote for your specific setup. The prices they have on their site is just list-prices

[Zeiss]

http://deflate.medialayer.com/

Usage: ddos.sh [OPTIONS] [N]
N : number of tcp/udp connections (default 150)
OPTIONS:
-h | --help: Show this help screen
-c | --cron: Create cron job to run this script regularly (default 1 mins)
-k | --kill: Block the offending ip making more than N connections

[the indigo]

Originally Posted by Zealotry

http://deflate.medialayer.com/

Usage: ddos.sh [OPTIONS] [N]
N : number of tcp/udp connections (default 150)
OPTIONS:
-h | --help: Show this help screen
-c | --cron: Create cron job to run this script regularly (default 1 mins)
-k | --kill: Block the offending ip making more than N connections

Thanks, but I think this script only block the attack, which we already do at the cost of $200/day since they send about 5-10 Gbps. I don't know their budget but it is not cheap either on their side to send that much traffic to DDoS us.

[mamaliga]

Originally Posted by the indigo

Thanks for the feedback. People using Cloudflare... is it only domain by domain like it looks like?

They are attacking our main server with 100's of domains so I might have to select which specific domains to protect.

Chosing remote ddos protection its a good solution and a cheap one. Pay attention to attack intensity before paying and see if Cloudflare can stop such attack. I got hit with 400k/ sec and http://www.r00t-services.net/ helped me out stoping the shit. (thats a medium attack size judging from my hosting company who null route at 150 k/s)

[Zeiss]

Originally Posted by the indigo

Thanks, but I think this script only block the attack, which we already do at the cost of $200/day since they send about 5-10 Gbps. I don't know their budget but it is not cheap either on their side to send that much traffic to DDoS us.

OK. But with this script it will cost you $0 per day. Up to you. Good luck!

[seeandsee]

DDoS attacks can be pain in the ass but use some protection service from now on

[PTB-Media]

If it has not stopped hit me up on skype: i dont want to sell you anything i just want to assist.

[Phoenix]

why is someone doing it?

[adultmobile]

Originally Posted by Ferus

Use http://www.cloudflare.com/ddos

It just say $200/mo business and $3000/mo enterprise. These services should have some price per "ddos traffic", I suppose? Or because is a CDN/Proxy system, that does not matter? This seems like http://www.akamai.com/html/solutions/ddos_defender.html

Google say me: "the content is not hosted by CloudFlare, but rather proxied and cached. However if an attacker were to discover the real IP of the site behind CloudFlare, they could conceivably bypass CloudFlare’s protection and services entirely".
Now, ddos already started, so the doxers know your IP already.

I'm familiar with prolexic, blacklous etc. type of services, but these may ask you the same $200 a day I guess, is based on traffic.

Google also found a cloudflare hater page:
http://www.cloudflare-watch.org/

Cloudflare mentioned at minute 29 here

[ajrocks]

You can order a DDOS attack for as little as 20 bucks. A lot of douche bags play these games with affiliate programs and other affiliates. It can be a real drag and expense.

[3om3]

man
get back to basic
first of all change ur server ip and rest dns of it
and try to close the hole server for i day or too yes do it shut down the server if u rent hole of it till them that shut it down for 1 day all this attack will send back to the fucker who send them
and if that all dont work change ur host with new one that will helo alot u will not apple to stop it the fucker who rent u the host can stop that by change server ip it about 4 houers of work and u will pay for them but the want to to pay every day i know that we have alot of that before i know what i tlak about
DONT TRY ANY SHIT PROGRAM WILL NOT HELP U WILL ONLY LOST TIME
best of luck man

[AndrewX]

Originally Posted by the indigo

Thanks, but I think this script only block the attack, which we already do at the cost of $200/day since they send about 5-10 Gbps. I don't know their budget but it is not cheap either on their side to send that much traffic to DDoS us.

The kids spoof attacks from infected nodes, worms, trojans on servers and desktops, it costs them nothing.

[freecartoonporn]

i read,
you can stop ddos attack just by configuring iptables correctly. if you know what you are doing.

[Ferus]

Originally Posted by adultmobile

It just say $200/mo business and $3000/mo enterprise. These services should have some price per "ddos traffic", I suppose? Or because is a CDN/Proxy system, that does not matter? This seems like http://www.akamai.com/html/solutions/ddos_defender.html

Google say me: "the content is not hosted by CloudFlare, but rather proxied and cached. However if an attacker were to discover the real IP of the site behind CloudFlare, they could conceivably bypass CloudFlare?s protection and services entirely".
Now, ddos already started, so the doxers know your IP already.

I'm familiar with prolexic, blacklous etc. type of services, but these may ask you the same $200 a day I guess, is based on traffic.

Google also found a cloudflare hater page:
http://www.cloudflare-watch.org/

Cloudflare mentioned at minute 29 here

If you google "the earth is flat" you will find people who believe it as well. Does that make it true?

Several of my clients have used cloudflare, and it work.

I dont give a fuck about what haters think

[Axzar]

I recently installed ZBBlock. Worked like a charm.