how to stop someone ddos vps

[accyuklad]

my site kept going offline and just did a netstat check and found 1 ip was doing 59 connections since i stopped that it working fine is there a easy way that i dont after keep doing a ban myself and use maybe install something in the vps to autoban at a certain connection

does apf and csf stop it anychance

accyuklad Reviewed by accyuklad on 8th May 2011. how to stop someone ddos vps my site kept going offline and just did a netstat check and found 1 ip was doing 59 connections since i stopped that it working fine is there a easy way that i dont after keep doing a ban myself and use maybe install something in the vps to autoban at a certain connection does apf and csf stop it anychance Rating: 5

[cl0n3]

Search Technical and Security Tutorials for your answer

here is few other topics about DDOS

http://www.besthostingforums.com/showthread.php?t=45447
http://www.besthostingforums.com/showthread.php?t=155

or simple try Google

http://www.google.com/search?q=How+to+prevent+DDos

[cgworld]

In your case its just dos mate ! ddos is not same as dos .
ddos is when a botnet attacks you dos is when only one ip attacks you !
you can block it easily using firewall since its just a simple dos from a single ip !

[Sponge Bob]

do this:

login to vps via ssh

den

wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh

This will install ddos deflaye the normal value for a ddos set is 300 where a ip if it passes the 300 mark gets banned.

add it and wait a few minutes like around 10 -15

Cheerz

[Sponge Bob]

do this:

login to vps via ssh

den

wget http://www.inetbase.com/scripts/ddos/install.sh
chmod 0700 install.sh
./install.sh

This will install ddos deflaye the normal value for a ddos set is 300 where a ip if it passes the 300 mark gets banned.

add it and wait a few minutes like around 10 -15

Cheerz

[accyuklad]

since i blocked the ip its been fast and working fine again and i just had xsl to install protection

[feronso]

I just received email notification that blah blah ip blocked due to 200 connection or 150 connection. i don't know what configuration hosting installed. could is there any clue to expose their configuration ?

note: notification show during SSH working.

[Lock Down]

If it is iptables try running this command iptables -L -n

[accyuklad]

i gone for a protected vps just hope this stops the person

[DLow]

There is no such thing as a true protected VPS when it comes to a ddos attack unless your paying $120~$170 even then your better off with a dedicated server.