How to Defend Against a DDoS Attack?

[dxgamers]

Hello KWWH Webmasters.
I need help from you all regarding defending a ddos attack.
The problem is that, my server load always increase to 7-8 automatically at night (+5:30 IST).
While, at daytime it is normal and is around 1-1.5.
So, I'm sure that this will be a ddos attack on my site.
This has been happening from last 3-4 days.
Any help regarding this will be greatly appreciated.
I'm running centos 5 32bit and kloxo.

dxgamers Reviewed by dxgamers on 4th Sep 2010. How to Defend Against a DDoS Attack? Hello KWWH Webmasters. I need help from you all regarding defending a ddos attack. The problem is that, my server load always increase to 7-8 automatically at night (+5:30 IST). While, at daytime it is normal and is around 1-1.5. So, I'm sure that this will be a ddos attack on my site. This has been happening from last 3-4 days. Any help regarding this will be greatly appreciated. I'm running centos 5 32bit and kloxo. Rating: 5

[NewEraCracker]

You have to find IPs performing such attacks and null route them.

[dxgamers]

@ NEWEraCracker
I'm newbie to this vps and never used unmanaged vps.
so, can u tell m that how will i find out ip's performing such actions???

[champ_007_bond]

Contact Krun!x for it, maybe he can help, if he's free.

[Sponge Bob]

Here check this add it it will help you.

http://deflate.medialayer.com/

Or if you have csf installed do this:

Login to SSH via root:

netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n

Then check the IP's that are from the same subnet, and also those that have over 100+ connections to your server and ban them.

That will do the job

[vps9Ryan]

http://deflate.medialayer.com/

This is simply amazing, and best for software level.

Go for it and you can easily defend a lot of these attacks

recommended.

regards,
Ryan

[omg]

Thanks for the link.