help with ddos

[Sbac]

Hi everyone

we're under heavy dos attack already for 4 days

Can anyone advise good hosting company which is providing some ddos mitigation tools???

Better a hoster who can put a router or switch in front of the server and give us access to bann the ip's of attackers


Or any ideas how to stop this???




The attack is as strong as it was for GFY - not usual script kiddies

[Juicy D. Links]

[email protected] top notch guys

He will give you a hand

[CSM-101]

Originally posted by Sbac
Hi everyone

we're under heavy dos attack already for 4 days

Can anyone advise good hosting company which is providing some ddos mitigation tools???

Better a hoster who can put a router or switch in front of the server and give us access to bann the ip's of attackers


Or any ideas how to stop this???




The attack is as strong as it was for GFY - not usual script kiddies

Do as the guido says...

Give me a holler...


Im always around.

[notjoe]

Originally posted by Sbac
Hi everyone

we're under heavy dos attack already for 4 days

Can anyone advise good hosting company which is providing some ddos mitigation tools???

Better a hoster who can put a router or switch in front of the server and give us access to bann the ip's of attackers


Or any ideas how to stop this???




The attack is as strong as it was for GFY - not usual script kiddies

If someone wants to drop your shit there aint no switch or router which will save your ass.

[cezam]

Originally posted by notjoe


If someone wants to drop your shit there aint no switch or router which will save your ass.

True. I worked at an ISP as an Unix/Cisco admin and have dealt with many attacks like this, so I know what I am talking about. This shit has to be tracked to its source (which is often almost impossible to do).

Anyhow, if your hosting company is not at least showing an effort to help, just fuck them and let professionals host your stuff.

[lil2rich4u2]

Originally posted by juicylinks
[email protected] top notch guys

He will give you a hand

why do you lie? They have good hosting yes, but support sucks and you know it.

[vending_machine]

Investigate your logfiles, often times you will find a recognizable pattern to identify ddos IPs. Then write a script to parse your logfile every 1-5 minutes and block offending IPs.

[dr00]

Sbac,

If you need a host that has experience with a ddos attack please come talk to us at XFR Networks. We contained the attack on GFY and adultplatinum. We can help you out as well, contact me through ICQ:311545280

[Sbac]

Originally posted by vending_machine
Investigate your logfiles, often times you will find a recognizable pattern to identify ddos IPs. Then write a script to parse your logfile every 1-5 minutes and block offending IPs.

Already tried. It doesn't work as all our ip's were blocked on our firewall but the chanel was already occupied by spoof packets and no one can connect our server.

In order to defeat this ddos we need to ban this ip's on router.

[Sbac]

Originally posted by dr00
Sbac,

If you need a host that has experience with a ddos attack please come talk to us at XFR Networks. We contained the attack on GFY and adultplatinum. We can help you out as well, contact me through ICQ:311545280

Thanks a lot. I'll contact you right now.

[Jeffery]

Originally posted by Sbac
Hi everyone

we're under heavy dos attack already for 4 days

Can anyone advise good hosting company which is providing some ddos mitigation tools???

Better a hoster who can put a router or switch in front of the server and give us access to bann the ip's of attackers


Or any ideas how to stop this???




The attack is as strong as it was for GFY - not usual script kiddies

Give me a call at NationalNet-
877-471-9075 x247
ICQ: 20427689

We've been hosting since 1997 and therefor have had our share of experience with attacks. We host some of the largest and most influential adult sites and we take care of them.

One thing is for sure, you'll never find us unwilling to help, especially in a case like this.

[s9ann0]

tell your people to null route the IP they are attacking and set your site up on another one

[notjoe]

Originally posted by vending_machine
Investigate your logfiles, often times you will find a recognizable pattern to identify ddos IPs. Then write a script to parse your logfile every 1-5 minutes and block offending IPs.

This will do nothing when you have 200mbit/sec coming down a 100mbit/sec pip.

[notjoe]

Originally posted by spanno
tell your people to null route the IP they are attacking and set your site up on another one

Great, so you bring your www up on a new IP, then that gets ddos'd as well as soon as the domain name resolves.k

[delia]

Anyway let us know how you handled this problem. I'm quite curious now. Good luck!