Still under attack...

[Darren]

6mb packets from 3,000 different IP's hitting the server.

What is the standard security that should be in place on a server? We are currently working with CaveCreek to solve this problem but if your an host can you tell me how you would handle this situation? It as been over 18 hours now.

[JFPdude]

Hope you get it all sorted out ...

[MetaformX]

That sucks, hope you get it fixed.

[Doc911]

Thats sucks Darren. I hope you get it fixed soon

[who]

This is why everyone should know a friendly Russian hacker. You need someone to get on there and find out where it's coming from.

[Rui]

I already sent to Andy a possible solution to avoid such problems from happening again ;)

p.s. - if you want to talk with me about this Darren drop me a line m8: 85-483-060

[wdsguy]

This is why everyone should know a friendly Russian hacker. You need someone to get on there and find out where it's coming from.

Is that after he backdoors the server?

[who]

Is that after he backdoors the server?

I did say 'Friendly'....

Does that save my post?

[pstation]

6mb packets from 3,000 different IP's hitting the server.

What is the standard security that should be in place on a server? We are currently working with CaveCreek to solve this problem but if your an host can you tell me how you would handle this situation? It as been over 18 hours now.

you can't have "6mb packets"

[Basic_man]

Dang, that really suck.

[Mr Dickovitch]

It happens to all the best websites. Turn off your computer and go on a fun vacation for a couple days and when you come back it will probably be over. After awhile you'll get where you look forward to these things because you can go relax for a couple days.

Eventually the people who are doing this will get tired and go away. If you act like it doesn't bother you then they will go away faster.

It would be nice to track down the nerds who do this stuff though and make them pay.

[TheSaint]

If its a (distributed) DDOS attack, it can be very, very difficult to stop. Simplest solution is to have them change the ip address and point dns there (or move to a new server). Sometimes the attack is hardwired to the server address and stops, sometimes it follows.

[Relish XXX]

http://www.cisco.com/en/US/products/...d800fa55e.html

Cave Creek should get this hard ware installed.

[stev0]

I think verio was being hit again too, just got back up now

[pstation]

it cant be too big of a attack if the server is returning pings without any delay