DDOS defense help - GoFuckYourself.com

AnonymousGuy · 12-01-2003, 12:58 PM

I can't say who I am, but I'm under a DDOS attack, and I'm looking for some suggestions from some of you guys who've been through it before. Any tools or techniques? I must be doing well if somebody wants to try to take me out...

TheSaint · 12-01-2003, 01:04 PM

I don't think there is a cookie cutter answer. It depends on how sophisticated the attack is.

Your isp might help (unless you have Rackshack, they just turn you off.

)

Sometimes you can just move to another server, as the dummies that launched it hardwired the ip address. Sometimes they can follow you.

Sometimes the attack is following a pattern that can be filtered in iptables or in routers.

You need a network expert.

JamesK · 12-01-2003, 01:05 PM

pay the hacker to go away.

-=HOAX=- · 12-01-2003, 01:14 PM

not trying to plug a host shamelessly, or make light of your troubles...but jupiterhosting flawlessly handled one of the worst ddos attacks this industry has seen in recent months. If you're not a techy...you need a host that can worry about that type of shit for you.

MediumPimpin · 12-01-2003, 01:21 PM

Quote:

Originally posted by -=HOAX=-
not trying to plug a host shamelessly, or make light of your troubles...but jupiterhosting flawlessly handled one of the worst ddos attacks this industry has seen in recent months. If you're not a techy...you need a host that can worry about that type of shit for you.

I had the same problem, had to move a server to Jupiter just to get a DDOS attack to stop, give Ray a call.

Hen · 12-01-2003, 01:21 PM

Contact one of our network engineers, ICQ# 6857074, he'll give you some good advice.

gin · 12-01-2003, 01:27 PM

you sure it's a ddos? the attacks on my sites i thought were ddos's but they were actually a syn type attack to overload the computer

posh rat in hell · 12-01-2003, 01:32 PM

Quote:

Originally posted by gin
you sure it's a ddos? the attacks on my sites i thought were ddos's but they were actually a syn type attack to overload the computer

SYN floods can be DDoS's too ;)

AnonymousGuy · 12-01-2003, 01:34 PM

Well, as always, moving to a new host is better said than done. MCI is the upstream provider, and they're looking into it. But of course, they're clueless. All they can say is "Yup, it's coming from multiple machines". I was hoping to be able to... take care of the problem myself.

gin · 12-01-2003, 01:39 PM

Quote:

Originally posted by AnonymousGuy
Well, as always, moving to a new host is better said than done. MCI is the upstream provider, and they're looking into it. But of course, they're clueless. All they can say is "Yup, it's coming from multiple machines". I was hoping to be able to... take care of the problem myself.

heh don't wait for the data center to do something.. took like 5 days before the one i was at did anything.. all they kept saying was "oh let me check into it" and would call me back with "yup your server is being attacked" no help at all

Veterans Day · 12-01-2003, 01:42 PM

Quote:

Originally posted by Hen
Contact one of our network engineers, ICQ# 6857074, he'll give you some good advice.

good fuckin people here

icedemon · 12-01-2003, 01:48 PM

http://staff.washington.edu/dittrich/misc/ddos/

How are they attacking you. Like is it just one port that is getting hammered or a SYN attack or what? Some DDOS attacks are easier to stop than others. But there might be someone here that can help you out if we had more info on how your getting attacked.

elaborate · 12-01-2003, 02:04 PM

contact me on ICQ, i'll hunt them down for ya

ICQ: 251911362

Phoenix66 · 12-01-2003, 02:29 PM

Redirect DDOS requests to microsoft.com they will take care of this in couple of hours LOL

Though it's not possibe with some types off attacks.

AnonymousGuy · 12-01-2003, 03:01 PM

Thanks for the help, everybody, but my admin is going to give it a shot first. He wants to try tracking down these little bastards by himself. So, I'll give him a chance to sort it out himself, assuming that he can take care of it quickly. If he doesn't, I'll take up a few of you on your suggestions. Thanks very much.

12-01-2003, 12:58 PM	#1
AnonymousGuy Registered User Join Date: Dec 2003 Posts: 3	DDOS defense help I can't say who I am, but I'm under a DDOS attack, and I'm looking for some suggestions from some of you guys who've been through it before. Any tools or techniques? I must be doing well if somebody wants to try to take me out...

12-01-2003, 01:04 PM	#2
TheSaint Confirmed User Join Date: Jun 2003 Location: Everywhere at once Posts: 991	I don't think there is a cookie cutter answer. It depends on how sophisticated the attack is. Your isp might help (unless you have Rackshack, they just turn you off. ) Sometimes you can just move to another server, as the dummies that launched it hardwired the ip address. Sometimes they can follow you. Sometimes the attack is following a pattern that can be filtered in iptables or in routers. You need a network expert. __________________ I have no signature

12-01-2003, 01:05 PM	#3
JamesK hi Industry Role: Join Date: Jun 2002 Posts: 16,731	pay the hacker to go away. __________________ M3Server - NATS Hosting

12-01-2003, 01:14 PM	#4
-=HOAX=- Confirmed User Join Date: Dec 2001 Location: CrackYaMental Posts: 4,365	not trying to plug a host shamelessly, or make light of your troubles...but jupiterhosting flawlessly handled one of the worst ddos attacks this industry has seen in recent months. If you're not a techy...you need a host that can worry about that type of shit for you. __________________ Insert Value Here.

12-01-2003, 01:21 PM	#6
Hen Confirmed User Industry Role: Join Date: Dec 2001 Posts: 113	Contact one of our network engineers, ICQ# 6857074, he'll give you some good advice. __________________

12-01-2003, 01:27 PM	#7
gin Confirmed User Join Date: Sep 2003 Posts: 672	you sure it's a ddos? the attacks on my sites i thought were ddos's but they were actually a syn type attack to overload the computer

12-01-2003, 01:34 PM	#9
AnonymousGuy Registered User Join Date: Dec 2003 Posts: 3	Well, as always, moving to a new host is better said than done. MCI is the upstream provider, and they're looking into it. But of course, they're clueless. All they can say is "Yup, it's coming from multiple machines". I was hoping to be able to... take care of the problem myself.

12-01-2003, 01:48 PM	#12
icedemon Confirmed User Join Date: Jun 2003 Location: Lutz, FL Posts: 1,022	http://staff.washington.edu/dittrich/misc/ddos/ How are they attacking you. Like is it just one port that is getting hammered or a SYN attack or what? Some DDOS attacks are easier to stop than others. But there might be someone here that can help you out if we had more info on how your getting attacked. __________________ Clips4Sale.com

12-01-2003, 02:04 PM	#13
elaborate Registered User Join Date: Oct 2003 Location: Starbucks Posts: 151	contact me on ICQ, i'll hunt them down for ya ICQ: 251911362

12-01-2003, 02:29 PM	#14
Phoenix66 Confirmed User Join Date: Oct 2002 Posts: 823	Redirect DDOS requests to microsoft.com they will take care of this in couple of hours LOL Though it's not possibe with some types off attacks. __________________ Adult Niche Traffic Exchange

12-01-2003, 03:01 PM	#15
AnonymousGuy Registered User Join Date: Dec 2003 Posts: 3	Thanks for the help, everybody, but my admin is going to give it a shot first. He wants to try tracking down these little bastards by himself. So, I'll give him a chance to sort it out himself, assuming that he can take care of it quickly. If he doesn't, I'll take up a few of you on your suggestions. Thanks very much.