DDOS Attack Advisory

minsan ayaw mag load ng pages kahit ok naman yung connection ng internet ko… yun pala may DDOS attack

firewall, if its dynamic ip, either you have a mitigation service which can block traffic that looks malicious at your provider, or well you try to just handle the traffic. If you run apache its really hard to handle, better if you use NGINX since it can handle tons of connections easily.

Here’s a script I use which blocks ips with more than 200 connections using iptables. You can run that one a cronjob :) It might work

/bin/netstat -npa –inet | /bin/grep :80 | /bin/sed ‘s/:/ /g’ | /bin/awk ‘{print $6}’ | /bin/sort | /usr/bin/uniq -c | /bin/sort -n | while read line; do one=`echo $line | /bin/awk ‘{print $1}’`; two=`echo $line | /bin/awk ‘{print $2}’`; if [ $one -gt 200 ]; then /sbin/iptables -I INPUT -s $two -j DROP; fi; done; /sbin/iptables-save | /bin/grep -P ‘^-A INPUT’ | /bin/sort | /usr/bin/uniq -c | /bin/sort -n | while read line; do oneIp=`echo $line | /bin/awk ‘{print $1}’`; twoIp=`echo $line | /bin/awk ‘{print $5}’`; if [ $oneIp -gt 1 ]; then /sbin/iptables -D INPUT -s $twoIp -j DROP; echo $twoIp; fi; done

hmm, that’s why I can’t access this site a few days ago. I thought you’re doing a site maintenance.
Well I guess, you’re site is really famous now – that’s why they’re doing it!

Kya pala this past few days when i tried to access this blogs its always display’s n0t found or unable to connect using my pc and m0bileph0nes
s0mebody might want to rule your blog sir abe…
Because of your blogs popularity
Mga walang magawa,hehehe mga inggit lang sila sir abe !
M0re power to you yugatech blog!

My site was DDoS on and off for 3 weeks,
it killed my business !!!

Somebody has to do something about these DDoS
attacks

I eventually had to subscribe to a DDoS protection service called dosarrest, great service and have had no problems since.