Home > Programming, Servers & Scripts > Hosting, Servers & Security

---

How To Avoid DDOS of my Server? (19)

---

Someone has been attacking my server relentlessly with ddos attacks. I have switched my domain and IP's several times but they still seem to find me. It maybe the traffic source or some publisher I am advertising with since they still happen to find out which domain or IP I use.

I tried cloudflare but it didnt work out with them either since they got a few complaints from my landing page from either the same publisher / person out to get me and they told me to remove it.


Any other ddos protection services that work for a single IP? I really need something that is easy to set up and cheap / does the job.



Also as far as I know these services will filter the attacks by learning my traffic, but i run affiliate campaigns and buy traffic at different surges and time periods all the time so whats stopping it from blocking that traffic? Bit worried about losing legitmate paid for traffic this way..

---

I have no idea what you run but it seems like you manage to piss a lot of people off between this and the hosting complaints.

Good job

---

More than likely it is a competitor so I dont really blame them, just part of the game. I am however looking for something to get past them.

---

Are you using Beyond Hosting?

---

Yeah. I have tried other hosts as well but similiar issues.

---

I suppose the DDoS'es are doing others a favour then, since BH is apparently upgrading DDoS protection systems to cope. In the end, any person who resorts to DDoSing for any reason is an asshole and should be called that to their face.

---

ya ddos is not part of the game, I believe it's criminalized in several countries including the US / UK, and it also falls under other cyber crime statues for dmg over 5k, which if you're running high volume (I'm assuming you're doing over 5k/ day if it's worth someone's time to ddos you). Finding out who is behind it and chances of them being in one of the countries that criminalize it is another story lol.

---

Beyond hosting has turned to shit in the past 2-3 months. DDOS attacks, repeated downtimes with even 50 clicks a minutes, blah blah.

---

Yeah I need to get out of Beyond Hosting, it's pure shit now, are there any good alternatives with guys that know how to work with CPV Lab?

---

I've had a DDOS attack before, I just dumped the domain in question.

You might want to try https://www.cloudflare.com/ It definitely helped reduce the problem for me

You can also get BH to block some of the common IPs that are hitting your server.

Good luck.

---

I don't know that you can actually avoid DDOS but you can take steps to mitigate it.

Cloudflare may be a good start. I'm not sure how much actual protection the free plan offers but it's worth a shot. I believe your website IP will no longer be publicy visible, although googling around says that may not always be the case. Incapsula seems to be the stronger choice though when it comes to security: http://www.ehackingnews.com/2012/11/...ty-review.html. Just keep in mind with both options SSL suddenly becomes quite expensive. Incapsula doesnt offer SSl until the $299/month plan ...yikes, whereas on cloudflare it starts at $20 + $5/mo

Using load balancing with multiple servers may be another way to go about it, but I'm not sure your setup or host and how easy that would be. It's something I think anyone doing volume should look into though, as relying on one server to handle everything, no matter how powerful is not smart in my book.

---

Here is an interesting read.

Specifically this section..

11. Protect from DDOS (Denial of Service) attacks - ModEvasive

---

OK, there are actually quite a few things that you can do to protect your site from DDOSes, but they're mostly *extremely* technical. By that, I mean that I wouldn't try to set them up myself - I'd hire an expert.

Cloudflare is an excellent first step - they've got a very good reputation for DDOS minimisation.

After that, if you're having persistent DDOS problems, find a good security guy and give them money Or use a service that does the same thing - I've heard good things about http://www.prolexic.com/ on Hacker News, for example.

Relevant discussions: https://news.ycombinator.com/item?id=106020 https://news.ycombinator.com/item?id=1987159

---

If you are making decent money I would definitively hire an expert to solve it.

I know from experience that my ROI went up when I hired a guy to manage my server instead of trying to read every tutorial about linux on the web.

Odesk is a good place to start hiring sysadmins. Also make sure you don't go with the cheap indian ones if you want a solution ASAP.

---

Yep, I'm suffering the same attacks. Turkey, China and Russia is where the bulk of my attacks are coming from. I've just implemented Cloudflare and will report back when my DNS records have resolved. It's really pissing me off!

---

Cloudfare didnt work for me FYI. They didnt like my scammy affiliate ads lol

---

@vidivo: have a look at -> http://ddosdefend.com/ & http://www.litespeedtech.com/

Idk if this is real but only for 'trusted testers' -> https://projectshield.withgoogle.com/en/

---

I agree, this is 1 of the few things that aren't part of the game. Not cool.

---

I heard that you can move to amazon cloud hosting, amazon has department fighting this issue

---

Home > Programming, Servers & Scripts > Hosting, Servers & Security