Getting the SHIT DDoSd out of me....help?
- Thread starter kallell
- Start date
Load: 3.53, 3.11, 3.39 at 2009-10-09 23:10 (38.7% SQL)
19.42/usr 0.35/ni 5.41/sys 4.38/wa 0.00/id
Apache: 71.6 requests/sec - 4.1 MB/second - 59.0 kB/request
167 requests currently being processed, 108 idle workers
Apache Uptime 22 hours 42 minutes 1 second
I apologize, but I was forced to suspend the script under "xxxxxxxxxxxxx as it was causing a high load on the server and affecting other users on the server. It appears you are receiving a ddos on your images which we had to rectify immediately as the load shot up over 113 shortly after starting the suspension. We will need to keep this locked until the attack has subsided.
19.42/usr 0.35/ni 5.41/sys 4.38/wa 0.00/id
Apache: 71.6 requests/sec - 4.1 MB/second - 59.0 kB/request
167 requests currently being processed, 108 idle workers
Apache Uptime 22 hours 42 minutes 1 second
I apologize, but I was forced to suspend the script under "xxxxxxxxxxxxx as it was causing a high load on the server and affecting other users on the server. It appears you are receiving a ddos on your images which we had to rectify immediately as the load shot up over 113 shortly after starting the suspension. We will need to keep this locked until the attack has subsided.
Yeah... tell the host to 301 the URL somewhere else, or you just remove it. 404 the bitch.
Happened to me a week or two ago and got my VPS shut down for a while.
It ended up being on a site I wasn't actively promoting at the time so I just switched the nameservers for the domain back to the registrar and that stopped it. The traffic was coming from different ip's so we couldn't block it and unfortunately there's just not much you can do until it either stops or you change where the domain points.
It ended up being on a site I wasn't actively promoting at the time so I just switched the nameservers for the domain back to the registrar and that stopped it. The traffic was coming from different ip's so we couldn't block it and unfortunately there's just not much you can do until it either stops or you change where the domain points.
I was looking at that, the 174 package. Once they are cut off though, how does that effect rest of your users? Your site get locked down for a while + all ips blacklisted? I'm hosting a forum and that would be brutal if that happened.
Haven't checked out the hostgator package but if they are using the Cisco protection as someone said above, it's smarter than a total block. One devices check the traffic (but on a more intelligent level than a IDS, more like a sniffer that is capable of detecting traffic trends automanously) and redirects the traffic through another device which can be thought of as an emergency firewall, which blocks the ddos traffic but should allow through normal traffic.
Got DDoSed pretty bad a few months back. My webhost installed a $70,000 tippingpoint appliance in front of my sever and it ceased and never reoccurred.
I would but there are literally hundreds. If you guys still want i can oblige. I know what site is doing it too, but i don't think i would have the resources they do to take them down....
I got DDoSd a month ago right before I went on holiday. My host shut my site down and I got it back up only after I got back from holiday. 3 weeks of traffic lost as a result.
