Someone DDOS'ing My Server - Best Remedy?

[imbo55]

I have a dedicated server w/ 1&1. 2 servers actually, only one is down. i will investigate further with 1a1 and see if we can confirm wth is going on for sure. They said DDOS before but perhaps not.

Honestly for the price you aren't going to get a more reasonable solution then cloudflare. If it is setup properly, they can even defend against some pretty major attacks that even most stand alone DDOS services would simply charge you too much or take your site offline.

DDOS hosting is one of those things that costs a boatload and whenever you get a large attack, they are going to want to upsell you on an even more expensive package. Realistically, you are looking at $300 on the low end to $1000-$4000 a month for DDOS. And if you are currently under attack, they are going to charge you EVEN MORE, just because they can and know that you will pay it.

So unless you are hosting a major brand, you can get the same level of filtering actually more by paying $20 to cloudflare for their pro service or for most sites, even get away with their free package...

 

[Loafy]

Ok, thanks everyone. Going to give 1&1 the boot and get cloudflare. New host + cloudflare (per barmans recommendation).

 

[kryaa]

Never ever use 1&1 for anything ever, unless you literally give zero shits about it. The management area is awful. The quality of service is awful. Everything about them is awful.

They are also known for refusing to accept cancellation requests. I tried to cancel a domain for several years and they just kept charging me and said i should send in the request again via snail mail. They basically say "Sue me!" because they know most won't. No, 1&1 is a horrible idea. They're a bunch of scammers in my books.

 

[swiftmoney]

FUCK 1&1!!!!!!

 

[lothos]

They are also known for refusing to accept cancellation requests. I tried to cancel a domain for several years and they just kept charging me and said i should send in the request again via snail mail. They basically say "Sue me!" because they know most won't. No, 1&1 is a horrible idea. They're a bunch of scammers in my books.

they're also known for sending bills to collections. I wouldn't wish 1&1 on my worst enemy.

 

[SLO Ur Roll]

Id redirect it to a competitor.

Yup, use Cloudflare. One of my sites was getting hit really hard. I checked the logs, and found the IPs that were hitting it the most, and just blocked them with Cloudflare. Problem solved.

This is very very easy to do without cloudflare, js.

 

[dynamicsoul]

limestone networks have been excellent with my dedi in the US. they've a lot of optional add ons for firewalls and extended support if you can't solve it yourself..

as someone just said above, check the logs and find the ips, block the ranges with iptables if it's linux..

 

[Tedel]

I thought Cloudflare was a good offer...

...but anyway I didn't replace my DNS settings with their servers (that's too much risk to take), I just added them as additional DNS servers (to complete 4 now). So far it works.

 

[Loafy]

Just to update. After a majorly frustrating week it looks like we got a solution in place. Wasn't cheap, but worth it.

Started trying the $200 package at cloudflare. It failed. And the customer support was less than acceptable. You don't even get anyone to call until you drop $3k. You get 'upgraded support ticket support' with the $200 package.

Ended up going with dosarrest.com - It costs a few grand but customer support is awesome from the sales through the technical side. So far so good. Wasn't cheap, but worth it.

Had a convo w/ another company (Prolexic) and the initial talk said the services start at 5k/mo and scale up, per site.

Someone needs to open up an aff program for ddos companies - market is going to continue to grow.

Good luck bro's.

 

[faceblogger]

Started trying the $200 package at cloudflare. It failed. And the customer support was less than acceptable. You don't even get anyone to call until you drop $3k. You get 'upgraded support ticket support' with the $200 package.

Cloudflare CEO is an active member here. PM him he should be able to make your experience better. (He gives 50% discount for WF members)

 

[xmcp123]

Ok, thanks guys. New host is on short list.

Anyone have good experience w/ a host that has ddos protection? A quick google I found one that has a base package at $500 / mo (liquidweb). Will keep looking.

Theoretically Santrex can do DDOS protection. Realistically they have shit setup time, shit support, and are overall one of the worst companies I had the misfortune of dealing with.

...but their servers are fast and in theory they offer what you want.