how to fix ddos attack

原文地址：http://www.phpthinking.com/archives/427 Log on to your server and execute the following command with the root user , using it you can check whether your server is in DDoS attack or not: netstat-anp |grep ' tcp\|udp ' | awk ' {print $} ' | Cut-d:-f1 | Sort | uniq-c | Sort–n This command will show that the logged on is the maximum number of IPs connected to the server List.

security, you can set the maximum connection, single IP connection, and blacklist!Maximum connections:7000-> 30000 (LoginGate) is set to 40 single IP connection is set to: 207100-> 31000 (SelChrGate) is set to 30 single IP connection is set to: 207200-> 32000 (RunGate) is set to 1000 Single IP connection is set to: 20In this way, we can effectively prevent DDOS attacks or other variant attacks!Defends against SYN attacks!You can set an IP address seg

Editor's note: The approach discussed in this article is only more effective for small-scale malicious attacks. The author of the company a total of 10 Web servers, using Redhat Linux 9 as the operating system, distributed in major cities nationwide, mainly to provide users with HTTP services. There was a time when a lot of users reflected some of the server access speed is slow, or even inaccessible, after the inspection found that the DDoS

The penalty policy for this attack is, Further violations would proceed with these following actions: 1st violation-warning and shutdown of server. We'll allow hours for your to rectify the problem. The first time is a warning + shutdown, give 24 hours to solve the problem 2nd violation-immediate reformat of server. The second time is to format the server immediately 3rd violation-cancellation with no refund. The third time is to cancel the servic

Today in order to rest, change the brain, so I found a previous collection of Python article, is about DDoS attack a script, just today is free, on the practice. Attached source pyddos.py: #!/usr/bin/env Python import socket import time import threading #Pressure Test,ddos Tool #---------------------------MAX _conn=20000 port=80 host= "www.baidu.com" page= "/ind

Brief description: SMS ddos Attack Vulnerability in Shanda online Detailed description: Shanda online will send a verification code to the mobile phone when the password is forgotten. URL: Http://pwd.sdo.com/ptinfo/safecenter/getpwd/ChgPwdStepOldPwd.aspx? Showbindmobile = 1 Mobile phone numbers can be controlled at will, and sms ddos attacks can be carried out wi

First of all, we used to attack the client and the server configuration method, using the most famous Redhat Linux for testing, this attack test I use Fedora CORE3, the software is the most famous DDoS attack tool Tfn2k Linux version, The attacked Windows Server system uses the Windows2000server service to open the APA

Site was DDoS attack, so wrote a foot to resist, to achieve the way: 1. Attack characteristics, different IP constantly post Web page, resulting in excessive resource consumption2. Analyze Nginx Access log, Judge post feature to obtain Client access IP3. Attack IP block with a connection number greater than 504. Recor

Introduction: On the network, the Linux server is a great way, but also the attack. This article will describe the NTP attack problem encountered in practice and the corresponding solution. 1. Scene description Aliyun on the ECS, over a period of time, frequent alarm, said the traffic is too large, the DDoS attack, the

its CC server, including obtaining the time and target of the start of the DDoS attack, uploading the information stolen from the host, and timing to encrypt the infected machine file. Why malware need unsolicited and cc service communication? Because in most cases malware is downloaded to the infected host by means of phishing emails , the attacker is not able to actively know who downloaded the malware a

original content to save the contents as follows# Generated by Iptables-save v1.3.5 on Sun Dec 12 23:55:59 2010*filter: INPUT DROP [385,263:27,864,079]: FORWARD ACCEPT [0:0]: OUTPUT ACCEPT [4,367,656:3,514,692,346]-A input-i lo-j ACCEPT-A input-m state–state related,established-j ACCEPT-A input-p icmp-j ACCEPT-A input-s 127.0.0.1-j ACCEPT-A input-p tcp-m tcp–dport 80-m state–state new-m recent–set–name Web–rsource-A input-p tcp-m tcp–dport 80-m state–state new-m recent–update–seconds 5–hitcount

PHP code malicious DDoS attack before I was touched once, the server resources are accounted for, so that the site can not be used properly, let me introduce the solution. Solutions Modify the php.ini file The code is as follows Copy Code "Disable_functions" changed to Gzinflate, the default is to vent"Allow_url_fopen" set to OffPhp_sockets.dll, open this module. The abo

Anti-DDoS script # Lightweight prevention against SYN AttacksIptables-N syn-floodIptables-A input-p tcp-syn-J syn-floodIptables-I syn-flood-P TCP-m limit-limit 3/s-limit-burst 6-J returnIptables-a syn-flood-J reject # Prevent too many Dos connections. You can allow up to 15 Initial connections from each IP address of the Internet Nic, exceeding the limit of discardingIptables-A input-I eth0-P TCP-syn-M connlimit-abve 15-J DropIptables-A input-p tcp-M