How to Stop DDOS

[prvtzone]

@legendsehi two methods sir.
1. Block all 2k ips from which ddos attack is coming from cloudflare
2. Setup a basic firewall rule (You dont need to buy pro plan) .

How to setup firewall rule?
Check the firewall logs and get these details
1. Hostname
2. Http Version
3. Request Method

and make firewall rule like below

After making firewall rule. Choose an action "Challenge (Captcha) .

After doing that, ddos attack will stop.

 

[prvtzone]

changing ip address isnt a solution because cloudflare is easy to bypass.

 

[prvtzone]

Check the server logs and monitor the cpu usage and i/o usage.

 

[Warfare]

Thanks

 

[Silv3er]

@legendsehi Yep

 

[Silv3er]

@prvtzone is useless check out https://check-host.net/check-report/cd4a15ek6e2

 

[legendsehi]

@Silv3er i did what u said , my website ping became 0/4. Is that normal?

 

[Silv3er]

@legendsehi Don't choose ping, ping is disabled. It's normal.

 

[sucre13]

you can see the visitor number also if you have thousands of visits are robost

 

[DEBIL]

The first thing you need to do is set up your network. There are iptables for this, as well as limits for NGINX (web server), they also often block the network with a brute, use file2ban to protect against broot. This is basic. It is also necessary to tune the database and SYSCTL.conf

also you need to check ur log files, to understand what kind of attack

 

[legendsehi]

i dont have root access. my hosting is shared

 

[OneTap]

Any websites can be ddos even if you have a 20000€ DDOS protection... Every ddos protection is going to break after a while and it's avitabke, it's just a matter of time, even with a captcha...

 

[prvtzone]

right, but there are ways to fix it. even sites like facebook and wikipedia can go down, but there is always to way to filter out and block bad traffic.

 

[hollywood1337]

The Cloudflare free package works more than well enough- ESPECIALLY if you know how to set up firewall rules.

 

[legendsehi]

@Silv3er i enabled the orange cloud , and it's working. Do i need to turn off the orange cloud?

 

[Silv3er]

@legendsehi Yes, you need to disable the orange cloud under the IP of ddos guard,
for an uptimal filtering

 

[DEBIL]

you can't do anything without root user, because a lot of procceses and other work only on root. But you can try use SUDO

 

[legendsehi]

@Silv3er is it free forever?

 

[GrimHackers]

@prvtzone I already mentioned that in option 2. But everyone wouldn't like captcha.

Better websites with huge userbase would buy the pro plan because filling up captcha is frustrating and now thats hcaptcha.

 

[prvtzone]

@GrimHackers even large websites using captcha, i have seen websites like cpanel and namecheap use clouflare captcha on there forums. And the forums like c.to and hf use captcha, Yes they can afford the pro plan but seems like the captcha is best solution to filter bad traffic.