[ShaoKahn]

limit your bandwith to each ip
1mbps per ip

[Mavrick4283]

then they will just hit that limit....so the dos will still work....

[mohsen9010]

i test in big data centers in iran but no one can not block this automaticly
only 1 data center can block automaticly in iran
i want to searching how to do that

[Mavrick4283]

iptables --limit-burst ...... Like i said Linux i can help but not windows

[mohsen9010]

i find that
this datacenter have 2 hardware firewall
each one 8000~9000 $
you can add your hardware firewall or add host base firewall too
no one can not attack to this datacenter
like a monster

[guven5]

Main topic a bit old but subject alway upto date

here is sample what my vps got attack

Internal xxx.xxx.xxx.xxx
Threshold FlowsDiff 40 flows/s, Diff: 56 flows/s
Sum 17.004 flows/300s (56 flows/s), 17.104.000 packets/300s (57.013 packets/s), 18,163 GByte/300s (495 MBit/s)
External 178.249.48.131, 45 flows/300s (0 flows/s), 45.000 packets/300s (150 packets/s), 0,003 GByte/300s (0 MBit/s)
External 108.167.190.13, 44 flows/300s (0 flows/s), 44.000 packets/300s (146 packets/s), 0,061 GByte/300s (1 MBit/s)
External 210.212.133.105, 44 flows/300s (0 flows/s), 44.000 packets/300s (146 packets/s), 0,003 GByte/300s (0 MBit/s)
External 217.18.190.5, 43 flows/300s (0 flows/s), 44.000 packets/300s (146 packets/s), 0,061 GByte/300s (1 MBit/s)
External 64.38.26.179, 43 flows/300s (0 flows/s), 43.000 packets/300s (143 packets/s), 0,060 GByte/300s (1 MBit/s)
External 83.98.129.10, 42 flows/300s (0 flows/s), 42.000 packets/300s (140 packets/s), 0,059 GByte/300s (1 MBit/s)
External 178.208.80.57, 42 flows/300s (0 flows/s), 42.000 packets/300s (140 packets/s), 0,059 GByte/300s (1 MBit/s)
External 83.96.231.60, 42 flows/300s (0 flows/s), 42.000 packets/300s (140 packets/s), 0,059 GByte/300s (1 MBit/s)
External 83.97.100.122, 41 flows/300s (0 flows/s), 41.000 packets/300s (136 packets/s), 0,057 GByte/300s (1 MBit/s)
External 70.86.102.131, 41 flows/300s (0 flows/s), 41.000 packets/300s (136 packets/s), 0,057 GByte/300s (1 MBit/s)
External 153.19.0.110, 40 flows/300s (0 flows/s), 40.000 packets/300s (133 packets/s), 0,056 GByte/300s (1 MBit/s)
External 204.8.219.248, 40 flows/300s (0 flows/s), 40.000 packets/300s (133 packets/s), 0,056 GByte/300s (1 MBit/s)

.
.
.
.
.
.

comments...

[mr_vai]

run hlds on window ???
i'm a victim

[Brian-__-]

Only thing you can do is send these record to your ISP, they can help you to block these traffic before they inbound to your server

[mr_vai]

I do not use ISP.
What can I do to fix this situation???

[Neeeeeeeeeel.-]

Originally Posted by mr_vai I do not use ISP.

So you are your own Internet Service Provider?