clocker1996
12-22-2001, 12:24 AM
Basically, ive been getting these DDoS attacks to my dedicated server. I'm not sure what these are, but they aren't real requests. These were coming at my server at once really fast, there were like a million of them. They aimed for port 80, the load average became really high and processes started dying on their own. How can i prevent this? Is there a way to set my server so it can check if they are real requests, or real people/ips, i don't know if i am wording this right.
Can anyone help?
This is just a little bit of the log, the actual log is megs long.
The log is below:
Dec 19 19:38:29 TCP: port 80 connection attempt from 43.76.96.16:34855
Dec 19 19:38:57 TCP: port 80 connection attempt from 34.106.237.63:33831
Dec 19 19:38:57 TCP: port 80 connection attempt from 160.38.0.2:36903
Dec 19 19:38:57 TCP: port 80 connection attempt from 129.166.41.85:35879
Dec 19 19:38:57 TCP: port 80 connection attempt from 89.220.174.98:37927
Dec 19 19:38:57 TCP: port 80 connection attempt from 127.222.102.104:40999
Dec 19 19:38:57 TCP: port 80 connection attempt from 90.198.114.89:38951
Dec 19 19:38:58 TCP: port 80 connection attempt from 69.68.46.18:43047
Dec 19 19:38:58 TCP: port 80 connection attempt from 232.16.162.45:39975
Dec 19 19:38:59 TCP: port 80 connection attempt from 209.208.109.61:42023
Dec 19 19:38:59 TCP: port 80 connection attempt from 113.158.188.10:45095
Dec 19 19:39:00 TCP: port 80 connection attempt from 36.75.250.102:46119
Dec 19 19:39:00 TCP: port 80 connection attempt from 101.139.211.65:44071
Dec 19 19:39:00 TCP: port 80 connection attempt from 204.24.126.46:47143
Dec 19 19:39:00 TCP: port 80 connection attempt from 243.141.190.102:48167
Dec 19 19:39:00 TCP: port 80 connection attempt from 152.91.253.26:49191
Dec 19 19:39:00 TCP: port 80 connection attempt from 127.44.147.96:51239
Dec 19 19:39:01 TCP: port 80 connection attempt from 81.163.115.49:50215
Dec 19 19:39:01 TCP: port 80 connection attempt from h135-118-29-27.outland.lucent.com (135.118.29.27):52263
Dec 19 19:39:01 TCP: port 80 connection attempt from 128.215.89.88:53287
Dec 19 19:39:01 TCP: port 80 connection attempt from 65.135.187.98:54311
Dec 19 19:39:01 TCP: port 80 connection attempt from 108.214.122.112:55335
Dec 19 19:39:01 TCP: port 80 connection attempt from 223.66.200.86:56359
Dec 19 19:39:02 TCP: port 80 connection attempt from 176.213.88.68:57383
Dec 19 19:39:02 TCP: port 80 connection attempt from wks-29-178-40.kscable.com (24.29.178.40):58407
Dec 19 19:39:02 TCP: port 80 connection attempt from 176.195.65.54:60455
Dec 19 19:39:02 TCP: port 80 connection attempt from 222.248.21.66:61479
Can anyone help?
This is just a little bit of the log, the actual log is megs long.
The log is below:
Dec 19 19:38:29 TCP: port 80 connection attempt from 43.76.96.16:34855
Dec 19 19:38:57 TCP: port 80 connection attempt from 34.106.237.63:33831
Dec 19 19:38:57 TCP: port 80 connection attempt from 160.38.0.2:36903
Dec 19 19:38:57 TCP: port 80 connection attempt from 129.166.41.85:35879
Dec 19 19:38:57 TCP: port 80 connection attempt from 89.220.174.98:37927
Dec 19 19:38:57 TCP: port 80 connection attempt from 127.222.102.104:40999
Dec 19 19:38:57 TCP: port 80 connection attempt from 90.198.114.89:38951
Dec 19 19:38:58 TCP: port 80 connection attempt from 69.68.46.18:43047
Dec 19 19:38:58 TCP: port 80 connection attempt from 232.16.162.45:39975
Dec 19 19:38:59 TCP: port 80 connection attempt from 209.208.109.61:42023
Dec 19 19:38:59 TCP: port 80 connection attempt from 113.158.188.10:45095
Dec 19 19:39:00 TCP: port 80 connection attempt from 36.75.250.102:46119
Dec 19 19:39:00 TCP: port 80 connection attempt from 101.139.211.65:44071
Dec 19 19:39:00 TCP: port 80 connection attempt from 204.24.126.46:47143
Dec 19 19:39:00 TCP: port 80 connection attempt from 243.141.190.102:48167
Dec 19 19:39:00 TCP: port 80 connection attempt from 152.91.253.26:49191
Dec 19 19:39:00 TCP: port 80 connection attempt from 127.44.147.96:51239
Dec 19 19:39:01 TCP: port 80 connection attempt from 81.163.115.49:50215
Dec 19 19:39:01 TCP: port 80 connection attempt from h135-118-29-27.outland.lucent.com (135.118.29.27):52263
Dec 19 19:39:01 TCP: port 80 connection attempt from 128.215.89.88:53287
Dec 19 19:39:01 TCP: port 80 connection attempt from 65.135.187.98:54311
Dec 19 19:39:01 TCP: port 80 connection attempt from 108.214.122.112:55335
Dec 19 19:39:01 TCP: port 80 connection attempt from 223.66.200.86:56359
Dec 19 19:39:02 TCP: port 80 connection attempt from 176.213.88.68:57383
Dec 19 19:39:02 TCP: port 80 connection attempt from wks-29-178-40.kscable.com (24.29.178.40):58407
Dec 19 19:39:02 TCP: port 80 connection attempt from 176.195.65.54:60455
Dec 19 19:39:02 TCP: port 80 connection attempt from 222.248.21.66:61479
