Results 1 to 16 of 16
-
01-26-2014, 12:36 AM #1Newbie
- Join Date
- Apr 2011
- Posts
- 14
New LiquidWeb customer under DDoS attack. Helpp..
My 5 yearold site has never gotten Ddos attack before.. less than amonth ago i moved to LiquidWed, and suddenly.. today.. the site is under ddos attack, it has gone down for over 3 hours now.
Anyone using LiquidWeb?
How long usually ddos attack last?? This is the first time im using LW's StormServer (not Traditional server). If i had stronger/better server, would this ever happen?? Will CDN help?
Here's email i got from LW:
Hello, A large inbound denial of service (DoS) attack of size 2.4 Gbps was detected attacking the server host.xxx.com. The attack appears to have been targeting the IP address 209.xxx.xx and that IP has now been null routed on the Liquid Web network. This means that all traffic to that IP address, including legitimate traffic, will be dropped. We do have other countermeasures available that will allow most legitimate traffic through even during a DoS; we refer to that service as "DDoS Attack Protection".
We've taken action due to the severity of the attack and because the attack was causing packet loss for other customers. To prevent further complications on the Liquid Web network the IP address will remain null routed until the attack has subsided, or until DDoS Attack Protection is enabled.
-
01-26-2014, 01:24 AM #2Mr Unmetered
- Join Date
- Jul 2001
- Location
- Melbourne, AU
- Posts
- 1,392
Get DoS protection. I believe LW offer this so either get it with them or through a 3rd party.
█ SERVSTRA | THE ENTERPRISE CLOUD SERVER & DEDICATED SERVER SPECIALISTS
█ 中国优先网络 - 最快到中国大陆
█14 world wide locations to choose from!
-
01-26-2014, 02:08 AM #3
If you just moved there it could be possible the last person on that IP attracted some attacks if you haven't had any in five years it sounds a little odd that you would be attacked now.
⚡️ PUREVOLTAGE.COM ⚡️Custom Dedicated Servers, Colocation, VPS Contact us: sales@purevoltage.com Skype: Mobile.Jake
AMD EPYC 7443P RYZEN 7950X3D ⚡️ NVME 10G - 100Gbps We do it all!
★ New York City ★ Seattle ★ Los Angeles ★ Chicago ★ Dallas ★
-
01-26-2014, 03:10 AM #4Web Hosting Master
- Join Date
- Jul 2011
- Location
- SriLanka
- Posts
- 2,010
After 5 years may be your site have aggressive competitors or it may be the erlier users issue. However you need ask them for DDOS protection with hardware.
LankaPartnerHost.Com
█ Canada Anti DDOS Webhosting, Reseller Hosting, WHMsonic, WHMsonic Resellers
-
01-26-2014, 06:51 AM #5
I personally wouldn't look into DDoS protection just yet. Since it's the first time you've been attacked in 5 years, it could be a one-off. Sometimes you get people testing the capability of their booters/botnets (as annoying as it is, it happens) on random targets.
I would wait for LiquidWeb to lift the null-route (if they haven't already) and monitor the situation. If it happens again, it sounds like you're intentionally being attacked, in which case, you should look for a more permanent solution.~]# Ethernet Servers Ltd - Est. 2014! - sales @ ethernetservers.com
~]# Try out our WordPress speed tests for yourself!
~]# NVMe Web Hosting | Unmanaged VPS | Fully Managed VPS | Dedicated Servers | Domain Names
~]# Don't settle for any less than the very best - come & join our family today!
-
01-26-2014, 09:02 AM #6Newbie
- Join Date
- Jan 2014
- Posts
- 16
Try AnyCast DNS to mitigate some of the traffic or cloud flare ?
-
01-26-2014, 09:12 AM #7Web Hosting Master
- Join Date
- Feb 2012
- Posts
- 2,103
You should use a server on a DDoS Protected network. LiquidWeb do offer DDoS Protection for an additional cost, my guess is that it isn't cheap though.
█ Clouveo - SSD/NVMe Cloud VPS & Web Hosting
█ Cloud VPS Servers | DDoS Protected | Snapshots | Auto Backups | One Click Apps | Custom ISOs
█ clouveo.com | Locations: [UK] London, [NL] Amsterdam, [US] Los Angeles
-
01-26-2014, 09:35 AM #8Web Hosting Evangelist
- Join Date
- Sep 2008
- Location
- /dev/null
- Posts
- 469
ask LiquidWeb to provide you with a new ips then hide them using cloudflare
-
01-26-2014, 09:49 AM #9Web Hosting Guru
- Join Date
- Feb 2005
- Location
- localhost
- Posts
- 5,473
What sort of site are you running?
Respectfully,
Mr. Terrence
-
01-26-2014, 01:02 PM #10Web Hosting Master
- Join Date
- Mar 2012
- Posts
- 1,421
For the amount of money you probably are paying them, they should give you the protection for free. ^ ^
LW the king of expensive for no difference.--
-
01-26-2014, 02:50 PM #11Registered User
- Join Date
- Nov 2012
- Location
- Zürich - Barcelona
- Posts
- 26
First find out the type of attack and it's size from your hosting provider.
Second in case if it's TCP - consider using a remote protection TCP proxy, in other case, if it's a game server and you don't need lags, consider a new dedicated server, protected from ddos attacks.
-
01-26-2014, 06:00 PM #12Web Hosting Guru
- Join Date
- Jan 2013
- Location
- Texas
- Posts
- 274
no kidding. i can't believe that all but... one? person here is telling the guy to buy DDoS protection as well..
he stated above it was the first time in five years, and it occurred shortly after switching providers.
and you want him to buy this?
2 Gb/per second 3 million packets per second $500/month
oops, that wouldn't be enough. he'd need this:
4 Gb/per second 6 million packets per second $950 /month
LOL.
google your IP, see if it used to run a minecraft server or something. if you find anything about it, ask them for a different IP
.. and props to 'Ethernet Servers' for telling it how it isLast edited by Zevus; 01-26-2014 at 06:05 PM. Reason: adding name
-
01-27-2014, 08:41 AM #13Server sales professional
- Join Date
- Mar 2010
- Location
- Lithuania
- Posts
- 2,770
Affordable custom Single/DUAL - Intel/AMD CPU servers EU | Configure
Linux, Windows VPS in LT/UK/NL/USA | Get one now
-
01-27-2014, 08:50 AM #14Web Hosting Guru
- Join Date
- Jan 2013
- Location
- Texas
- Posts
- 274
-
01-29-2014, 02:53 AM #15WHT Addict
- Join Date
- Mar 2012
- Posts
- 121
How much money are you loosing from downtime? If money lost > cost of DDoS protection, then you need it.
Like what someone already said here, it could be a one off. You may get them every day for several hours, once per week, once per month of varying strengths or never again. You need to give this time to find out if it is worth the investment into anti-DDoS.
A word of warning: if you're being targeted on purpose, attackers will only use the minimum amount to get you null routed to save resources. They may have 30 Gbps attacks ready and waiting for you. Once you have protection in place for say 3 Gbps, then comes the 5, 10, 15, 20 or 30 Gbps attacks. Make sure you have a scalable (and affordable) DDoS protection service. I am speaking from my own personal experience.
Best of luck!
-
01-29-2014, 03:52 AM #16Web Hosting Master
- Join Date
- May 2013
- Location
- USA
- Posts
- 931
If you just need DDoS protection for a single website, you could also look at solutions provided by Cloudflare which may not require moving elsewhere.
▄▀▄ Brian Harrison, Lead Engineer - Reprise Hosting (AS62838)
▄▀▄ Deals on cheap dedicated server hosting. IPMI included! Unmetered bandwidth.
▄▀▄ Website migration, 24/7/365 support, basic server setup, 15 day money back.
▄▀▄ Looking for DEALS on self-managed cheap VPS hosting? Visit VPSHostingDEAL.com
Similar Threads
-
[DDOS-Attack-Protection.com] DDoS Protected VPS - Bitcoin, WU, Webmoney accepted!
By WooServers in forum VPS Hosting OffersReplies: 0Last Post: 12-17-2013, 01:21 PM -
[DDOS-Attack-Protection.com] 20-100 GBPS DDoS Attack Protected VPS starting $249 / mo
By WooServers in forum VPS Hosting OffersReplies: 0Last Post: 12-09-2013, 08:21 AM -
watch my traffic graph - ddos attack? invisible attack? any ideas?
By joonas in forum Dedicated ServerReplies: 5Last Post: 05-11-2011, 07:01 PM -
LiquidWeb Under Heavy dDos Attack.
By RollingDeep in forum Providers and Network Outages and UpdatesReplies: 20Last Post: 03-30-2006, 10:13 AM -
Bandwidth exceeded - customer claims it's DDOS attack
By IceBlueHost in forum Running a Web Hosting BusinessReplies: 6Last Post: 11-23-2005, 01:17 PM