Results 1 to 4 of 4
-
03-01-2012, 11:06 AM #1Junior Guru Wannabe
- Join Date
- Mar 2012
- Posts
- 35
Accessing a server during a DDoS attack
Hi,
I was wondering if anyone knew of any way to access a server while its being DDoS'd. I know about KVM's and such but would SSH still work? I just need to be able to access it to find out the IP being attacked.
-
03-01-2012, 11:14 AM #2Web Hosting Evangelist
- Join Date
- Feb 2012
- Location
- Europe
- Posts
- 453
It depends on the attack type.
If it's targetted at specific services (like your httpd) then it's likely that you'll be able to get in.
If it's a larger attack or targetted at taking the entire server offline, you probably won't be able to get in. KVM may not work either.
You'd probably be best asking your host to nullroute the IP being attacked (they'd be able to tell you which IP is the target too), although if it's something like a smart HTTP flood then they probably wouldn't be able to tell which IP is the target (or even that an attack is going on).
-
03-01-2012, 12:01 PM #3WHT Addict
- Join Date
- Dec 2011
- Posts
- 169
If you use a single uplink and the entire line is saturated you might be out of luck. Normally you'd use KVM or ask your provider to log in to the box on site and check if they can find the source IP.
Mail: sales@i3d.net - Interactive 3D - 100TB PROMOS! Dell Intel Xeon E3 servers - Dedicated Servers, Colocation, Gaming, IP Connectivity.
36,000 sq ft datacenter, 8500 servers, 623 gbit network on AMS-IX, LINX, DECIX, PLIX, BBIX, TPIX, PTT-SP, IX Australia NSW, Level3, NTT, Cogent, NL-IX, DTAG.
-
03-01-2012, 12:02 PM #4CISSP-ISSMP, CISA
- Join Date
- Aug 2002
- Location
- Seattle
- Posts
- 5,525
If the server is not responding from a DDoS, it is necessary to either filter the attack or null route the destination IP. Once that is completed, it may also be necessary to reboot the server as it may have froze due to a depletion of resources. If the IP is null routed as the form of resolution, you will only be able to access the server through another IP, sideband, or KVM.
Similar Threads
-
DDos attack from my server to others
By police_3001 in forum Hosting Security and TechnologyReplies: 17Last Post: 11-02-2011, 03:12 AM -
Is my server under DDOS attack?
By Boinkys in forum Hosting Security and TechnologyReplies: 6Last Post: 05-26-2010, 03:43 PM -
how can i know if my server get ddos attack ?
By ttgt in forum Hosting Security and TechnologyReplies: 11Last Post: 02-19-2010, 02:27 AM -
is my server under DDOs attack , please help me .
By ibvb in forum Hosting Security and TechnologyReplies: 5Last Post: 02-05-2008, 11:46 AM -
DDos attack on server
By dg151 in forum Hosting Security and TechnologyReplies: 6Last Post: 12-17-2004, 10:20 PM