I'm under Mega-DDOS attack, site is down 98% of the time

[zeus]

I have my server people looking at it, they say I should contat a managment company which I also have done, they are also working on, but still 10 min after reboot, the sites are down, the whole day yesterday and now today again, Im SO pist on this

[Marcia]

Can you identify the IP numbers it's coming off? It's happened with one of the hosts I use a couple of times, and the tech people deal with it by IP, is what I've been told.

[zeus]

I think they know wich IP they attack, but serious this is hard for the nervs.

Now I had another company to look at the server, here is the last responce:

Your server is still being ddos heavily and software base mitigation is
not enough. I suggest that you get a hardware ddos or transfer to a
capable DC. We will just refund your payment if you are not satisfied.
Thanks.

[zeus]

damn they are giving up on me here

[Marcia]

>>damn they are giving up on me here

I'm sorry I can't tell you anything to help, I wish I could. But I can empathize, which I really do. Are you on a dedicated server? And is it by any chance Cpanel?

Do you have your sites all backed up locally, BTW?

[zeus]

dedicated server, PLESK and yes backup is there, but up to date, thanks for your words

[zeus]

Now they have blocked 2 IP address, the site are then back online, I HATE PERU now

[zeus]

damn i still get hit from Ddos attack, I dont get it, i block 1 IP after the other, most are from :

RIPE Network Coordination Centre.
Asia Pacific Network Information Centre.
Latin American and Caribbean IP address Regional Registry.

It gets on my nervs, issent there anything one can do, maybe change my IP address which is hit

[jdMorgan]

If this is a true DDOS --and it sounds like it is-- then you are doing the right thing. The most effective solutions are outside the server, using hardware firewalls and the software firewall of the operating system.

If your site gets little genuine traffic from certain areas of the world, then consider asking your host to temporarily block very large IP address ranges at the firewall. That is, instead of blocking 192.1.23.4, block 192.0.0.0 through 192.255.255.255 until the DDOS subsides. Hopefully, your host is already working with other hosting providers and ISPs to locate the source of the attack and identify the perpetrators. It is in their best interest to shut these botnets down, not just to protect your site, but to conserve their own bandwidth for their other customers.

Jim

[zeus]

Thanks Jim

Its hard when you have worked 5-6 years on your sites and then you have such a Ddos attack. I also see my stats/money wise is down even if the server has been up now for 3 hours, Im not sure why, i dont like that.

ohh one more thing, as said Im No Server dude, but the hosting has made this change also

MaxClients to 1500 and reduced MaxRequestsPerChild to 1

but what does this means MaxRequestsPerChild to 1

[bcolflesh]

[httpd.apache.org...]