1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Any free solution for DDoS attacks?

Discussion in 'BlackHat Lounge' started by SilverKnight, Jan 21, 2015.

  1. SilverKnight

    SilverKnight Power Member

    Joined:
    May 31, 2011
    Messages:
    623
    Likes Received:
    58
    I know about Cloudflare.. but haven't used them yet. Is their Free plan good enough?

    DDoS attacks are done on the IP, right? If I get a new server IP and put up Cloudflare, no one will be able to find out the server IP then, correct? Will that solve the DDOS attack problem?
     
  2. reoman

    reoman Junior Member

    Joined:
    Sep 13, 2013
    Messages:
    139
    Likes Received:
    142
    Location:
    703
    No there free plan is not good enough, nor is the $20 option for most attacks. They will kick you off if you are being attacked on those plans.

    And yes that is the idea, new IP and hide behind a proxy. Make sure you have your email address hidden behind the network, even with cloudflare the attacker can find your ip through your email. Which is why you see a lot of sites prone to attacks using gmail/yahoo etc, or third party contact forms.

    Unfortunately I do not know any good free options, I would check with hosts, I know some offer < 5gbps protection included if you host with them (Hostdime). Also block countries which you don't need accessing your site. BRIC are the first countries I block, especially China and Russia. If you do decide to pay, Cloudflare is probably the cheapest ($200/mo), Incapsula is good too $300/mo.

    Good luck
     
    • Thanks Thanks x 1
  3. TeKn1qu3z

    TeKn1qu3z Jr. VIP Jr. VIP Premium Member

    Joined:
    Jul 26, 2012
    Messages:
    916
    Likes Received:
    231
    Occupation:
    Amazon FBA Guru
    Location:
    The Office
    Cloudflare can help a little bit. Just talk to your server host, they should be able to provide you with the best solution.
     
  4. rodvan

    rodvan Jr. VIP Jr. VIP

    Joined:
    Jul 27, 2010
    Messages:
    1,321
    Likes Received:
    505
    Occupation:
    developer, marketing, automation, machine learning
    Location:
    Wizard of Bots
    Home Page:
    Sometimes server hosts dont have the proper infrastructure to support that and mitigate attacks.
    So far Ive found that Cloudflare will help a little bit, also a CDN and Load balancers. Hosts can offer you that, like WPEngine and most of the managed VPS.
     
  5. magnus99

    magnus99 Junior Member

    Joined:
    Sep 17, 2013
    Messages:
    136
    Likes Received:
    20
    You wanna make sure you have AUP turned on to avoid getting blasted with a layer 7 attack.
     
  6. nanexo

    nanexo BANNED BANNED

    Joined:
    Feb 14, 2010
    Messages:
    873
    Likes Received:
    188
    not necessarily on the ip
    also cloudflare is not that effective - also wpengine will boot you straight off if you get attacked with a medium gbps level attack

    you can do ddos attacks on website resources loading them on and offand pulling mysql resources such as amplification attacks as well as others attacking vulnerabilities so nomatter if the ip is hidden you can still make the site go down
    also there are many new zero day type of attacks which can be highly targeted to your setups vulnerabilities
     
  7. Trending

    Trending BANNED BANNED

    Joined:
    Nov 26, 2015
    Messages:
    76
    Likes Received:
    13
    Cloudflare is pretty effective.
     
  8. akssiv2007

    akssiv2007 Senior Member

    Joined:
    Jul 11, 2013
    Messages:
    1,009
    Likes Received:
    242
    Gender:
    Male
    Occupation:
    Webber
    Location:
    Earth
    The Cloudflare free plan should help you.
     
  9. RuthSam

    RuthSam Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 19, 2010
    Messages:
    3,814
    Likes Received:
    979
    Gender:
    Male
    Home Page:
    So what solutions are there if you are not able to spend $200 or $300 / month? None?
     
  10. lancis

    lancis Elite Member

    Joined:
    Jul 31, 2010
    Messages:
    1,683
    Likes Received:
    2,427
    Occupation:
    Entrepreneur
    Location:
    Milky Way
    Home Page:
    That depends on the type of the DDoS attack.

    In many cases the solution is as easy as blocking the IP range of the attacker in the firewall. In my experience people often use Amazon AWS instances to DDoS you, so blocking the IP range of Amazon AWS solves the problem instantly.
     
  11. Tozzy

    Tozzy Jr. VIP Jr. VIP

    Joined:
    Nov 26, 2015
    Messages:
    420
    Likes Received:
    122
    Gender:
    Male
    Location:
    World
    Home Page:
    I don't think any free DDoS protection does exist.
    Yes, I'd say none, unless you're dealing with an attack ran by schoolboys. In that case, you can handle it yourself as Lancis suggests, by blocking IP ranges. And if you're under a heavy attack than your website should earn you considerable money as such attacks are usually performed by competitors and do cost them a lot as well.