DDOS attack

feysal said:

Well. After being on Vultr for a few days. I cannot see the attack anymore. So the probelm is not from any plugin or script from my wordpress. I hope the problem will no longer appear.

Click to expand...

Nice!great to you sir. I want to try Vultr to for cover my site from DDos Attack. but they only give us maximum 3 ip total in server

A7strohhut said:

It's so easy to bypass cloudflare and get the ip. Takes less than 30 seconds. There are even websites that do this work for you so cloudflare does not "hide" your ip to a hacker.. only to people like you it seems to be hidden

Click to expand...

Yes but its in past. Now you cannot get real ip from a cloudflared server. What you said was 3.4 years ago. We are talking about biggest ddos protection company.

If you want to hide your IP then the best solution is a reverse proxy. Check blazingfast they provide this.

meannn said:

Yes but its in past. Now you cannot get real ip from a cloudflared server. What you said was 3.4 years ago. We are talking about biggest ddos protection company.

Click to expand...

i would be rathee uzing vultr including anti ddos attack than using cloudflare. Expansive.hahaha

If they know your real ip, then they will attack directly to your server. So cloudflare and the others will not help much. Because they only for ddos attack layer 7.

So the solution is:
1. Change your public IP.
2. Install fail2ban because this will help for ddos layer 4 attack.
3. Install SSL in your server.
4. Close all port and open only needed port in your firewall server.
5. Make sure your web server is using NGINX
6. Make sure your database server separated with your web server.
7. Rate limit request to server with redis cache.

Actualy there is a lot, but I can not explain detail because you dont write what have you done for security and what is spesification server you are using.