How to save my website from DDOS attacks.

  • Thread starter Thread starter Deleted member 1362253
  • Start date Start date
Advertise on BHW
It bypassed Cloudflare. What's next ?
 
theconverselad said:
It bypassed Cloudflare. What's next ?
Click to expand...
First, try to find out if the attacker is directly attacking your domain or server/hosting ip?

If they have your server ip and directly attacking it, then ask your service provider to mitigate it if they have any solution in placed.

But I'm still not sure how they can even bypass Cloudflare. Have you tried turning on "I am under attack" option in cloudflare settings?
 
If they are bypassing cloudflare then your host can help you mitigate, or change ips. How do you know it's a ddos attack?
 
M
SepticFish said:
If they are bypassing cloudflare then your host can help you mitigate, or change ips. How do you know it's a ddos attack?
Click to expand...
y google analytics shows 30000 clicks in 10 minutes which is usually 100 users in 24 hours, plus after this surge in traffic, my websites is inaccessible for 2-3 hours!
 
If google analytics is detecting the clicks then it's likely based on your domain. If you have cloudflare on, turn on active ddos protection. I think it is labelled something like "I am under attack". Use analytics to see if the clicks are decreasing to see if it is effective.
 
theconverselad said:
It bypassed Cloudflare. What's next ?
Click to expand...
You got your own server? or using a web hosting company?
Your traffic needs to be passed ONLY through Cloudflare. If they have direct access to your HTTP/HTTPS service, port 80/443 or main IP they can still perform the attack no matter you have activated Cloudflare or not. Also you need to hide the main server IP and close all unnecessary ports and unprotected URLS. They can even attack on your Cpanel URL and ports. All of these can be protected in firewall and depends on your server configuration.
 
turn on Cloudflare "I am under DDOS attack" then you will be fine.
 
dubeani said:
Try to purchase ddos protect for your domain, it usually cost below $5 to protect t your domain and hosting from attack.
Click to expand...
Lol, If the attacker is serious it won't work. trust me! He needs advanced server configuration or a protected hosting company which is costly.
 
I have been attacked today again. My website is down after the attack and shows this error :-

rate limited error 1200. Cloudflare is shit. I guess i need some strong VPS to host my website, digital ocean ain't doing anything.
 
Increase bandwidth
Leverage a CDN Solution, or even better Multi CDN
Implement server-level DDoS protection
Remind yourself that you’re never ‘too small’ to be DDoS’ed, Switch to a hybrid or cloud-based solution, Bullet-proof your network hardware configurations
 
First of, change the server ip because they already know it. Having cloudflare won’t help.
After that enable cloudflare under attack mode, and make sure you have no trace of your original ip anywhere (could be as simple as a non cloudflared sub domain that you forgot to remove).

There is a script called cloudfail in github. Run your domain through that script and check for any kind of vulnerability you may have.

If you do these correctly, the ddos problem will be mitigated.
 
Does your site still go down with "Under Attack" mode enabled?

If you're using Cloudflare then you should install a firewall only allowing CF to access ports 80/443 their IPs are listed at https://www.cloudflare.com/en-gb/ips/

If Under Attack mode stops it then you either need to manually enable that every time or have a script running linked to their API something like https://github.com/guided-hacking/cfautouam
 
VPS or shared web hosting?

If it's a shared package, hosting on a world known company like namecheap can solve your issue, they will deal with the DDoS.

if it's a VPS, see if your provider can set up DDoS protection to absorb it. Vultr has one for $10 / month for example.
 
Hackers mainly use sqli dumpers , sites with bad hosting and used as injectable and then hacked .
 
Enable cloudflare under attack mode setting and leave it for a few days.
It should gradually reduce after few days.
And maybe you will need to change hosting Ip or even your hosting server.
 
theconverselad said:
M

y google analytics shows 30000 clicks in 10 minutes which is usually 100 users in 24 hours, plus after this surge in traffic, my websites is inaccessible for 2-3 hours!
Click to expand...
Your case sounds like an advanced botnet originated DDoS attack which are capable of bypassing most Javascript challenges and Captchas. Cloudflare isn’t very effective against this type of attack (at least on the free tier) as these bots completely mimic a real browser and bypass detection. I guess you’ll see the same traffic volume in your Cloudflare dashboard as well just like Google analytics . So I would say get in touch with cloudflare support to see if they can do something or find another DDoS mitigation service. Saw someone mentioning ddos-guard. That’s where I would go.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top