My site is under DDOS attack

So I woke up this morning to an urgent email from my host telling me my site was under a serious DDOS attack and that I need to redirect the domain away from their hosting as it was taking 200 other customers down. Now I am completely stumped as to why anyone would make such an effort to take this site down - it is pretty new, not even ranking at the moment - it receives barely 10 hits per day. Other sites which I have in the same niche and are much more lucrative have been left alone.

So I changed the nameservers on the domain as I wasnt sure what else I could do. Im pretty clueless when it comes to DDOS attacks and all my host can tell me is that it came from multiple IP addresses.

So now I got a website which is parked on another nameserver, a host who doesnt appear to give a damn and some random person who appears to have a grudge against me. I've had better Saturdays lol. Any ideas guys

check ur site pm
I can help you out

change your hosting to bullet proof against ddos

Yes that is probably the best thing - my host have now p***ed me off even more by suspending my account completely along with all my other websites so there is no way they will ever get more business out of me. Papa I cant PM as I dont have enough posts but thanks for your offer

You should check cloudflares free ddos protection

skrode said:

You should check cloudflares free ddos protection

Click to expand...

Cloudfare only works against very very small ddos attacks. If it was a large ddos attack you will need heavy duty protection like what Gigenet offers.

But yeah, if it is a small ddos attack, Cloudfare works ok.

rulez05 said:

change your hosting to bullet proof against ddos

Click to expand...

What is bullet proof? Is it a hosting site or its a name of protection?

queenmery said:

What is bullet proof? Is it a hosting site or its a name of protection?

Click to expand...

It is the name of a type of protection.

But bullet proof hosting has nothing to do with ddos protection. It is for hosting things that most hosts are not ok with.

Are you sure that people from your old hosting company told you the truth?
I don't see any reason why anybody would use their energy/resources/money for that DDOS, especially on a new site.


Btw. thanks to other guys for info about Cloudflare and Gignet.
If you have some other alternatives, please let us know.

First of all your web host is a dick.

If this is the first time that you've suffered a DDOS attack and they're telling you to go away, screw them!

You don't want to be doing business with such assholes anyway.

The second thing is, if it was just a simple attack your host shouldn't have had much of a problem blocking it with a firewall or another method. Can't believe that someone would boot you of their servers for suffering just one attack, if it happened every day i would understand where they're coming from but...

Who were these guys anyway ? please share it so nobody here makes the mistake of using their service.

The only way you could have done something directly would be if you had control of your own equipment - and then you could have filtered the type of traffic at the switch... but even the ISP probably didn't know how to analyze the packets to be able to get a signature on them and block them. You did the best thing you could do which is to either park the domain(s) or redirect them to some cheap hosting that you don't care about. Then you just check the logs on the other server regularly to see when it dies off. DDOSs are very resource heavy obviously so they normally don't last very long. Once it's over, you either point the nameservers back, or in your case, you find a good host to move your sites to.

Unless someone had a real grudge against you, it may well have been a mistake to hit your domain vs someone else's... but in either case, it's best to move on when you can. If one specific domain of yours starts to get regular attacks and isn't making much money anyway, just drop the domain cause it wouldn't be worth the hassle.

Hope things work out for you!

As everyone else says - change host. A smart host has flood protection which will fend off small DDOS attacks. Some of these "attacks" aren't attacks at all (well not grudge attacks) but bots probing vulnerabilities on websites or servers. When I first started managing my own servers I was practically sitting on them like a hen on a nest trying to keep them running from these probe attacks and aggressive bots. I learned and invested in good server security tools, learned server setup and now I rarely have any concerns. These small attacks are stopped in their tracks with flood protection that is automatic. Hit one of my servers 20 times in less than 2 seconds and the IP is banned. If more come or simultaneous attacks they just all get banned in seconds. The servers hardly even see the load as IPs are banned as fast as they start hammering. Sounds like your host doesn't have active flood protection which is crazy not to have today. Even aggressive PCI scanning tools can cripple a server that doesn't run flood protection. Change hosts. Get a larger one (they'll have flood protection and offer better support) and make damn sure they do backups - at least once a week backups.

MaherKing said:

I can't understand why you get ddos when your site is not so popular?

Click to expand...

Possibly someone testing shit out. Could have just been incredibly unlucky.

Hi guys, i am new here but i have some experience with many type of ddos attacks before i moved all my sites to swiss hosting company.

SwissHosters (google it) will help you with that, they really have best ddos protection service.

Hardware strong ddos protection - up to 30Gbps ddos. It's not advertising, it's my own opinion and all my projects hosted there now.

If you're serious i really recommend it. Hope it will helps you.

artificial_genius said:

Cloudfare only works against very very small ddos attacks. If it was a large ddos attack you will need heavy duty protection like what Gigenet offers.

But yeah, if it is a small ddos attack, Cloudfare works ok.

Click to expand...

May I add to this? Iam part of www.hackfourms.net - No, you can't get past Cloudflare. Maybe, yes if you had a EXTREMELY powerfull DDOS/DOS tool. Also, you can easily find the IP address of a site even though its protected by CloudFlare.

We have ddos ready services, we can try to help you, if you still under attack, let me know you can reach me in skype as panamaserver