ddos attack post requests

Portal Home > Knowledgebase > Articles Database > ddos attack post requests

Posted by about:, 09-09-2013, 10:40 AM
On one of my shared hosting servers, one of my customers is getting hit by a ddos attack. It is on the front page of the domain, and it is post requests. All ips are different. User agent is also identically. It is 500 to 1000 requests each minute. Here is one of them from apache usage log: 67.53.106.118 - - [09/Sep/2013:00:12:15 +0200] "POST / HTTP/1.1" 301 320 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" Is there any way to mitigate/stop this? Here is a user with same problem, and same type of attack: http://serverfault.com/questions/433...of-ddos-attack And here is somone discussing to block the same user agent that is used in the attack on my server: http://www.webmasterworld.com/search...rs/4058096.htm Please advice ...
Posted by about:, 09-09-2013, 10:55 AM
More information: The server is running apache 2.4.6, php 5.4.19 and centos 6.4. Is it possible to block this attack on user agent in httpd.conf, without blocking legitimate visitors?
Posted by Nemke, 09-09-2013, 01:23 PM
it depends how many legit users you have that are still using IE 6? If you can live without them, take a look at this thread http://www.webhostingtalk.com/showth...1291234&page=3
Posted by matasak, 09-09-2013, 02:25 PM
Use the cloud to prevent ddos Password FAQ. Safer that way now.
Posted by Toby Crabtree, 09-10-2013, 01:10 AM
Its better to hire a DDoS Specialist or Company to prevent the large DDoS attacks. The organizations have large infrastructures and technologies to help keep your website online.
Posted by DeltaAnime, 09-10-2013, 01:31 AM
What? Cloud doesn't suddenly make people DDOS proof. If you have the budget Staminus handles HTTP floods really well. If you can't do that you can probably use NGINX or as someone else said, block IE6 if it's making up all of the useragents. Francisco
Posted by toro, 09-16-2013, 01:05 AM
Nginx is great! Most of the budget cdn providers these days use Nginx as far as I can tell. It can perform up to about 100,000 PPS with little modification. That's just awesome