Thread: Neuro-X 666 - Alpha - [24/7 VPS] - [Spawn - Summoning - PvP]

Originally Posted by Byte Me

I wish I can ddos.

This is only way I know how to ddos

Code:

C:\Users\Jonathan>ping neuro-x.org

Pinging neuro-x.org [199.21.114.72] with 32 bytes of data:

This + 20k comps = troll

Btw gz on serv

You've got some really nice screen shots, they look perfect good job

-----------


My VPS Server is under DDoS Attack, now what?

Why do you suspect that your server is under DDoS attack? One possible sign is that your server is running very sluggish for no apparent reason. Another possible sign is that your server has hundreds upon hundreds of Apache child processes open.

The following is a useful command that you can use to check and see if your server is under DDoS attack:
(Run this command by logging into your server as root)

netstat -anp |grep ‘tcp\|udp’ | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n

The above command will list the top IP’s that are connected to the server. The following is a sample output of the above command:

1 192.168.0.1
1 192.168.02
5 192.168.0.10
8 192.168.0.24
9 192.168.0.25
15 192.168.0.26
25 192.168.0.27
30 192.168.0.29
39 192.168.0.32
100 192.168.0.50
210 192.168.0.55
359 192.168.0.31

In most cases, there is no reason for one individual IP address to be connected to your server 100, 210, or even 359 times! So let’s block these IP’s from accessing your server.

Firewall protection for cPanel Servers
How to Install CSF Firewall- ReadyWire VPS servers come preloaded with CSF Firewall Protection. We LOVE CSF Firewall because you can manage it from within your WHM Control Panel. Just in case CSF Firewall isn’t installed on your machine, click here for click my click instructions.
How to install APF Firewall- ReadyWire recommends this for customers who are comfortable with editing files at the command line (using SSH)

Now that your server has firewall protection, let’s learn bow to block the above IP’s that are connecting to your server more than 100 times.
How to Block an IP using CSF Firewall
Login to WHM using your root password. In the left hand menu pane, scroll down to “ConfigServer Security&Firewall.” A new page will load. Look for the section that reads “Quick Deny.” Enter the first IP that you’d like to block in the text field and click “Quick Deny.” This IP address will be added to the blocked list instantly. If you’re comfortable with the command line interface, you can always enter the command “csf -d 10.10.10.10″ Of course, make sure to replace 10.10.10.10 with the IP address your trying to block.
How to Block an IP using APF Firewall
Blocking an IP with APF Firewall requires you to be logged in to the server via SSH.
1. Go to the path of APF (Typically cd /etc/apf).
2. Edit the file deny_hosts.rules (nano deny_hosts.rules)
3. Add the IP that you’d like to block to the list. Remember to save the file when finished.
4. Reload APF Firewall by typing command apf restart

If you’re still experiencing difficulty after blocking the offending IP’s using a software based firewall application, it might be time to call for help.In my experience, most hosting companies are more than willing to help you get rid of pesky DDoS attacks. However, not all data centers are ready to simply block traffic from flowing through their pipes. It might cost you a few pennies, but consider adding a hardware firewall to the mix. Another thing to try is to install a script that will automagically search for offending IP’s. Click here for an example of such a script.

If you’re a ReadyWire customer and would like some one-on-one assistance, please do not hesitate to open a support ticket by visiting [Only registered and activated users can see links. ]. If you would like to learn how to become a ReadyWire customer, please visit our home page.

Rick Hall
Senior VP of Operations
ReadyWire Multimedia Solutions


Or you could just shut down your servers

Originally Posted by Boss

You've got some really nice screen shots, they look perfect good job

-----------


My VPS Server is under DDoS Attack, now what?

Why do you suspect that your server is under DDoS attack? One possible sign is that your server is running very sluggish for no apparent reason. Another possible sign is that your server has hundreds upon hundreds of Apache child processes open.

The following is a useful command that you can use to check and see if your server is under DDoS attack:
(Run this command by logging into your server as root)

netstat -anp |grep ‘tcp\|udp’ | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n

The above command will list the top IP’s that are connected to the server. The following is a sample output of the above command:

1 192.168.0.1
1 192.168.02
5 192.168.0.10
8 192.168.0.24
9 192.168.0.25
15 192.168.0.26
25 192.168.0.27
30 192.168.0.29
39 192.168.0.32
100 192.168.0.50
210 192.168.0.55
359 192.168.0.31

In most cases, there is no reason for one individual IP address to be connected to your server 100, 210, or even 359 times! So let’s block these IP’s from accessing your server.

Firewall protection for cPanel Servers
How to Install CSF Firewall- ReadyWire VPS servers come preloaded with CSF Firewall Protection. We LOVE CSF Firewall because you can manage it from within your WHM Control Panel. Just in case CSF Firewall isn’t installed on your machine, click here for click my click instructions.
How to install APF Firewall- ReadyWire recommends this for customers who are comfortable with editing files at the command line (using SSH)

Now that your server has firewall protection, let’s learn bow to block the above IP’s that are connecting to your server more than 100 times.
How to Block an IP using CSF Firewall
Login to WHM using your root password. In the left hand menu pane, scroll down to “ConfigServer Security&Firewall.” A new page will load. Look for the section that reads “Quick Deny.” Enter the first IP that you’d like to block in the text field and click “Quick Deny.” This IP address will be added to the blocked list instantly. If you’re comfortable with the command line interface, you can always enter the command “csf -d 10.10.10.10″ Of course, make sure to replace 10.10.10.10 with the IP address your trying to block.
How to Block an IP using APF Firewall
Blocking an IP with APF Firewall requires you to be logged in to the server via SSH.
1. Go to the path of APF (Typically cd /etc/apf).
2. Edit the file deny_hosts.rules (nano deny_hosts.rules)
3. Add the IP that you’d like to block to the list. Remember to save the file when finished.
4. Reload APF Firewall by typing command apf restart

If you’re still experiencing difficulty after blocking the offending IP’s using a software based firewall application, it might be time to call for help.In my experience, most hosting companies are more than willing to help you get rid of pesky DDoS attacks. However, not all data centers are ready to simply block traffic from flowing through their pipes. It might cost you a few pennies, but consider adding a hardware firewall to the mix. Another thing to try is to install a script that will automagically search for offending IP’s. Click here for an example of such a script.

If you’re a ReadyWire customer and would like some one-on-one assistance, please do not hesitate to open a support ticket by visiting [Only registered and activated users can see links. ]. If you would like to learn how to become a ReadyWire customer, please visit our home page.

Rick Hall
Senior VP of Operations
ReadyWire Multimedia Solutions


Or you could just shut down your servers

I know how to setup a firewall and iptables,
However i am unable to access the vps due to the whole Node being attacked,
Once its back i'll be able to sort it out for good.

Even though currently down,
I have a massive pack of updates for my players once back online!

Originally Posted by AverageRS

Btw, 'I could care less' means you do care. I think you meant 'I couldn't care less.' But really. Why the hell do we keep getting DDoSed?

Because the world contains some stupid people.