Thread: DDoS safe/proteccted hosting...

Hi,

I´m being heldd "hostage" by someone through a DDoS attack... They sent me an email telling me I had to deliver 100,000 hits per day to their site or else they would DDoS me

Even though 100k per day wouldn´t be a problem I sure didn´t go for that option... so for the past month I´ve been moving in and out of hostings trying to "survive" long enough for this guy to move on and leave me alone (hopefully)

BUT - since he´s attacking 2 of my primary domains I´d sure like to get some info on how to protect (if possible) against these attacks - are there ever such a thing as a "DDoS safe hosting"?

If I sign up for an "unlimited bandidth" plan they shut me down for "apache violation" or something else - cause during these attacks my site is hit by MASSIVE aamounts of incoming requests.

My business is not that big - so if DDoS protection is as expeensive as I´ve heard I guess it´s out of limits for me - but my domain is finally climbing in SE´s and I´d hate to have to abbandon my domain over this.

Any ideas?

/Peter

Wow, I can't believe someone would that, that's awful, I hope someone here has some advice about what you can do.

Originally Posted by axelmossendotcom

Hi,

I´m being heldd "hostage" by someone through a DDoS attack... They sent me an email telling me I had to deliver 100,000 hits per day to their site or else they would DDoS me

Even though 100k per day wouldn´t be a problem I sure didn´t go for that option... so for the past month I´ve been moving in and out of hostings trying to "survive" long enough for this guy to move on and leave me alone (hopefully)

BUT - since he´s attacking 2 of my primary domains I´d sure like to get some info on how to protect (if possible) against these attacks - are there ever such a thing as a "DDoS safe hosting"?

If I sign up for an "unlimited bandidth" plan they shut me down for "apache violation" or something else - cause during these attacks my site is hit by MASSIVE aamounts of incoming requests.

My business is not that big - so if DDoS protection is as expeensive as I´ve heard I guess it´s out of limits for me - but my domain is finally climbing in SE´s and I´d hate to have to abbandon my domain over this.

Any ideas?

/Peter

Moving from host to host wont rid you of the problem.

The best advice is to go with a reputable host (someone who is big) and wait it out. People who DDoS are after something like any other cyberbully. They want to intimidate and place your into a state of fear. Yes, as a webhost who is trying to make something, it's not nice and it affects you just like if a hacker had went into your site and messed it up.

A DDoS attack wont affect your bandwidth, as you think it would. What the person is doing is just sending requests (so many in fact the server can't keep up and boom, site down).....

Two options I can think of:

(a) You could hook/line&Sinker the DDoS'er... ie: trick him into thinking he has won (but this is a very costly move and could drive traffic away from your site.

(b) Wait it out.. people like this get bored very quickly and move on to other targets.

---- oh and if they sent you an email making threats.. why not just forward that email to their host provider.

Basic protection is free

Originally Posted by mosOd

DDOS protection is really an expensive thingy, and I know lots of hosts think that a good site won't be attacked.

Yeah, I get that a lot... I´m not sure if I can post my site URL here, but it´s just a normal site selling expired domain name traffic - thus this guy feels he could profit from forcing me to direct the traffic to him.

I guess it´s possible he could be an old client of mine (a not so happy one that is), cause he attacks my primary site as well as the domain where I host the campaign-stats script.

Question for GRIM - what free basic protection are you referring to? As you understand I am VERY interrested in anything that could help here.

Comment to classact:
Yeah, I know moving from host to host doesn´r really help - except that it helps me stay online... last host kept me online for a week - but I understand this is not a very nice thing to bring onto a hosting provider either, so I allways make sure I am on dedicated servers so at least I won´t crash servers for others... getting expensive though, but this business is what I make a living from so I need to stay online.

Waiting it out is what I´m trying right now - it´s been a month so far - maybe the attack fluctuates some cause sometime it seems to be cool for about a week or so.

/Peter

A good firewall combo almost always comes with basic ddos protection.

Originally Posted by GRIM

A good firewall combo almost always comes with basic ddos protection.

Hi,

Thanks for the info GRIM!

I am however a bit surprised that none of the hosts I´ve tried so far uses such an easy protection... if it´s really that simple. My original host used a cisco switch to deflect the attack and managed to keep me online for about 4-5 days. I had been their client for many years and I got the impression they tried their best to keep me on board - but after about a week they had to tell me to leave cause according to them it would cost them thousands of dollars each month to get the protection needed.

Also, previously in this thread CLASSACT suggested getting the DDoS guy suspended by his email service provicer - yeah - we tried that - the treats was made from a gmail (google) account and they are less than cooperative... we never heard back from them.

Obviously this is also reported to the police in the US, but I doubt they put any effort into stuff like this.

/Peter

I've been going through something very similar and sad to say that even on a dedicated server with HostGator, I can't get basic ddos protection. They claim it comes with it, but I've still been attacked multiple times. I'm going to have to pay for someone to install the proper protection I need. Its sad how people have "fun" taking sites down.

Basic protection will not more than likely protect you from a mass scale attack.