0

Possible Duplicate:
How can a Software application defend against DoS or DDoS?
Accessing a site (which is) under a DDoS

Null-routed IP 85.17.154.139 8/5/12 In progress 13Gb ddos

They did not provide me any more data so far. What I can do in order to prevent further attacks? Actually right now I am clueless and still not able to reach my server. Waiting for them to give me another IP

Community
  • 1
MonsterMMORPG
  • 111
  • 5
  • Duplicate of [How can a Software application defend against DoS or DDoS?](http://security.stackexchange.com/questions/241/how-can-a-software-application-defend-against-dos-or-ddos) and [Accessing a site which is under DDoS?](http://security.stackexchange.com/questions/6666/accessing-a-site-which-is-under-a-ddos?rq=1) – Polynomial Aug 06 '12 at 06:03
  • 4
    You should contact your hosting provider and gather more information. First of all you need to understand whether you are the target or a source/reflector of the flooding. – Hendrik Brummermann Aug 06 '12 at 09:44
  • You need to trace the guys up and stop it at the source, at this level it is very close to you. – Andrew Smith Aug 06 '12 at 20:18
  • well i contacted leaseweb so many times. they said ips are fake. so there seems like nothing i can do. it happened 2 times in last 2 days. i just coded a software which will check server status and if unavailable null route ip via api. at least it will make my account safe. – MonsterMMORPG Aug 07 '12 at 12:07

1 Answers1

4

With rare exception when it comes to a ddos there isn't much that can be done from the attacked computer / network. Once the connection attempt has made it to anything you control the attack has already done its damage. You basically need to wait on your ISP to handle the problem and provide them with whatever assistance they ask for.

EDIT: As pointed out in the duplicate question this only applies to level 4 style DDOS attacks. There are a few options to shorten response windows which can help with level 7 attacks.

Tim Brigham
  • 3,762
  • 3
  • 29
  • 35