ddos

Restrict IP's by code in Asp.net MVC

由 笑着哭i 提交于 2019-12-11 03:54:46
问题 My server is under attack a DDoS attack so I want to restrict IP's. I know how to detect DDoS in ASP.NET MVC (in ApplicationBeginRequest method), but is there also a way (in ASP.NET) to apply restriction on NIC, Windows Firewall or IIS? Any ideas? If I can restrict ip's on NIC level by code I will be a very happy person :) 来源： https://stackoverflow.com/questions/14443138/restrict-ips-by-code-in-asp-net-mvc

nginx根据http_user_agent防DDOS

由 爱⌒轻易说出口 提交于 2019-12-11 02:41:18
端squid反向代理到nginx nginx根据http_user_agent防DDOS 首先查看访问日志，找出可疑访问 找到http_user_agent 的特征，然后再作过滤 "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; MyIE 3.01)Cache-Control: no-store, must-revalidate" if ( $http_user_agent ~ must - revalidate ) { return 503 ; } #这样就返回503错误 location = / { include proxy . conf ; if ( $http_user_agent ~ * "MSIE 5.01" ) { proxy_pass http : / / www . qq . com ; #access_log / usr / local / nginx / logs / k . log main ; } proxy_pass http : / / windows . abc . com ; } #判断一下user-agent，如果是MSIE 5.01就把它丢到另外一个地方去就可以了，比如指向www.qq.com，看看能不能抗得住,哈哈 proxy_hide_header Cache-Control;

怎么防御DDOS攻击

由 て烟熏妆下的殇ゞ 提交于 2019-12-10 21:17:35
关于DDOS攻击 分布式拒绝服务(DDoS:Distributed Denial of Service)攻击指借助于客户/服务器技术，将多个计算机联合起来作为攻击平台，对一个或多个目标发动DDoS攻击，从而成倍地提高拒绝服务攻击的威力。 通常，攻击者将攻击程序通过代理程序安装在网络上的各个“肉鸡”上，代理程序收到指令时就发动攻击。 常见的DDoS攻击种类： 网络层攻击：比较典型的攻击类型是UDP反射攻击，例如：NTP Flood攻击，这类攻击主要利用大流量拥塞被攻击者的网络带宽，导致被攻击者的业务无法正常响应客户访问。 传输层攻击：比较典型的攻击类型包括SYN Flood攻击、连接数攻击等，这类攻击通过占用服务器的连接池资源从而达到拒绝服务的目的。 会话层攻击：比较典型的攻击类型是SSL连接攻击，这类攻击占用服务器的SSL会话资源从而达到拒绝服务的目的。 应用层攻击：比较典型的攻击类型包括DNS flood攻击、HTTP flood攻击、游戏假人攻击等，这类攻击占用服务器的应用处理资源极大的消耗服务器处理性能从而达到拒绝服务的目的。 DDOS攻击应对策略 这里天下数据分享一些在一定程度范围内，能够应对缓解DDOS攻击的策略方法，以供大家借鉴。 一、确保服务器系统安全 1、确保服务器的系统文件是最新的版本,并及时更新系统补丁。 2、管理员需对所有主机进行检查，知道访问者的来源。 3

Restrict access to public service many times

由 坚强是说给别人听的谎言 提交于 2019-12-10 18:46:06
问题 I have such situation. Imagine there is a public REST service. What we don't want, is for someone, to be able to access this service many times in short period of time, because they will be able to block our database (essentially a DDOS attack, I presume?). Is there a way to effectively protect against this type of attack? Technology we use is Spring/Spring Security. 回答1: If you are using Spring Boot There is a fairly new opensource project which handles this: https://github.com/weddini

PHP, .htaccess, DDoS & speedy request protection

由 元气小坏坏 提交于 2019-12-10 17:17:02
问题 I have a question, i built this little script to check if a certain ip is flooding my website. When it does, i deny the ip in the .htaccess file. My question is, can somebody tell me if this script is completely useless or worth trying... The script is called in the config file therefore it runs on every pageload. <?php #get the visitor ip $ip = $_SERVER["REMOTE_ADDR"]; #start the session @session_start(); #check if the ip is banned if( $_SESSION['~b'] ){ #check if we can open htaccess $fp =

DDOS Attack causing Database connection error [closed]

由 时光毁灭记忆、已成空白 提交于 2019-12-10 12:32:56
问题 Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it's on-topic for Stack Overflow. Closed 2 years ago . I have hosted my Prestashop at Fastdomain server it's like the 4th year, the website is stable and working fine till 3 days ago where my email inbox got full of spam and more than 300K requests on the site causing the site to go down. I activated the basic protection from Sitelock provided from Fastdomain Cpanel

服务器怎么防御DDOS攻击

由 旧巷老猫 提交于 2019-12-10 05:35:06
关于DDOS攻击 分布式拒绝服务(DDoS:Distributed Denial of Service)攻击指借助于客户/服务器技术，将多个计算机联合起来作为攻击平台，对一个或多个目标发动DDoS攻击，从而成倍地提高拒绝服务攻击的威力。 通常，攻击者将攻击程序通过代理程序安装在网络上的各个“肉鸡”上，代理程序收到指令时就发动攻击。 常见的DDoS攻击种类： 网络层攻击：比较典型的攻击类型是UDP反射攻击，例如：NTP Flood攻击，这类攻击主要利用大流量拥塞被攻击者的网络带宽，导致被攻击者的业务无法正常响应客户访问。 传输层攻击：比较典型的攻击类型包括SYN Flood攻击、连接数攻击等，这类攻击通过占用服务器的连接池资源从而达到拒绝服务的目的。 会话层攻击：比较典型的攻击类型是SSL连接攻击，这类攻击占用服务器的SSL会话资源从而达到拒绝服务的目的。 应用层攻击：比较典型的攻击类型包括DNS flood攻击、HTTP flood攻击、游戏假人攻击等，这类攻击占用服务器的应用处理资源极大的消耗服务器处理性能从而达到拒绝服务的目的。 DDOS攻击应对策略 这里天下数据分享一些在一定程度范围内，能够应对缓解DDOS攻击的策略方法，以供大家借鉴。 一、确保服务器系统安全 1、确保服务器的系统文件是最新的版本,并及时更新系统补丁。 2、管理员需对所有主机进行检查，知道访问者的来源。 3

readuce DDOS attacks

由 ♀尐吖头ヾ 提交于 2019-12-10 04:18:53
Distributed denial of service (DDoS) attacks are sometimes used by malicious actors in an attempt to flood a network, system, or application with more traffic, connections, or requests than it can handle. Not surprisingly, customers often ask us how we can help them protect their applications against these types of attacks. To help you optimize for availability, AWS provides best practices that allow you to use the scale of AWS to build a DDoS-resilient architecture. These best practices are discussed in depth in the whitepaper, AWS Best Practices for DDoS Resiliency , which also includes

Can't Access Plesk Admin Because Of DOS Attack, Block IP Address Through SSH?

由 ￣綄美尐妖づ 提交于 2019-12-07 05:00:48
问题 I can't access Plesk Amdin because of DOS attack; can I block a hostname or IP address through SSH? If so, how would I be able to do this? Thank you! 回答1: If you have iptables you can block it using simple rule: iptables -I INPUT --source 1.2.3.4 -j DROP This rule drops packets coming from IP 1.2.3.4. 回答2: Probably the easiest is to SSH to your box use vim to and add the following to the top of your .htaccess file in the root of your domain ( /var/www/vhosts/yourdomain.com/httpdocs/.htaccess

Some way to prevent DDos/Dos attacking to Web Service on AWS [closed]

由 若如初见. 提交于 2019-12-06 16:26:51
问题 Closed . This question needs to be more focused. It is not currently accepting answers. Want to improve this question? Update the question so it focuses on one problem only by editing this post. Closed 2 years ago . I want to deploy my ASP.NET web service with EC2 on AWS. Is there any way to prevent DDos attacking? 回答1: There are several dedicated DDOS prevention services out there. I would start with CloudFlare + Dome9 combination - both services have a free tier. Cloudflare will act as the
订阅 ddos