What are the sympoms of a DDOS?

Discussion in 'Domains, Hosting and Servers' started by Abomination, Jan 28, 2010.

  1. Abomination

    Abomination Zealot

    1,514
    102
    458
    I've got about 50 visitors from the same IP which resolves to this:
    ip70-173-52-124.lv.lv.cox.net


    Is this considered a micro-ddos? :confused:


    In a ddos is there thousands from the same IP?




    Feel free to put this thread where ever you want too Nick : )
     
  2. MjrNuT

    MjrNuT Grand Master

    579
    36
    104
  3. Nick

    Nick Regular Member

    7,441
    218
    458
    Moved to Servers and Hosting. ;)
     
  4. kev

    kev Regular Member

    1,224
    61
    434
    Looks like you need Ddos deflate installed. Once an ip address makes more then X number of connections, its added to the host.deny file for X amount of time.

    X - is a variable that you can set.
     
  5. SimpleMan

    SimpleMan Adept

    112
    28
    104
    Eh, one IP isn't much, even with 50 connections. You could term it a DOS, but it's pretty easy to stop. Use iptables or your server's firewall just to block the IP.

    A DDOS attack is much larger - you pretty much know when you have a DDOS attack. Many years ago a hosting company that I worked for had one, the DC literally had to pull the plug because the attack was so massive and much of the current technology was not available yet. I'd say the difference between a DOS and DDOS is in the first "D" - which stands for distributed. a DDOS will come from multiple places (multiple IPs).
     
    2 people like this.
  6. kev

    kev Regular Member

    1,224
    61
    434
    If they had ddos deflate installed, it would be automatic. That way they would not have to worry about doing it manually.

    And it even works when your not at home, alseep, driving your car, watching a movie,,,,,
     
    2 people like this.
  7. MrChris

    MrChris Regular Member

    16
    1
    37
    Lets break down what a ddos is there are few different types of ddos attacks there are ones that are done by php shells wish our php scripts and then we have botnet attacks are the worst... which are actual computers that are infected with this virus which they can control the computer as well.. which could make the traffic look more legit ... I am no pro this is just something I read up on I hope it helps .. If you need a recommended place if you are under heavy ddos attacks just pm me I'd be happy to give you few links
     

Share This Page