DDOS Attack,help me

[Danial_Faster]

Hello,
I install mod_evasive, mod_security and CSF firewall but still server under ddos attack with 420 connections.

420 connections in 1 IP .

[sgpokagh]

Try blocking connection to that IP-Address? :confused:
Banned the ip-address would be my only suggestion, at the moment..

[RetroDreams]

What is the IP? Are you sure your site isn't being spidered by Google or Yahoo or another search engine? It isn't uncommon for my site to be crawling with Google spiders like that occasionally.

[gigapros]

Hello,
I install mod_evasive, mod_security and CSF firewall but still server under ddos attack with 420 connections.

420 connections in 1 IP .
That's a DDOS attack for sure.
Run the following 2 commands in your SSH & post the outputs here...

netstat -ant | grep ESTABLISHED | awk '{print $4}' | cut -d. -f1,2,3,4 | cut -d: -f1 | sort | uniq -c | sort -r

netstat -ant | grep SYN | awk '{print $4}' | cut -d. -f1,2,3,4 | cut -d: -f1 | sort | uniq -c | sort -r

[TheDream87]

Hello,
I install mod_evasive, mod_security and CSF firewall but still server under ddos attack with 420 connections.

420 connections in 1 IP .

Yes, the most obvious thing to do will be to block that I.P. address.

[Shazz™]

If it continues with more IP's I would suggest contacting your host.