DDoS attacks are stressing me, how about you?

[LPH]

The last two weeks have been nothing but monitoring, patching, and praying. The spikes come about every 30 minutes with a flood of requests for /wp-login. All IPs but mine are denied access to the file. China and Russian Federation are blocked - which slowed down the attacks for a day or two. Today was a huge one while I was at work.

Is anyone else struggling with DDoS attacks?

Protection: Firewall, CSF, CloudFlare, and Trackment (and little ole me monitoring)

Reality: Down daily ...

 

[Digital Doctor]

Did you follow alot of this stuff ?
http://codex.wordpress.org/Hardening_WordPress
and this
http://perishablepress.com/5g-blacklist-2013/

 

[LPH]

Oh yeah - two weeks ago when it all started

 

[Brent W]

I had a member here DDOS me awhile back. Other than that, been pretty lucky.

 

[LPH]

I had a member here DDOS me awhile back. Other than that, been pretty lucky.

I'll cross my fingers for you. Once they've latched on to thinking they can get to the /wp-login then it's been pretty rough. Luckily XS is installed and the WP accounts are not used. Too bad for the wanna-be hackers

 

[ManagerJosh]

The last two weeks have been nothing but monitoring, patching, and praying. The spikes come about every 30 minutes with a flood of requests for /wp-login. All IPs but mine are denied access to the file. China and Russian Federation are blocked - which slowed down the attacks for a day or two. Today was a huge one while I was at work.

Is anyone else struggling with DDoS attacks?

Protection: Firewall, CSF, CloudFlare, and Trackment (and little ole me monitoring)

Reality: Down daily ...

Are these DDoS attacks or simply login attempts?

 

[rdn]

@Mike Edge handle it for me
Thanks a Lot to him!
I suffered the attack almost 1 week, transferring from different server's.
And ended up on xfhost.net

 

[LPH]

Are these DDoS attacks or simply login attempts?

Technically it appears to be a Brute Force attack - which are distributed - and end up overwhelming the server.

 

[LPH]

@Mike Edge handle it for me
Thanks a Lot to him!
I suffered the attack almost 1 week, transferring from different server's.
And ended up on xfhost.net

Can't - love him and the idea of the service - but - my site has WordPress, XenForo, two MediaWiki and two Moodle installations.

 

[rdn]

Can't - love him and the idea of the service - but - my site has WordPress, XenForo, two MediaWiki and two Moodle installations.

Mine is only a single Xenforo Forum, but with high normal traffic.
I know, Mike can help you.

 

[Mike Edge]

Can't - love him and the idea of the service - but - my site has WordPress, XenForo, two MediaWiki and two Moodle installations.

We host several sites that use WordPress or MediaWiki too.

 

[ManagerJosh]

Technically it appears to be a Brute Force attack - which are distributed - and end up overwhelming the server.

It's well known these attacks are happening daily. Our security firm sees them daily and our incident response team always is pouring over the data of our own site and several client sites. If you want, we can step in and add a few additional layers of security through existing plugins to minimize the chance someone successfully gaining access.

 

[Anthony Parsons]

Don't have such issues... ServInt.

 

[Lawrence]

Don't have such issues... ServInt.

Same here,

 

[rdn]

Don't have such issues... ServInt.

Same here,

On what package?

 

[Anthony Parsons]

I'm on a dedicated... though it wouldn't matter which package with ServInt... it is their setup and monitoring, not the package you go on.

 

[rdn]

I'm on a dedicated... though it wouldn't matter which package with ServInt... it is their setup and monitoring, not the package you go on.

$250+ USD / month ?

 

[Anthony Parsons]

Cost has nothing to do with it...

 

[DRaver]

Use Fail2Ban :
http://blog.thelonepole.com/2013/04/combining-limit-login-attempts-and-fail2ban/

 

[Blair]

The most important factor in mitigating a DDoS is proxying your IP address. Services like Cloudflare and Google Pagespeed Service can do the heavy lifting for you, but if the attacker knows your server's IP, you're on your own. Cloudflare recently posted about this here: http://blog.cloudflare.com/ddos-prevention-protecting-the-origin.

You also can't beat a good host. It takes some expensive hardware, but with a good host you shouldn't even know about a small, <1GPS DDoS. They'll mitigate it before it ever hits your server.