NEED HELP with Bandwidth Attack - Bandwidth Raping

Discussion in 'Site & Server Administration' started by IndieRetailer, Dec 6, 2008.

  1. #1
    One of my sites is under attack. I don't know why or who, but they're using several machines and IPs to send gigabytes of traffic to my site and it's killing my bandwidth. My service provider is nice enough to furnish me with more bandwidth to try and keep the site running, but whoever is doing this is increasing their efforts to kill my site.

    Has ANYONE had any experience with a bandwidth attack, either getting or giving, and can give me any advice on how to thwart or stop it??? Things are getting desperate and will likely kill our business if it's not stopped.

    Thank you.
     
    IndieRetailer, Dec 6, 2008 IP
  2. zeromaster

    zeromaster Peon

    Messages:
    38
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #2
    How about a new dedicated ip have them have the datacenter null the old one
    Question is now is it the site being attacked or the ip itself
    is this a dedicated server or a rented hosting account in most instances datacenters will null attacked ip's anyway until attacks stop and ive never had a datacenter give me any problems about them contacting the isp of the offender to get it stopped now if its an attack coming from mulitiple sources your most likely gonna have to move it to another ip
    Someone along in the chain of things isnt doing what they need to be doing
     
    zeromaster, Dec 7, 2008 IP
  3. IndieRetailer

    IndieRetailer Peon

    Messages:
    214
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    0
    #3
    The IP wouldn't/doesn't matter if they're hitting the domain. No matter what the IP changes to, as long as they send traffic to the domain, it's going to slam the server. And they're doing it from several IPs, so once we block one, they'll pop up with another.
     
    IndieRetailer, Dec 7, 2008 IP
  4. status2k

    status2k Peon

    Messages:
    6
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Is it some kind of bot attacking you, can you trace perhaps 1 ip address and give some details of the kind of data it's fetching.

    i.e.

    is it a straight forward attack to yourdomain.com or sub-pages yourdomain.com/page1/...
     
    status2k, Dec 8, 2008 IP
  5. Mxhub

    Mxhub Active Member

    Messages:
    474
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    55
    #5
    sound like DDOS attack.. you can get your server provider to block their IP.
     
    Mxhub, Dec 13, 2008 IP
  6. IndieRetailer

    IndieRetailer Peon

    Messages:
    214
    Likes Received:
    9
    Best Answers:
    0
    Trophy Points:
    0
    #6
    I think you may have overlooked a portion of my first post. There are dozens of IPs being used. When identified ones are blocked, new ones sprout up. I moved it to a new host and they seem to be managing it, but they are dedicating a LOT of effort to it. Fortunately, it seems they are very capable of keeping it from shutting us down, but we're still looking for a solution and perhaps even a way to find it's source.
     
    IndieRetailer, Dec 13, 2008 IP