Skip to main content

Please help, I'm receiving DDoS attacks

If you're able to utilize your control panel to manage your service or connect via SSH, it's possible that you're not experiencing a DDoS attack.

Standard DDoS Protection is included by default in most of our services:

  • There's no need for you to take any action to enjoy its benefits.
  • It's automatically enabled at no extra cost.
  • It is designed to recognize 99% of all attack patterns.

However, please note, our Standard DDoS Protection may not mitigate certain DDoS attacks due to their unique patterns, such as those simulating legitimate web traffic to ports 80 or 443.

Are you using a managed service?

If you are, and whether you're experiencing high traffic causing load on your server or suspecting a DDoS attack, please get in touch with us.

Not using a managed service?

If you're operating an unmanaged server, could it be that your server is simply under high load? Here are some quick tips for you to verify.

Regardless of how you're accessing your server (be it via SSH or VNC), you can run some commands to identify the IP addresses connecting to your server. If SSH access is unavailable, try rebooting it through your client area or control panel. If SSH access remains unavailable, consider using rescue mode or accessing via VNC to verify if your IP address is blocked on your firewall. You may also need to confirm whether the SSH service is properly configured and operational.

Here are some commands you can use to determine the number of connections per IP address:

To show the number of connections by state, use:

netstat -nat | awk '{print $6}' | sort | uniq -c | sort -n

To show all connected IPs, use:

netstat -nat | awk '{ print $5}' | cut -d: -f1 | sed -e '/^$/d' | uniq

To show the number of connections per IP, use:

netstat -atun | awk '{print $5}' | cut -d: -f1 | sed -e '/^$/d' |sort | uniq -c | sort -n

If you're receiving connections from many sources (IP addresses), blocking each one manually could be quite laborious. You could try blocking entire subnets all at once, but this might inadvertently block legitimate traffic, potentially even your own IP address.

Would you rather leave DDoS worries behind? Consider opting for one of our managed servers today, or get in touch with us to create a personalized plan tailored to your needs.

Back to top