[Mr.Kurd]

Chances are, 99.9%, the admin did not patch fetch_remote_file and the attacker simply bypassed CloudFlare.

Maybe I will ask them, but man you didn't hear the ddos attack for money, They start very huge ddos attack for 3 days just by I think 70$.

Yeah, there was probably a misconfiguration, as cloudflare (usually) wouldn't just "get up and leave".

yeah maybe.
I will ask them later.

[Mr.Kurd]

Hey Mr. Kurd,
Sorry to hear of your troubles. Axi's advice on configuration is critical and this is square one for anybody running public-facing systems. You say that the attack was "very strong"; please elaborate. Origin, packet types, bandwidth consumed, duration etc. Logs would be ideal. Load balancers and firewalls are excellent but the fundamental problem with all DOS is link saturation.

PM me if you would like assistance configuring a more aggressive mitigation system.

Cheers,
Poly

Really thank you for your offer if I need I will PM you.

[Mr.Kurd]

Once a ddos is in place. You can't stop it. You can only take precautions.
I wouldn't trust cloudfare due to the fact that last time I checked. Wiresharking their backdoor is ez. So I prefer digitalfort but that's because someone I know runs it.

"He played a moneys to ddos it". There is no way to ddos for free unless you have your own personal method. Usually skids pay for booters.

Ddos attack if you used a botnet it can come everywhere, Botnet start ddos attack from victims to the target so the victim possible be everywhere.

[Wildfire]

Once a ddos is in place. You can't stop it. You can only take precautions.
I wouldn't trust cloudfare due to the fact that last time I checked. Wiresharking their backdoor is ez. So I prefer digitalfort but that's because someone I know runs it.

"He played a moneys to ddos it". There is no way to ddos for free unless you have your own personal method. Usually skids pay for booters.

Ddos attack if you used a botnet it can come everywhere, Botnet start ddos attack from victims to the target so the victim possible be everywhere.

The most likely conclusion is that the admin of the forum misconfigured the site, and the actual backend leaked. That's why the DDoS bypassed CloudFlare.

[R34P3R]

You can shutdown the server for a bit and then once you reboot it, add some sort of protection to stop the ddos attack and try to blacklist the ips which you think aren't legitimate

[Cremate]

There is multiple ways you can stop DDoS. You can purchase a VPN which does not have DNS Leaks and is DDoS protected (I reccomend PIA [Private Internet Access])

You can purchase a Residential VPN and act like its yours.

You can not talk shit and not get ddosed..

You can not join random calls or don't go on anything that is able to pull your IP.

You can make yourself unresolvable.

[m0dem]

There is multiple ways you can stop DDoS. You can purchase a VPN which does not have DNS Leaks and is DDoS protected (I reccomend PIA [Private Internet Access])

You can purchase a Residential VPN and act like its yours.

You can not talk shit and not get ddosed..

You can not join random calls or don't go on anything that is able to pull your IP.

You can make yourself unresolvable.

He's talking about a web server getting DDOSed, not his personal computer.

[Eclip$e]

Contact the host of the website ask for an ip change(this just incase they attacked with layer 4 and have the ip) or also config cloud flare so the attacker cant get the websites ipv4. Put cloud flare in under attack mode and try to find out what ips are the badguys and black list them.

[Mr.Kurd]

Contact the host of the website ask for an ip change(this just incase they attacked with layer 4 and have the ip) or also config cloud flare so the attacker cant get the websites ipv4. Put cloud flare in under attack mode and try to find out what ips are the badguys and black list them.

We have cloudflare but it didn't stop it.
At the end we changed the forum server....

[Eclip$e]

Contact the host of the website ask for an ip change(this just incase they attacked with layer 4 and have the ip) or also config cloud flare so the attacker cant get the websites ipv4. Put cloud flare in under attack mode and try to find out what ips are the badguys and black list them.

We have cloudflare but it didn't stop it.
At the end we changed the forum server....

Make sure you set it up correctly so it protects all pages and hides your ipv4