Knowledgebase
SYN Attack / Hivelocity
| Posted by hypebucks, 08-23-2009, 12:30 PM | | I have a dedicated server with Hivelocity and recently have been come under a SYN DDoS attack which has crippled the server at times.
I contacted support at Hivelocity about this and they suggested to me to purchase a Juniper hardware firewall to help stop the attacks. This was at the start of August and I confirmed that I would like the firewall installed. A week later it wasn't installed and I was still getting attacks so I tried to contact dave@hivelocity.net saying;
'Hi,
I spoke to someone about installing a firewall on my server last night as it kept getting DDOS'd, and found out earlier that nothing has happened since, are you able to find out what's happening?
Thanks'
I never received a reply from this email. A week after that I was still getting attacks and the firewall still hadn't been installed.
It got to August 18th when I was finally contacted about the firewall being installed. It was quite an expensive router and since installation has had minimal effect on the attack.
After slow response times with tickets and no response from both dave@hivelocity.net and steve@hivelocity.net I decided to go for outside sysadmin management and contacted a guy after a recommendation. Within 30 minutes he had setup a proxy infront of apache that seemed to work well for a while, but then the SYN attacks still somehow came in a few days later (maybe a different kind of attack?).
I then spoke to Kevin - my account manager asking for some reassurance about the server and that my sites were in good hands, but I didn't even receive a reply about this!
I was also told by the other guy that;
So with my lack of sysadmin skills I managed to whois a few of the IPs that were causing the SYN attacks and noticed that they all are from Romania. I found out that you can block the IP ranges for countries and found a list specifically for Romania. I have been adding these ranges to the firewall to deny, but it seems most are still coming through.
Any idea?
(p.s. the reason I've included the rant about Hivelocity's service is because after lurking through some threads that they only seem to take urgency when events like these come into public light and it's important that my sites get back online and remain ASAP)
|
| Posted by hivelocitygm, 08-23-2009, 03:41 PM | | Please email me again. I am happy to look into your issue. I find it hard to believe that me, Kevin and Dave have all ignored your emails. Please email me and I will certainly look into the issue. Do you have managed services with us?
|
| Posted by hypebucks, 08-23-2009, 04:17 PM | | Yes I have the 'gold' service. Have emailed you.
|
| Posted by hivelocitygm, 08-23-2009, 04:22 PM | | I have your email. Kevin and I discussed you on Friday and Kevin called you and emailed you in regards. I will discuss the issue with my techs now and see what we can get done for you.
|
| Posted by hypebucks, 08-23-2009, 05:59 PM | | Yeah I sent him a lengthy email and he didn't reply although it was on Friday so he may have left for the weekend or something. Waiting on your reply.
|
| Posted by hypebucks, 08-23-2009, 11:03 PM | | Am being told this;
..which noone at hivelocity seems to respond to.
|
|
 Add to Favourites
 Print this Article
|
Also Read
