Re: It's time to Profile our DDOS'er
Posted: Mon Dec 14, 2015 11:21 pm
While I can't confirm - the fact that other MMO games are blocking these regions would give strong indication as to their threat.
Further, It looks like the RoR team is now using cloudflare for some additional ddos protection.
Check out step 6 on cloudflare's site:
https://support.cloudflare.com/hc/en-us ... t-do-I-do-
BLock specific country IP's
As others have said - a ddos attack can now be performed for a cheap as $150 a week. To do this, one simply rents botnet clients of zombie computers to perform the ddos attack. Blocking specific country IP's where these zombie clients are MOST likely to originate can significantly reduce the opportunity for a successful attack.
From CloudFlare:
Step 6: Block specific countries and visitors
Time: 10 minutes, Difficulty: Medium
CloudFlare’s Threat Control lets you block IP addresses and set entire countries to be challenged. Once you add an IP or country, the security rule will take effect within 2 minutes offloading the traffic to your server. To decide which country or IPs to add to your Threat Control, you will want to check your log files or follow the steps below under Advanced tip. You can find the Threat Control panel next to the domain on the My Websites page.
Advanced tip: To get a list of visitors coming to your site from the last 48 hours by number of requests, follow these steps. You can use the information to identify IPs you may want to manually add to your CloudFlare Threat Control Block list.
Further, It looks like the RoR team is now using cloudflare for some additional ddos protection.
Check out step 6 on cloudflare's site:
https://support.cloudflare.com/hc/en-us ... t-do-I-do-
BLock specific country IP's
As others have said - a ddos attack can now be performed for a cheap as $150 a week. To do this, one simply rents botnet clients of zombie computers to perform the ddos attack. Blocking specific country IP's where these zombie clients are MOST likely to originate can significantly reduce the opportunity for a successful attack.
From CloudFlare:
Step 6: Block specific countries and visitors
Time: 10 minutes, Difficulty: Medium
CloudFlare’s Threat Control lets you block IP addresses and set entire countries to be challenged. Once you add an IP or country, the security rule will take effect within 2 minutes offloading the traffic to your server. To decide which country or IPs to add to your Threat Control, you will want to check your log files or follow the steps below under Advanced tip. You can find the Threat Control panel next to the domain on the My Websites page.
Advanced tip: To get a list of visitors coming to your site from the last 48 hours by number of requests, follow these steps. You can use the information to identify IPs you may want to manually add to your CloudFlare Threat Control Block list.