Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bungeeweb and ddos suspect #28

Closed
Malachiel87 opened this issue Sep 23, 2014 · 6 comments
Closed

Bungeeweb and ddos suspect #28

Malachiel87 opened this issue Sep 23, 2014 · 6 comments

Comments

@Malachiel87
Copy link
Contributor

After installing this plugin... i get a lot of ddos of 75M-150M attack... like 5-10 times in week... that make my server and website are unreachable... and i got a suspect that they are using the bungeeweb site for dossing... (time ago i am using mcmyadmin) 0 doss only bot attack. i switched 2 time server (kimsurfi and soyoustart, same thing happen)...

@Arzte
Copy link
Contributor

Arzte commented Sep 23, 2014

Change your port, It's not likely they are doing this directly at the site it could also be to take your server down, I would switch ip's if possible, A DDoS doesn't just affect websites....

@Malachiel87
Copy link
Contributor Author

so if i buy a extra ip it protect me from ddos?

@Arzte
Copy link
Contributor

Arzte commented Sep 23, 2014

As long as now one knows about it yes, Although getting DDoS protection would be a better idea

@EthanWaite
Copy link
Owner

Hmm, I remember reading a while ago that Jetty (the web server library I'm using) does include DoS rate limiting out of the box, which should help prevent attacks like this.

Is BungeeWeb definitely the target of the attack?

@Malachiel87
Copy link
Contributor Author

I still don't know i changed port now....
Il 23/09/2014 22.47, Ethan Waite ha scritto:

Hmm, I remember reading a while ago that Jetty (the web server library
I'm using) does include DoS rate limiting out of the box, which should
help prevent attacks like this.

Is BungeeWeb definitely the target of the attack?


Reply to this email directly or view it on GitHub
#28 (comment).

@EthanWaite
Copy link
Owner

I'll go ahead and close this, as we do have DoS filters in place in these kind of situations, thanks to Jetty. However, 8080 is obviously a very common port for web services, making them more prone to discovery from malicious sources, and it may be best to change this port to something different in the future. If you have any further thoughts, please let me know. =)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants