🔒 Closed ddos

[homer_simpson]

kadalasan po ay yung mga gumagamit ng sql/db ang prone sa dos attack lalo na kapag cheap server ang gamit, kung html site lang po e walang malaking epekto,kahit pinakapowerfull ddos po e parang kiliti lang po ang magagawa,wala pong epekto...

Why would you even open databases open to the internet regardless if is even setup on "not cheap" server? Can't you not connect to databases through VPN?

 

[Rexzero]

Wag po kayo umasa sa pangako kaya kayong "protektahan" and yet hides behind the big gun.

With or without your "skript", cloudflare is already shielding for you by a) absorbing the volume of traffic; b) distributing the traffic through DNS geolocation.

Why don't you setup you domain in an independent IP and not behind somebody else's? DDOS can only be mitigated by outgunning the offender(s) by deploying bigger "pipe" that can contain the volume of traffic and by geolocated DNS.

Oh, by the way I am not into destroying your business. I admire when people do start their own. It is just that your info is misleading.

Theres no such thing as independent ip sir


Only dedicated ip At mejo mali ka sa statement mo, ang pinoprotektahan ng antidos companies eh ang hosting/server

"Hindi ang DOMAIN"

 

[homer_simpson]

Theres no such thing as independent ip sir Only dedicated ip At mejo mali ka sa statement mo, ang pinoprotektahan ng antidos companies eh ang hosting/server Hindi ang domain

Pedantic much? Depending on how you interpret it. Dedicated vs dynamic is that what you mean? When I say independent, you know what I mean, which means IP you rented/owned but operated solely by you, hence independent and not by somebody else's.

Ang pinoprotektahan ng CDNs are the end/ultimate/resolved IPs of domain names and not the domain names themselves (unless the DNS server itself is being attacked, but that's different story). Did I tell something different?

By the way, aren't you or the other guy are one? 'Cause it appears to me by having the same facebuk account. Tama po ba? So dummy account and for what reason?

 

[Rexzero]

Pedantic much? Depending on how you interpret it. Dedicated vs dynamic is that what you mean? When I say independent, you know what I mean, which means IP you rented/owned but operated solely by you, hence independent and not by somebody else's.

By the way, aren't you or the other guy are one? 'Cause it appears to me by having the same facebuk account. Tama po ba? So dummy account and for what reason?

Okay so whats your point? You want to enlighten us, but you dont want to correct your overly stated grammar? Use generally accepted technical terms sir

 

[Nontikweed]

 

[homer_simpson]

Okay so whats your point? You want to enlighten us, but you dont want to correct your overly stated grammar? Use generally accepted technical terms sir

My point? My point is to point out to you that you point is evasive/misleading by pretending to be grammatically-correct.

 

[Nontikweed]

Nasubukan mo na yan sa wireless AP?

Via Rdp attacking ko master

 

[Rexzero]

Pedantic much? Depending on how you interpret it. Dedicated vs dynamic is that what you mean? When I say independent, you know what I mean, which means IP you rented/owned but operated solely by you, hence independent and not by somebody else's.

Ang pinoprotektahan ng CDNs are the end/ultimate/resolved IPs of domain names and not the domain names themselves (unless the DNS server itself is being attacked, but that's different story). Did I tell something different?

By the way, aren't you or the other guy are one? 'Cause it appears to me by having the same facebuk account. Tama po ba? So dummy account and for what reason?

Can you elaborate sir? As far as i know im rexzero and he is divinista. Focus to the topic at hand.


And bakit mo idadown c sir divinista when all you know is theory? Sya application.

Kumbaga armchair activist ka lang

 

[Rexzero]

My point? My point is to point out to you that you point is evasive/misleading by pretending to be grammatically-correct.

Nope, you are the one misleading us.

In the first place, walang pinagmamalaki si sir divinista albeit stating na only by a use of a script based flood deflector meron ang site nya and hes open for testing by any individual.

Ikaw ung nagfeeling hero na pa curl2 pa para ipoint out na naka cloudflare sya.

Bakit, cnu pa bang site ngaun ang hindi naka cloudflare?

Minimislead mo kasi ung point and u want to win the argument by doing some "techie" shenanigans

 

[homer_simpson]

Alam ko wala pinagmamalaki si "sir" divinista (o you?). Looks like na pareho kayo related sa piso at dream. Coincidence? Yun lang.

user@debian10:~$ grep -o '\<href="https\?[^>]\+\>' index.html
href="https://phcorner.org/#forbidden#/omayan.rey"
href="https://phcorner.org/#forbidden#/pisovpn"
user@debian10:~$

Ok, good kung meron syang cloud "deflektor". I will leave it up to you.

 

[divinista]

Alam ko wala pinagmamalaki si "sir" divinista (o you?). Looks like na pareho kayo related sa piso at dream. Coincidence? Yun lang.

user@debian10:~$ grep -o '\<href="https\?[^>]\+\>' index.html
href="https://phcorner.org/#forbidden#/omayan.rey"
href="https://phcorner.org/#forbidden#/pisovpn"
user@debian10:~$

Ok, good kung meron syang cloud "deflektor". I will leave it up to you.

hilig mo po talaga manghula..hindi rey ang pangalan ko o kahit ang fb ko...naiintindihan ko naman po ang pinopoint mo sa simula pa lang,kaso nakabased pa rin po kayo sa luma...sa tingin nyo po e may grupo ba na mag eeffort na gumastos o pag aksayahan ng oras ang pagDDOS dito sa atin o kahit saang bansa pa para lang sa wla?at kadalasan yung DOS naman e ginagamit lang para sa pagtesting lang ng ginawa natin, hindi bawal sa ISP natin ang DOS at DDOS, madedetect ba nila o ipapaalam mo pa na nagtetesting ka ng server mo para hulihin ka? kaya nga may policy ang isp natin na capped ang unlimited internet kuno natin sa 800MB/Day,magdos attack ka pa kaya kapag ganyan...kunsabagay,mukhang sanay ka naman sa linux pero try mo gamitin ang server o vps mo sa attack kung ano ang mangyayari sa server mo,kung sa mining nga e nasususpended sa DDOS/DOS pa kaya...isang challenge sa akin ang tablan ng attack ang ginawa kong panel...gusto ko din makakita ng ddos na kahit blank/default page lang e nagdodown,ganyan kasi ang alam kong tunay na ddos/dos...

si rexzero nga pala e sa paghandle ng vpn server ang konting alam,ako naman po ay sa web developing lang ang konting alam kaya magkaiba po kami at hindi kami iisang tao lang...actual po naming naaapply ang konting alam namin,ikaw po nakabase lang sa theory, ni hindi mo po maapply actual ang mga sinasabi mo...isama mo pa talaga sa copy paste mo na nakadebian ka,para namang wala kaming gabutil na alam dyan...

 

[homer_simpson]

Over and out.

 

[rampage18]

yang tk po na tinutukoy mo e sa domain po yan...server po ang naaatake kapag nagddos...sa domain lang po dumadaan..

kaya nga hahaha karamihan sa .tk eh panel di ba hahaha at karamihan ng nagamit ng .tk eh hindi marunong gumamit ng security features ng hosting (not ssl)

 

[danieliazzz]

Thanks po. Patunay lang po na walang gagawa nyan at hindi existed dito sa atin. DOS at DDOS ay halos parehas lang, ang pinagkaiba lang po ng ddos sa dos e maraming umaatake ng sabay sabay na magkakaibang network kumpara sa dos sa single network o attacker lang...hindi naman po ako maglalakas ng loob ibigay ang url ng site kong ginawa kung wala po akong ibubuga...iba po kasi ang salita lang sa naexperience na at kayang gawin kung paano ang dos at ddos...akala po kasi ng iba dito na ang ddos e palaging tools lang,hindi po yata nila alam na code lang din po yung nagrurun sa tools..lahat ng code ay kayang kontrahin ng code din basta po alam kung paano ang flow ng code e kaya na po...alam po ng mga nagcocode yan...lahat po tayo ay may limit ang kaalaman, kahit ako po e nasa hinliliit pa lang din po ang alam sa ddos o dos...

I will agree with you on that based from terminology, but still DDos and DOS still occurs we get about 10 to 20ish DOS in our server itself mostly from china. Yes code can be countered with a code and i agree with you on that in the bad side, they create code to run DDoS Scripts and we on the good side create mitigation tools for it.

What i believe they're saying is that you cant just mitigate DDOS or DOS by a simple php, html, css, or simple frontend web software.

Ssl will not help you either in many cases because it only encrypts traffic. The best case if you want to prevent common attackts is to enable Mod_Secuity by your hosting provider and adding of course a HARDWARE FIREWALL.

Cloudflare while effective is not a practical solution in many ways. I can tell to you right now out of 200 enabled rules in our IDS (Intrusion Detection system) we think only a tiny portion of that is protected by cloudflare. And more of it is Hardware firewall based.

The key note here is hardware firewall.

I would love to disscuss with you further on this

 

[Mr. Stark]

Via Rdp attacking ko master

No I mean kung nasubukan mo na i-attack ang isang wireless AP gamit xerxes.

 

[Nontikweed]

No I mean kung nasubukan mo na i-attack ang isang wireless AP gamit xerxes.

Dipa master

 

[Mr. Stark]

Dipa master

Ah ok master, web server lang ba kaya nyan o layer 7 talaga?

 

[Nontikweed]

Ah ok master, web server lang ba kaya nyan o layer 7 talaga?

web server lang boss mga walang anti ddos

 

[Mr. Stark]

web server lang boss mga walang anti ddos

Tama yung mga panel na galing DO pwede pag-tripan yun. Tama yung isa dito kaya naman i-defend DoS thru scripting pero kung wala kang front end at yung script ay nandun din sa main server eh lamon pa rin reso nyan, front end talaga kailangan for starters.

 

[Nontikweed]

Tama yung mga panel na galing DO pwede pag-tripan yun. Tama yung isa dito kaya naman i-defend DoS thru scripting pero kung wala kang front end at yung script ay nandun din sa main server eh lamon pa rin reso nyan, front end talaga kailangan for starters.

Point via domain tas cloudflare