Stop HTTP DOS Attack

[phit666]

This is a simple external module, originally coded for linux apache 2.2, which is compiled for windows (apache 2.2) and help stop DOS attack with webserver.

Steps:

1. Download the attached file and extract it inside your webserver module folder. (xampp\apache\modules)
2. Load the module with the following code, add in httpd.conf:

LoadModule dosevasive22_module modules/mod_dosevasive22.dll

<IfModule dosevasive22_module>
DOSPageCount 2
DOSPageInterval 1
DOSBlockingPeriod 10
DOSSiteCount 50
DOSSiteInterval 1
</IfModule>

* This setting means a 2x connection (same page) or 50x connection (whole website) in 1 sec will be temporarily blocked for 10 sec. and your webserver will return forbidden error to the attacker.

3. Restart your webserver.

* You can see the possible attacks in the error.log. (xampp\apache\logs\)

 

[PinoyCoder]

Re: [Guide]Stop HTTP DOS Attack

thanks for this. i might use this when my server is up.

 

[Lisko]

Re: [Guide]Stop HTTP DOS Attack

work on app 2.5.10 ?
and where exacly to put in htp.conf this ot doesn`t matter ?

 

[phit666]

Re: [Guide]Stop HTTP DOS Attack

It is compiled for apache 2.2x and as far as I know 2.2 series is the latest there is. 'httpd.conf' is the main configuration of apache, usually resided inside conf folder.

 

[Lisko]

Re: [Guide]Stop HTTP DOS Attack

i know where is the file. I was thinking in the file does hav matter where exacli to put the Text ?

And Can you do this fo 2.5 Series it`s better :glare:

 

[phit666]

Re: [Guide]Stop HTTP DOS Attack

You can find some loadmodule code inside the conf file, you can put it just after the last loadmodule code in httpd.conf. So where you get exactly your 2.5 apache?

 

[Lisko]

Re: [Guide]Stop HTTP DOS Attack

You can find some loadmodule code inside the conf file, you can put it just after the last loadmodule code in httpd.conf. So where you get exactly your 2.5 apache?

To view the content, you need to sign in or register

just google.bg

 

[★ ♥ Deiu]

Re: [Guide]Stop HTTP DOS Attack

doh that is appserv version 2.5 not apache doh...

AppServ 2.5.10

* Apache 2.2.8
* PHP 5.2.6
* MySQL 5.0.51b
* phpMyAdmin-2.10.3

do not drink and drive ... read and read

EDIT: prove that this works? why can i trust this?

 

[phit666]

Re: [Guide]Stop HTTP DOS Attack

Here, visit this page then press F5 continuesly (make it fast) like 5 times and look at the page that will appear.

To view the content, you need to sign in or register

 

[c4cadvisor]

Re: [Guide] Stop HTTP DOS Attack

this doesnt stop a real dos attack, becuase i would be attacking your pc hardware directly not your shitty web server. great job to maybe stop the noobs, but for the pro's, which outnumber the noobs, your screwed.

 

[3xcorcist]

Re: [Guide] Stop HTTP DOS Attack

When i add this dll and mode, after 30min i have crash all windowse programs, dude not good. Example Explorer Debug error, Destope stuck, can't turn on windows task manager, when open him 5sec, and also debug error, so yeah cool protection from HTTP DOS (maybe) but will also stop all windowse

 

[Lisko]

Re: [Guide] Stop HTTP DOS Attack

this doesnt stop a real dos attack, becuase i would be attacking your pc hardware directly not your shitty web server. great job to maybe stop the noobs, but for the pro's, which outnumber the noobs, your screwed.

yea i test it and for me don`t works :ehh::glare:

 

[phit666]

Re: [Guide] Stop HTTP DOS Attack

this doesnt stop a real dos attack, becuase i would be attacking your pc hardware directly not your shitty web server. great job to maybe stop the noobs, but for the pro's, which outnumber the noobs, your screwed.

I clearly stated HTTP and ok go ahead PRO attack a server where only 80 tcp port is open .

 

[PinoyCoder]

Re: [Guide] Stop HTTP DOS Attack

anyone using this without windows problem?

 

[dieweb]

Re: [Guide] Stop HTTP DOS Attack

work perfect

 

[alijabari]

Re: [Guide] Stop HTTP DOS Attack

I clearly stated HTTP and ok go ahead PRO attack a server where only 80 tcp port is open .

realy ? and what about Net Tools , the most of hacker's and pro use the NetTools (is a program for all what is in Internet) like HTTP flooder (DoS) , Port Scanner , Fastest Host Scanner (UDP), HTTP scanner (Open port 80 subnet scanner and more ....
soo i just ask to everyone ...is somthing solution to stop this program ? i mean is alot of program like Net Tools ...is any solution to stop the hacker from attack us ?

 

[Kagorec]

Re: [Guide] Stop HTTP DOS Attack

This metod dont secured for ddos attack.
Tested, i attack my friend (use Sprut.exe):
Apache webserver used cpu 100%
Site only white list (for me and other ppl)
p.s. During the test, attacked only one person, but if they attack more than three people then jam the server at all because of this mod. Probably it is better to use a firewall.
This secure don't work =/

 

[KarLi]

Re: [Guide] Stop HTTP DOS Attack

this its DOS attack nt DDOS

 

[ADM_KRIOK]

Re: [Guide] Stop HTTP DOS Attack

This metod dont secured for ddos attack.
Tested, i attack my friend (use Sprut.exe):
Apache webserver used cpu 100%
Site only white list (for me and other ppl)
p.s. During the test, attacked only one person, but if they attack more than three people then jam the server at all because of this mod. Probably it is better to use a firewall.
This secure don't work =/

Agreed

 

[KarLi]

Re: [Guide] Stop HTTP DOS Attack

cus its not DDOS lool

"DOS" ZZ