Linux DDoS Attack - Help me

[ThaLeeeS]

# netstat -plan | grep : | awk {'print $5'} | cut -d: -f 1 | sort | uniq -c | sort -nk 1
      1
     13 201.38.137.20
    915 187.45.83.130

How do I can block this attack ?

 

[cirtaboy]

Talk to your ISP and tell them to block that ip.

 

[ThaLeeeS]

but the attacker have many ips :\

 

[nclx]

Probably he is using botnets... detect the "controller" and report him. you can also block the victims too ;s he'll have to find more zombies.

 

[ThaLeeeS]

How do I can block him?

help me :X

 

[joffily]

You can't ^^

 

[nclx]

Yes can, firewall? ;s if your good at iptables, u owned em, if not, try firestarter.

 

[ThaLeeeS]

I'm using APF Firewall...
Its good?

 

[nclx]

I didnt use it, but if your using it, and the attacks continue, then it isnt good? ;s

 

[ThaLeeeS]

I installed a DDoS deflate now...
How do I can put in cron for execute in each 5 minutes?

Thanks.