DDOS Attacke - Ich habe die Schnauze voll vom Web

[euroexchange.de]

Ich habe bestimmt einiges was ich in den Scripten besser und sauberer Programmieren könnte. Darauf werde ich jetzt ganz genau schauen.

Der Server ist wieder online und ich habe alle Projekte abgeschaltet. Kein Projekt ist derzeit erreichbar und der "nackte" Server ächzt unter der Last.

[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 109.98.67.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.161.107.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 188.165.15.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 109.98.67.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.161.237.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 85.10.205.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 87.197.163.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 109.98.67.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.191.66.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.191.66.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 87.197.163.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.161.237.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 109.98.67.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.161.107.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 87.197.163.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 109.98.67.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.161.107.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 87.197.163.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 109.98.67.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 190.72.232.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 83.53.120.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 78.161.237.0]...
[Wed Dec 10 19:17:00 2014] [error] [client 186.146.41.0]...

Für was haltet Ihr das? Schlechte Programmierung?

[euroexchange.de]

Ich kann die IP nicht so schnell in die .htaccess eintragen wie die sich teilweise ändern. Es geht alles auf den Kleinanzeigenmarkt.

[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 157.55.39.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 181.113.206.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 157.55.39.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 181.113.206.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 66.249.67.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 46.240.243.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:47 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 157.55.39.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 181.113.206.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 37.231.22.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 181.113.206.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 39.44.128.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 157.55.39.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 91.186.240.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 188.77.25.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 88.242.34.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 201.184.80.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 95.8.82.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 79.118.105.0]...
[Wed Dec 10 19:37:48 2014] [error] [client 5.56.97.0]...

[euroexchange.de]

Ich bin ratlos. Wie gesagt alle Projekte sind aus. Kein Stück Html wird ausgeliefert und keine Datenbank abgefragt.

Ich habe auf Root-Ebene die .htaccess mit "deny from all" gefüttert aber die nackte Masse an Anfragen macht den Server schon platt. Da brauche ich gar nicht erst anfangen die "Schlechten" zu sperren, weil der Server so schon zusammenbricht.

Jemand eine Idee?

[dreamy]

Kannst du die IPs vielleicht per PHP Script in die .htacces Datei schreiben?

Ist das ein Root Server oder ein VPS? Dann solltest du vielleicht mal neustarten.

Falls du SSH zugriff hast für doch mal:

Code: Alles auswählen

ps aux | grep php

aus. Als ich mal eine Endlosschleife in einem PHP Script hatte tauchte es da auf und ich konnte es killen

[e-fee]

Eben war ja mal die Rede von einer bestimmten IP ... hätte ja sein können.

Gut, wenn wirklich gar nix ausgeliefert wird, dann scheidet schlechte Programmierung deinerseits natürlich aus. Bleiben immer noch schlechte Scripte von außerhalb.
Allerdings solltest Du Dir wegen dem unbeabsichtigt mit vorgelesenen Teil tatsächlich mal Gedanken machen - wenn das Projekt wirklich schon so alt ist und das Script auch nicht nennenswert neuer, dann ist anzunehmen, dass viele der heutigen Standards auch in puncto Sicherheit nicht berücksichtigt sind. Eventuell gab es dann auch schon vorher diverse Einfallstore für dies und das, ohne dass Du was gemerkt hast, also dass Dein Server schon mal als Spamschleuder missbraucht wurde oder so. Die bösen Buben merken sich meist die bekanntermaßen schwachen, schlecht abgesicherten Systeme - kommt einer durch, dann kommen sie alle!

Heute scheint aber wirklich was im Argen zu sein, denn auch die DNS-Server von 1&1 werden seit gestern Abend geddost: https://www.heise.de/security/meldung/S ... 86039.html

[euroexchange.de]

Wie gesagt die .htaccess trägt "deny from all". Keiner kommt rein.

Alleine die Masse der die es versuchen bringt den Server zum Absturz.

Ich müsste also schon vor dem Root ansetzen zu sperren, oder?
Und wie soll man das bei einem Managed Server machen?
Ich müsste die ja quasi für und auf dem DNS-Server sperren damit sie gar nicht bis zu meinem Server kommen.

Das sind IPs von Columbien über Spanien bis China und Venezuela.

105.156.188.0] client denied by server configuration:
189.162.204.0] client denied by server configuration:
189.162.204.0] client denied by server configuration:
190.195.176.0] client denied by server configuration:
190.195.176.0] client denied by server configuration:
186.151.151.0] client denied by server configuration:
186.151.151.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
189.162.204.0] client denied by server configuration:
189.162.204.0] client denied by server configuration:
190.195.176.0] client denied by server configuration:
190.195.176.0] client denied by server configuration:
105.156.188.0] client denied by server configuration:
105.156.188.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
190.195.176.0] client denied by server configuration:
190.195.176.0] client denied by server configuration:
186.151.151.0] client denied by server configuration:
186.151.151.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
78.62.193.0] client denied by server configuration:
105.156.188.0] client denied by server configuration:
105.156.188.0] client denied by server configuration:
189.162.204.0] client denied by server configuration:
189.162.204.0] client denied by server configuration:

[e-fee]

Noch mal: Ja, Du müsstest vor Deinem Root ansetzen. Auf Serverebene. Was Du in der .htaccess blockst, kommt ja nur nicht auf Dein Webprojekt drauf und bekommt einen 403er zurückgeliefert. Aber der Server ist damit erstmal beschäftigt.

Vielleicht zunächst mal klären, ob die Angriffe auf die IP und/oder die Domain gehen - ich gehe mal davon aus, nur eins von beiden. Sollten die auf die IP gehen (und die Angriffe nicht nachlassen oder zu unterbinden sein), dann das ganze Projekt auf einem anderen Server mit anderer IP spiegeln oder um eine neue IP bitten. Wobei, wenn es jemand auf Dich persönlich abgesehen hat, nicht lange hilft.
Wenn die Angriffe auf die Domain gehen, dann die Domain ins Leere (oder vielleicht einen leckeren Honeypot oder sowas) umleiten, dann ist wenigstens der Server vorerst aus der Schusslinie. Wäre aber natürlich doof, wenn man dann eine neue Domain oder Subdomain kommunizieren müsste. Auch das hilft natürlich wieder nicht lange bei persönlichen Animositäten.

Serverseitig gibt es aber noch ein paar Möglichkeiten wie IPTables. Zu Deinen (nicht vorhandenen) Möglichkeiten einfach mal googeln nach "webserver schützen ddos". Wird Dich aber vermutlich einigermaßen ernüchtern.

[Lyk]

schau mal hier:
https://www.heise.de/newsticker/meldung ... 83068.html

[elmex]

Apache ist wohl eher die falsche Ebene dagegen vorzugehen. Es kann also eigentlich nur der Hoster lösen, in wie weit da bei Strato die Bereitschaft besteht, kann ich nicht beurteilen. Ansonsten definitv zu DDos geschütztem Hosting wechseln.

Schau mal zum Beispiel hier:
https://www.heise.de/resale/artikel/Ers ... 39594.html

[euroexchange.de]

Vielen Dank für die Hinweise.
Eure Tipps werde ich mir alle durchlesen.

Es ist definitiv die Domain auf welche die Attacke läuft.

Die Zugriffe gehen auf:

[Wed Dec 10 19:42:35 2014] [error] [client 189.162.204.0] /htdocs/class

Die ist das Verzeichnis auf das die betroffene Domain aufgeschaltet ist.

[Pompom]

Kannst ja mal die Linux Firewall füttern.
https://de.wikipedia.org/wiki/Iptables
https://ipset.netfilter.org/iptables.man.html

[euroexchange.de]

Kannst ja mal die Linux Firewall füttern.
https://de.wikipedia.org/wiki/Iptables
https://ipset.netfilter.org/iptables.man.html

Danke für den Hinweis. Habe heute Morgen mit Strato gesprochen. Ich kann auf einem Managed Server nicht mit IPtabes arbeiten. Da komme ich nicht ran, leider.

Sie versuchen es zumindest auch wenn die Ursache einfach nicht erkannt wird:

„Guten Morgen, wie ich sehen konnte, wurde gestern Abend die
Hardwareeinschränkung behoben und Sie wurden per E-Mail informiert. Der Server steht wieder vollständig zur Verfügung. Wenn es noch Fragen gibt melden Sie sich bitte.

Das sind jetzt 2 Tage ohne Umsatz - ich bin im A...

[Pompom]

...nach meinem Dafürhalten wäre es bei einem Managed Server Aufgabe des Hosters, die Server vor DDoS Angriffen zu schützen, da du diese Möglichkeiten ohne vollen Root-Zugriff gar nicht hast. Da die das scheinbar nicht hinbekommen haben - schreib denen eine Rechnung.

[euroexchange.de]

Habe gerade nochmal mit Strato telefoniert weil ich dachte, das der Service-Mitarbeiter vielleicht sagen kann, ob auf dem Server gerade etwas Amok läuft. Der hat aber keinen Zugriff auf den Server und verweist ans Rechenzentrum. Die kann man aber nicht direkt kontakten.

Eine Blackbox ...

Gedankenblitz: Mir fällt gerade ein das diese Probleme zeitlich erst nach den Servicearbeiten an den Managed Servern aufgetreten sind.

die Wartung Ihres STRATO Managed Server xxx.stratoserver.net wurde erfolgreich abgeschlosssen. Am 02.12.2014

[Beloe007]

Das sind jetzt 2 Tage ohne Umsatz - ich bin im A...

hmm, dann frage doch mal einen Profi woran es liegt, kann man bei Strato nicht auch nen Techniker buchen, der sich das mal anschaut und man muss nur bei Selbstverschulden bezahlen?

Bzw. Falls wirklich DDOS ist das nicht in Stratos Interesse das zu lösen, du hast doch nen ManagedServer? Haben die keine Vorschläge?

1. Als Notlösung würde es vielleicht schon helfen, wenn Strato jeglichen Traffic von EU-Extern auf deinen Server eine Weile blockt.
2. Als weitere Alternative die Domain auf Nameserverebene auf einen anderen Server schicken.