Increase in DoS/DDoS Attacks?

[[JSH]John]

Is anyone else having an increase in DoS/DDoS attacks on their servers?

I've noticed we're having an increase in these types of attacks. They're mostly targetting port 80 and it's becoming really annoying. They get banned but a few hours later, they do it again from another IP.

The worst was a couple of weeks ago when we had a huge DDoS on port 80. It's quickly brought under control but it means removing the IP they're targetting or the domain.

Does anyone have a good way to deal with this? I've thought about reporting the IPs of those that do the DoS attacks but when we have a large DDoS there's hundreds of IPs.

[Darknight]

DoS bots are just exploited computers so reporting the IPs wont do anything,
All you can really do is get better DDoS filters, Better firewalls ect, Move to a datacenter that deals with ddos.....
Or, alot of times its one user they are trying to kill, If you wanna take the easy way out, get rid of that user and it will all go away.
Yea most target port 80 even when they are taking down IRCd clients, As you cant really block port 80 without doing major damage, its the best port to attack.
But your asking a silly question, there is always a reason why someone will DDoS a server, They dont just pick it out and say "IM going to ddos this for something to do"
So no, No increase in ddos, its just you or one of your clients is currently hated by someone with alot of bots :)

[[JSH]John]

Yes I understand how DoS/DDoS works :).

It's just finding the client causing this now. I found the last one and asked them to remove a site they were hosting. It wasn't illegal, just disliked by someone with a large botnet.

[JonnyH]

I always get people trying to log into root. Firewall bans them several tries later.

[Dan]

Get them every day. :lol: