Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Why is my web server being attacked?

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 48 posts

Re: Ask HN: Why is my web server being attacked?

#11

Post by diggan »

cameron_b wrote: post #9

Adding to what has already been said- New registrations are the food for probing. You could have an IP on someone's naughty list from a previous user. It's any other day on the internet. That's just what the neighborhood ( the whole internet ) looks like from the sidewalk. So, Set up a free Cloudflare account, move your DNS of record to them, and run traffic through Cloudflare to your server.

> So, Set up a free Cloudflare account, move your DNS of record to them, and run traffic through Cloudflare to your server.

Since the author is not actually experiencing any issues, they're just curious, there really isn't any need for this.

Re: Ask HN: Why is my web server being attacked?

#14

Post by joeyrobert »

cameron_b wrote: post #9

Adding to what has already been said- New registrations are the food for probing. You could have an IP on someone's naughty list from a previous user. It's any other day on the internet. That's just what the neighborhood ( the whole internet ) looks like from the sidewalk. So, Set up a free Cloudflare account, move your DNS of record to them, and run traffic through Cloudflare to your server.

I recommend this method for self-hosting too. I have gigabit Internet and cloudflare proxying unlocks the ability to host locally without exposing my home IP. Plus all the advantages of DDoS mitigation.

Re: Ask HN: Why is my web server being attacked?

#15

Post by codegeek »

cameron_b wrote: post #9

Adding to what has already been said- New registrations are the food for probing. You could have an IP on someone's naughty list from a previous user. It's any other day on the internet. That's just what the neighborhood ( the whole internet ) looks like from the sidewalk. So, Set up a free Cloudflare account, move your DNS of record to them, and run traffic through Cloudflare to your server.

Cloudflare won't protect your IP being hit directly. If your IP can be accessed publicly, it will get hit. period. You could use nginx etc to do a 444 status code but can't stop these scripts/bots from hitting ur IP completely.

Re: Ask HN: Why is my web server being attacked?

#18

Post by piperswe »

cameron_b wrote: post #9

Adding to what has already been said- New registrations are the food for probing. You could have an IP on someone's naughty list from a previous user. It's any other day on the internet. That's just what the neighborhood ( the whole internet ) looks like from the sidewalk. So, Set up a free Cloudflare account, move your DNS of record to them, and run traffic through Cloudflare to your server.

If you set up Cloudflare Tunnel, you don't even need to be set up to accept any incoming connections. With Access, you can even run SSH through that tunnel. You can then setup your firewall to drop any incoming packets for non-established connections, closing a significant hole for DoS attacks and such.

Re: Ask HN: Why is my web server being attacked?

#19

Post by seaprune »

gtirloni wrote: post #8

One hundred. Not great, not terrible. Take him to the infirmary. Toptunov, take him! He's delusional. Flood attack, forged IP addresses. He'll be fine. I've seen worse. You didn't see forged IPs. You didn't. You didn't!!! Because it's not there!

I've been reading Hacker News for over 12 years now and this is my first comment and I wanted to make it a reply to your post because I'm in stitches.

Re: Ask HN: Why is my web server being attacked?

#20

Post by Erratic6576 »

gustavus wrote: post #10
cameron_b wrote: post #9

Adding to what has already been said- New registrations are the food for probing. You could have an IP on someone's naughty list from a previous user. It's any other day on the internet. That's just what the neighborhood ( the whole internet ) looks like from the sidewalk. So, Set up a free Cloudflare account, move your DNS of record to them, and run traffic through Cloudflare to your server.

Please don't do this, find another way. Almost 1/2 the internet is inaccessible to me at this point because at some point CF decided that I was a bad actor and now I can't get to anything.

Have you tried changing the web browser or VPN?
Post reply on HN