Hi,
Has anyone else been seeing (what appears to be) DDOS attempts against
their VPS's?
I've been getting quite a lot of messages like this in my logs over the
past few days:
Sep 30 05:02:06 scruffy kernel: [2103474.700870] TCP: drop open request
from 45.195.133.8/51353
Sep 30 05:02:07 scruffy kernel: [2103476.223611] TCP: drop open request
from 149.56.180.255/25006
Sep 30 05:02:08 scruffy kernel: [2103476.704225] TCP: drop open request
from 45.195.133.8/7947
Sep 30 05:02:08 scruffy kernel: [2103476.713872] TCP: drop open request
from 149.56.180.255/31127
Any ideas also on the best way to block? (I was reading about SYN
cookies, but not sure if this is a good idea or not).
cheers,
Matt.