Prevent DDOS Attacks on OVH - Printable Version

Prevent DDOS Attacks on OVH - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Prevent DDOS Attacks on OVH (/showthread.php?tid=6055745)

Pages: Pages 1 2

Prevent DDOS Attacks on OVH - Fiend - Mar 9, 2020

I see a lot of people asking how to block bypasses on OVH .etc well here is some rules to block and get you started

hope this is useful

Code 
#Most common AMP attacks

iptables -t mangle -A PREROUTING -p udp -m multiport --sports 3283,37810,7001,17185,3072,3702,32414,177,6881,5683,41794,2362,11211,53413,17,1900,10001,389,137,5351,502 -j DROP

# Port 37810 | FN LAG

iptables -t mangle -A PREROUTING -p udp --sport 37810 -j DROP

# Port 7001 | OVH KILL

iptables -t mangle -A PREROUTING -p udp --sport 7001 -j DROP

iptables -I INPUT -p udp -m length --length 100:140 -m string --string "nAFS" --algo kmp -j DROP

# Port 17185 | OVH SLAP

iptables -t mangle -A PREROUTING -p udp --sport 17185 -j DROP

# Port 3072 | OVH DOWN & OVH DOWN v2

iptables -t mangle -A PREROUTING -p udp -m multiport --sports 3072,3702 -j DROP

iptables -t mangle -A PREROUTING -p tcp -m multiport --sports 3072,3702 -j DROP

# Port 3283 | OVH Crush V2

iptables -t mangle -A PREROUTING -p udp --sport 3283 -m length --length 1048 -j DROP

# Port 3283 | OVH Crush

iptables -t mangle -A PREROUTING -p udp --sport 3283 -m length --length 1048 -j DROP

# Port 32414 | NFO LAG

iptables -t mangle -A PREROUTING -p udp --sport 32414 -j DROP

# Port 177 | NFO LAG

iptables -t mangle -A PREROUTING -p udp --sport 177 -j DROP

# Port 6881 | NFO Clap

iptables -t mangle -A PREROUTING -p udp --sport 6881 -m length --length 320:330 -j DROP

# Port 32414 | R6 LAG

iptables -t mangle -A PREROUTING -p udp -m length --length 280:300 --sport 32414 -j DROP

RE: Prevent DDOS Attacks on OVH - ilovefortnite78 - Mar 10, 2020

i can null ovh . i did it and will . Its easy my booter hitting 400gbp/s in 2017 4tbps

RE: Prevent DDOS Attacks on OVH - Jeffr0 - Mar 10, 2020

(Mar 10, 2020 07:09 PM)ilovefortnite78 Wrote: i can null ovh . i did it and will . Its easy my booter hitting 400gbp/s in 2017 4tbps

Oh shit we got a badass over here

RE: Prevent DDOS Attacks on OVH - Shisho - Mar 11, 2020

This won't help in the slightest.

RE: Prevent DDOS Attacks on OVH - Shisho - Mar 11, 2020

(Mar 11, 2020 07:10 AM)Red Sox Wrote: In no way shape or form, literally. 🐱‍👤

iptables works at the kernel level meaning that a flood that bypasses VAC will also bypass any iptables rules if it hasn't already exceeded the interface limits.

RE: Prevent DDOS Attacks on OVH - Shisho - Mar 11, 2020

(Mar 11, 2020 08:00 AM)Red Sox Wrote: It's a relief to see there's still knowledgeable people active on here.

Looking forward to what your group produces. 🐱‍👤

We're working on a ton of really interesting projects.

Check out some of the CTF challenges I authored :)

https://gitlab.com/op8-recruitment/op8-ctf-assessments

Send me a PM or add me on Discord, I'd like to talk about your skills and interests.

RE: Prevent DDOS Attacks on OVH - 257207954 - Mar 11, 2020

Good to see this sub-forum haven't changed from the usual shit show.

RE: Prevent DDOS Attacks on OVH - Bob White - Mar 11, 2020

I need all the eggs you guys have in this thread!

RE: Prevent DDOS Attacks on OVH - Shisho - Mar 11, 2020

(Mar 11, 2020 09:17 AM)257207954 Wrote: Good to see this sub-forum haven't changed from the usual Clay Davis show.

It's pretty much a resource for skids.

RE: Prevent DDOS Attacks on OVH - 257207954 - Mar 11, 2020

(Mar 11, 2020 09:27 AM)Shisho Wrote: It's pretty much a resource for skids.

Pretty sad to be honest, it used to be good back in 2014 :(

RE: Prevent DDOS Attacks on OVH - 3xploit - Mar 11, 2020

(Mar 11, 2020 09:42 AM)257207954 Wrote: Pretty sad to be honest, it used to be good back in 2014 :(

it's dead like all the other sub forums related to "hacking". I don't even know why this website is still called hackforums and not "moneymakingebookmarketplace.net".

RE: Prevent DDOS Attacks on OVH - Shisho - Mar 11, 2020

(Mar 11, 2020 02:59 PM)Red Sox Wrote: Give the site a little more credit than that. Only way for a change to happen is to make it happen.

And some of us are trying really damn hard!

RE: Prevent DDOS Attacks on OVH - Charger - Mar 11, 2020

(Mar 11, 2020 10:06 AM).toxic Wrote: it's dead like all the other sub forums related to "hacking". I don't even know why this website is still called hackforums and not "moneymakingebookmarketplace.net".

Talking a lot of shit for someone with a 2019 join date...

RE: Prevent DDOS Attacks on OVH - Twitch - Mar 12, 2020

these shit ass rules wont help against a udp checksum method LOL

RE: Prevent DDOS Attacks on OVH - 3xploit - Mar 12, 2020

(Mar 11, 2020 04:10 PM)Charger Wrote: Talking a lot of Clay Davis for someone with a 2019 join date...

damn, I forgot that I joined in 2019 and therefore cannot have memories about the time before. I apologize.
But honestly, there are almost no threads about real hacking here, only skids everywhere.