My server is DDoSed by TurkTelekom

[Ifirst]

do

service csf restart

after you install and configure it (check my tutorial)
Remember

Testing = "0"

After you done then restart your webserver
If you use apache it should be

service httpd restart

If nginx then

service nginx restart

Your site should be online then

[ACiD_CORE]

i did it all but it wont block nothing

i still see in netstat

 
     10 46.1.36.102
     10 78.161.85.244
     10 78.184.136.142
     10 88.251.78.194
     10 95.9.246.247
     11 212.253.249.60
     11 46.197.146.54
     11 78.178.172.81
     11 78.179.79.56
     11 85.99.128.204
     11 88.252.101.179
     11 95.10.41.160
     11 95.9.255.28
     13 178.233.45.249
     15 188.3.165.7
     15 78.186.164.125
     23 88.235.132.213
     27 85.105.98.41

[Ifirst]

What did I tell you above
CT_LIMIT = "40"
Will block any ip with more than 40 connections
You see the maximum is now 27 , It was more than 60 before

According to me your are safe now 27 connections isn't ddos

[ACiD_CORE]

if 200 ips from turk connect 27 times at once then whats that called ??

[Ifirst]

if 200 ips from turk connect 27 times at once then whats that called ??

When then its Ddos , u can block it with csf but can you just show me the different ips with 27+ connection
Then i can show you how to block that range of ip with csf

[ACiD_CORE]

The main problem is that some of them got only 1 con. but its from turktelekom...

it rotates every 1 sec.

  1 78.100.198.199
      1 78.164.46.204
      1 78.186.136.179
      1 84.227.225.87
      1 85.105.125.119
      1 85.107.93.85
      1 88.250.127.94
      1 94.153.227.106
      1 94.99.144.205
      1 95.14.122.186
      2 41.235.16.179
      3 1.202.86.25
      3 124.120.100.22
      6 101.210.56.81
     10 88.254.44.31
     40 24.133.73.112
     44 78.191.231.129

[Ifirst]

Well you can try these two commands

csf -d 78.191.231.129

and

csf -d 24.133.73.112

Refer to the tutorial below to ban ip ranges(you might use any of them , use the one that you see fits best with ip ranges)

Quick Deny Red block type in:
To deny IP Range: 12.345.678.xxx use: 12.345.678.0/16
To deny IP Range: 12.345.xxx.xxx use: 12.345.0.0/16
To deny IP Range: 12.xxx.xxx.xxx use: 12.0.0.0/16

[ACiD_CORE]

iptables -A INPUT -s 88.0.0.0/16 -j DROP

and it stopped

my sweet server is back and i can say fck u ddosers

[Ifirst]

Happy for you dude
Hope you appreciate the help

[ACiD_CORE]

I appreciate your help @Ifirst, also from others