Hacker attack
Posted: Sat Aug 22, 2020 3:00 pm
We rent several servers at Hetzner, all have Win 2012, 2016 or 2019. All have TSPlus + Advanced Security. Since our customers are exclusively in Serbia, we have restricted homeland access only to Serbia. All servers have a Hetzner firewall turned on that should detect and prevent DDOS attacks.
We have been suffering severe hacker attacks for several days. Knight did a good job, the log is like this for days:
But there is a problem. During an attack, the server becomes so busy that ordinary users cannot log in! Server report some "internal error" and disconect session. Login succeeds only after 10-30 attempts.We were thinking of transferring blocked addresses from Knight through the web service to Hetzner Firewall in order to relieve the servers a bit, but Knight does not have such a possibility.
Does anyone have experience with this or any advice?
We have been suffering severe hacker attacks for several days. Knight did a good job, the log is like this for days:
But there is a problem. During an attack, the server becomes so busy that ordinary users cannot log in! Server report some "internal error" and disconect session. Login succeeds only after 10-30 attempts.We were thinking of transferring blocked addresses from Knight through the web service to Hetzner Firewall in order to relieve the servers a bit, but Knight does not have such a possibility.
Does anyone have experience with this or any advice?