When your VPS is targeted by a DDoS attack, it's crucial to know what to expect and how to respond to minimise disruption and restore service. This guide outlines the immediate steps you can take if your server is affected by a DDoS attack and explains how BinaryLane helps mitigate the impact


For guidance and information on how to secure your servers on BinaryLane or your BinaryLane account, please review these helpdesk articles: 

Securing your account | BinaryLane

Securing your servers | BinaryLane

 

What happens if my server is being DDoSed?


A DDoS (Distributed Denial of Service) attack floods your server with excessive traffic, overwhelming its resources and potentially disrupting service. When such an attack exceeds your server’s network capacity or packet threshold, our systems automatically 'black-hole' the targeted IP. This means that all incoming traffic to the targeted IP is discarded (or 'dropped') upstream, preventing the malicious traffic from reaching our network or your server. This effectively isolates the server from the internet, ensuring that the attack doesn’t impact your server’s availability or overload the network infrastructure.

  • You’ll receive an email notifying you of the suspected DDoS attack.
  • Our system will check every 10 minutes to see if the attack has ceased.
  • Once the attack stops, the targeted IP will be automatically restored, and you will be notified.


Please note that while BinaryLane automatically handles the black-holing and mitigation, we do not provide logs of the DDoS attack itself. If you need more granular insights into the attack or further monitoring, we recommend using your own monitoring and logging tools.


To prevent network threats, ensure your VPS is properly configured with external firewalls, regularly monitor logs, and audit your security setup. More information can be found in our Securing your servers article.

If you require assistance, feel free to submit a support ticket at our helpdesk here: Submit a ticket | BinaryLane