• We value your experience with Plesk during 2025
    Plesk strives to perform even better in 2026. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2025.
    Please take this short survey:

    https://survey.webpros.com/
  • On Plesk for Linux mod_status is disabled on upgrades to improve Apache security.
    This is a one-time operation that occurs during an upgrade. You can manually enable mod_status later if needed.

Question Handling Large DDoS Attacks (Many Rotating IPs)

Hangover2

Regular Pleskian
Server operating system version
Debian
Plesk version and microupdate number
Plesk Obsidian 18.0.74 Update #3
Hello,

We currently have a client’s online shop under attack by a large bot network using thousands of different IPs.

For example, the last 50,000 requests in the logs came from more than 25,000 IP addresses worldwide. Blocking specific ISPs or countries doesn’t help in this case.

Our Imunify firewall also isn’t able to detect and stop the attack. The anti-bot / DoS protection doesn’t trigger because most IPs only request 1–2 pages and then rotate.

Besides Cloudflare, are there any effective options to mitigate this kind of attack on Plesk servers that we may have missed?

Thanks in advance for any ideas.
 
Back
Top