# How to STOP DDoS Attack (Or at least stop some of them)

**URL:** <https://forum.infinityfree.com/t/how-to-stop-ddos-attack-or-at-least-stop-some-of-them/51209>\
**Category:** Informal\
**Created:** [September 12, 2021, 10:39am UTC](https://forum.infinityfree.com/t/how-to-stop-ddos-attack-or-at-least-stop-some-of-them/51209 "2021-09-12T10:39:07Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![Oxy](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/oxy/32/37989_2.png) [@Oxy](https://forum.infinityfree.com/u/Oxy)\
**Post date:** [September 12, 2021, 12:14pm UTC](https://forum.infinityfree.com/t/how-to-stop-ddos-attack-or-at-least-stop-some-of-them/51209/12 "2021-09-12T12:14:43Z")

</div>

what you mentioned in previous posts is more useful if you want for example to prevent a brute force attack on `login.php` (unnecessary use of CPU and other resources) or some other file/path, also against spam.

It’s another thing when you have something between the visitor and the hosting (origin)  
for example Cloudflare, then the CF can decide whether to allow traffic to your origin or block it.

CF has one advantage because it covers millions of domains  
and their AI then easily learns to recognize the attack and quickly take countermeasures

For some basic actions on CF you can be guided by this

> [@How to protect your website that is on Cloudflare plus Logs](https://forum.infinityfree.com/t/how-to-protect-your-website-that-is-on-cloudflare-plus-logs/44751):
>
> How to protect your website that is on Cloudflare ? (Last update May. 6. 2024.) Don’t expect that if you just set up the CF nameservers everything will be well. Cloudflare is a tool, that you need to understand, learn and put to work for you after proper configuration. We often have the opportunity here on the forum to see that some websites have been suspended for exceeding the limit and mostly this is caused by a bunch of bots doing a vulnerability scan and searching sensitive direct…

The problem is bigger when infected devices can store cookies and execute JS  
and that trend is growing

For example on my CF 20% of unwanted traffic successfully passes the JS challenge

so there is no one rule that would cover everything

You need to have a few rings of defense  
and know your website and its weaknesses and then well configure FW and the rest.

---

_[View the full topic](https://forum.infinityfree.com/t/how-to-stop-ddos-attack-or-at-least-stop-some-of-them/51209)._