I would like some suggestions to prevent this kind of ddos, thank you.

You could mitigate the DDoS overseas in the US or EU where bandwidth is much cheaper, but that has an effect on performance.

Or paying someone to do remote DDOS protection for you.

This avoids the 'password123' and "what do you mean I am suspended for DDOS I have never even logged in since I bought it" tickets (Image)

China isn't the only country bad traffic comes from. That being said there are much better alternatives like investing in actual ddos protection.

Some of the VPS comes with free DDoS Protection :

ddos attacks are sometimes uncontrollable and we experienced it, in my post, the last section describes, how to delete the rules once the ddos is stopped.

Ask them for logs, i’m sure they will provide, the 7th is when VestaCP started sending DDoS attacks, it seems likely.

DDos attacks are one of the major dilemmas among hosting world, We used to get attacks from china recently and implementing below rules could prevent ddos.

Ramnode has nice policy. I got close to max bandwidth from a DDoS once and they sent me an email so I could deal with it - which I did. They could, of course, have said nothing and just cut me off wh

(Quote)

Around 7 GBs of data was transmitted from the server, not sure if it was spam or ddos, but I wiped it otherwise I would have shared for inspection @MikePT

I would recommend the providers to issue security advisors as this may have a huge impact. There is many people using VestaCP. This doesn't seem to start only DDoS but SPAM as well, anything actually

2TB DDOS Protected ？ for real life？

Routerhosting provides web servers for more than 10 years since 2008. You can get VPS servers in 7 available locations. We have servers in Buffalo, New York - Pittsburgh, Pennsylvania - Los Angeles, …

Yep, they're using a variant of Xor DDoS - https://en.wikipedia.org/wiki/Xor_DDoS

Yep fair enough, I was talking generally, for DDOS in or out I would notify you every time.

Update from one of the VestaCP team members: https://forum.vestacp.com/viewtopic.php?f=10&t=16556&start=60#p68594

Are you running vesta control panel? Have you checked it wasn’t an outbound DDoS? Did the provider provide any logs?

DDoS protection