Despite security precautions in place, multiple prominent websites were targeted by Distributed Denial of Service (DDoS) attacks. DDoS attacks can happen to systems and standards that are meant to provide public services. Intrusion detection allows for the quick implementation of countermeasures, evidence collection for legal purposes, and damage limitation when identified early in a DDoS attack. The suggested methodology is based on the maximum data rate matching approach, which compares the maximum traffic request with the stored value to identify abnormal and typical traffic behavior. Then, deny the aberrant traffic by filtering model in the IDS firewall device. The suggested approach reduced network attacks including denial-of-service attacks (DDoS attacks), according to the findings, by assessing the system using parameters for network evaluation and mitigated it using (MDR).