Web services are the most widely used technology today. SOAP messages are the building blocks of web services. Since web services mostly deal with confidential data they must be protected from intruders. Intruders can be of any form. They can be a person or a program. One of the most adverse attacks is the distributed denial of service attack (DDoS). This kind of attacks is normally targeted at a particular service provider to exhaust the network and system resources of the provider. The proposed framework will restrict the connection attempts on a single user account so that it makes the job a little difficult for the hacker to hack information and will also monitor the size of the input soap message so that it does not consume too much of system resources.