Tagged Questions
1
vote
1answer
86 views
Botnet Attempting to Login to Website
Our server has recently become a target of what appears to be a botnet attack. The first indication was an insane amount of traffic to one of our client's websites - so heavy that the server entirely ...
4
votes
6answers
383 views
how to mitigate a DDoS from botnet on your website that comes from random IPs
I am wondering how do you mitigate a ddos attack which is coming from a botnet and hitting random URLs on a website.
If there was a consistent URL it was hitting then it would be fairly simple, and ...
4
votes
6answers
273 views
Bot detecting by considering request inter-arrival time
If there are some chances to detect a bot by considering the users page viewing time, is it possible to measure this time?
When a user request for a page (page request), browser request for several ...
3
votes
3answers
174 views
How similar are bots regarding their HTTP GET request?
Lets assume a botnet is attacking a website by HTTP GET flooding. To find the bots, the only way seems to be finding the similarities of the HTTP GET requests considering the URL and header fields, ...
0
votes
1answer
666 views
Monitor incoming TCP/UDP flood attack and graph it
I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results.
I have some VPSes that will perform a ...
4
votes
4answers
847 views
Block all BotNets and TOR addresses from accessing our site
I've heard that many DOS attacks and general "black hat hacking" attempts occur over the TOR network. Is it possible for me to dynamically block source IP's by their presence in a BotNet or similar ...
7
votes
5answers
7k views
How do I know if my computer is being used for a botnet-based DDoS attack?
A botnet is a collection of compromised computers, each of which is
known as a 'bot', connected to the Internet. When a computer is
compromised by an attacker, there is often code within the ...
8
votes
4answers
2k views
Looking for botnet IP address feeds to protect against DDoS
I would like to get a live feed of botnet IP addresses delivered from a service and block them under certain conditions. Preferably community based/open source but open to looking at worthy commercial ...
