Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks

learn more… | top users | synonyms

1
vote
1answer
43 views

Different types of DDoS attacks [on hold]

What is behavior of UDP flood, TCP SYN flood, Ping of Death and Smurf attack?
1
vote
0answers
36 views

Machine compromised [on hold]

Recently, one of our GUI based jump box (ec2-instance) used for deployment to other ec2-machines got compromised, and was used for DDOS attack to other sites. Amazon reported abuse for the same. On ...
1
vote
1answer
56 views

DDOS Server Attacks & Domain Names

I'm currently with a web hosting account whose servers seem to be constantly down due to DDOS attacks. I check my analytics daily and I'm seeing a major surge in fake traffic for several of my URLs ...
26
votes
5answers
3k views

DDOS - security or operational risk?

The chief security officer of a medium sized IT company (400-500 employees) recently released a bulletin in which he stated that DDOS attacks are not a security risk but an operational one. Also I was ...
1
vote
2answers
58 views

Infected employee using office VPN was part of a DDoS attack

Recently, our office VPN was taken down by our ISP after discovering a DDoS attack. Apparently an employee connected to our VPN is infected. There were no logs at the time of the event. Besides ...
0
votes
1answer
81 views

DDoS attacks targeting Android

I am currently studying some Android topics and I've been having difficulties finding answers regarding DDoS attacks. My question is: Are Android devices vulnerable to DDoS attacks or does Android ...
0
votes
0answers
10 views

Probabilistic packet marking content ID field

For Above image: All routers are using PPM. What will be the content ID field if 1) R1 = mark packet, R2= Mark packet, R3 = Not mark the packet. 2) R1 = Not mark packet, R2= Mark packet, R3 = Not ...
0
votes
2answers
65 views

Hijack attacked SSL/TLS-connections?

I think we all heard the news that China used unencrypted HTTP-connections to drive DDoS attacks on targeted websites. Now within the last few months we've learned about three new attacks ...
17
votes
2answers
2k views

Web Developer's responsibility for DDoS [closed]

If my website is targeted for a DDoS attack after I have been paid for completing the website, and I get an angry phone call from the client regarding outage of service, what do I do? It hasn't ...
-2
votes
1answer
66 views

What would a typical packet of a DDOS attack look like? [closed]

In terms of header, size and payload? We've been learning about DDOS attacks in class and they've been telling us all of the abstract ideas, but haven't told us what the actual makeup of the packets ...
6
votes
3answers
643 views

Can the IPS technology in a UTM prevent a DDoS attack?

Does a Unified Threat Management appliance (UTM) with Intrusion Prevention (IPS) enabled have the ability to prevent a DDoS attack? I have read some articles and none of them have a perfect ...
0
votes
1answer
127 views

Is there a layer 1, 2, 5 and 6 DDoS attack? [closed]

I'm doing some research on DDoS attacks, and I seem to only be finding information on layer 3,4 and 7 attacks. When I saw 3/4 and 7 DDoS attacks, I figured they were the most popular, but there were ...
1
vote
0answers
72 views

VPN protection against DDoS [closed]

I am thinking of getting a VON, for DDoS protection and other various things, though what if an attacker knows my real IP already?
2
votes
1answer
94 views

wordpress server visitor log contains a script, what's the risk?

I see this in my WP statistics: Is it safe to click on the link? Under what conditions will the script be triggered?
1
vote
0answers
39 views

Downloadable Autonomous System contact information

When under (a security) attack, it might be useful for the victim to first identify the source IP, then potentially contact the offending ISP. There seem to be plenty of tools for the part where an IP ...
0
votes
1answer
42 views

System backup in case of attack?

My system will be running for a well known insurance company within the UK, it will hold and process a lot of information for claims, brakdowns etc etc. I am worried that the company and the site as ...
0
votes
0answers
37 views

Slow internet, IP Flood? [duplicate]

Lately, I've been getting slow internet. I checked wireshark and noticed I keep receiving in matter of seconds thousands of UDP packets that my computer does not respond to, and here's the twist: ...
-1
votes
1answer
73 views

Slow internet - Worried about spammed packets

got a weird question and I'm not sure if I should even post this on here but I couldn't think of anywhere better to ask. Lately, I've been getting some internet speed issues. I closed literally every ...
0
votes
1answer
79 views

Possible virus hogging bandwidth [duplicate]

My computer might have a virus infection. I have used Norton Internet Security and Power Eraser to scan the computer but it still did not work. The traffic on my PC looks like this I used resource ...
1
vote
1answer
106 views

Mitigating DDOS in P2P systems

In P2P systems where performance and response times are critical individual clients are susceptible to DDOS by publicly exposing their IPs. While there are various mitigation solutions available at ...
10
votes
3answers
505 views

External websites in logs [duplicate]

I have a website, let's call it www.good.com. I've been getting a lot of requests to www.good.com under completely different URLs than www.good.com. I suspect this traffic is also causing some site ...
0
votes
1answer
249 views

Am i getting DDOS attacked?

There has been some weird activity with my wifi router after somebody threatened to ddos me. I am looking at my wifi router's activity logs and i don't know what i am looking for. What happens is my ...
0
votes
2answers
89 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 ...
1
vote
1answer
58 views

Is DDOS more common than DOS?

Which attack takes place more often over the internet? I would have assumed DDOS due to the amount of botnets around today.
1
vote
0answers
76 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
8
votes
1answer
548 views

How is DDoS possible if you're not listening to the DoS traffic?

I've read about DDoS attacks and specially the amplification techniques. For example, the DNS amplification technique where you can send queries to open resolvers pretending to be the victim, then [if ...
0
votes
1answer
110 views

What are the repercussions of a DDoS attack on a website? [closed]

First of all, I'd like to know what exactly a DDoS attack is- my understanding is that it's a collection of infected or "zombie" computers, all controlled by a central computer, with the intent of ...
0
votes
1answer
72 views

DDoS Detection devices available in the market? [closed]

Wanted to know what DDoS detection devices are currently available in the market.My organisation has its dedicated firewalls and routers.But we wanted to know if there are any devices in the market ...
0
votes
1answer
58 views

rate limiting and access filter for web application

I had a requirement of rate limiting and dynamically access controlling access to web application dynamically I want to be able to rate limit access turned on / off dynamically black/white list ...
0
votes
2answers
127 views

Under constant ddos, even after switching 3 differnet routers? [closed]

I started getting ddosed when i pissed some minecraft nerd offt on some twitch chat, which he got banned from, and i never saw him again, but i moved to a hotel for about a week, and i kept getting ...
1
vote
2answers
95 views

Mitigating DDoS With Command of Ports

Is there any type of DDoS where closing or taking full control of all port capabilities would be useful in mitigation of an attack?
-1
votes
1answer
586 views

Azure Based DDOS Mitigation, Azure Based Firewall?

I'd like to mitigate DDOS attacks, for an Azure vm server (just TCP ports 80 and 443). Azure appears to be a great solution. I can't find any Azure documentation, as to if there is an Azure ...
2
votes
1answer
69 views

Do the firewall hardware specifications have to be better than the network it protects?

If I need a bodyguard I'll have to hire someone whose muscles are much tougher than mine. If a server can't handle a DoS/DDoS attack because it consumes it's resources does this mean the firewall has ...
0
votes
0answers
145 views

Is there any method to prevent/trace ddos attack?

I have a debian linux server which run a few online game services. I have some competitors in this area and i think one of them is behind the ddos attacks. I have full access to the router, so I set ...
5
votes
3answers
431 views

DoS by consuming all hosting trafic

Given a small website hosted on a small data plan, is it possible for someone to keep doing requesting for my website URL or just an image hosted on my website that will consume all my permitted ...
1
vote
2answers
68 views

Hosting multiple websites on the same server - Prevention from DoS

I have an server which contains around 4 instances hosted on it. I am aware that if a DoS attack happens on one of the instances it will take down all the other instances too. How to prevent such a ...
-1
votes
1answer
58 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
0
votes
2answers
150 views

Udp ddos prevention

Okay,if i wanted to prevent a udp flood are these 2 solutions sufficient: -Say that i have only one port open like port 80 however i never use udp interactions what if i blocked the udp port leaving ...
0
votes
3answers
127 views

Theoretical game server DDoS prevention question

I may not understand how DDoS attacks work at this point, but Im just wondering if this would work for a game server? IF each time a new connection is attempted and the packet or connection type is ...
0
votes
3answers
283 views

How does blacklisting an IP using a firewall protect against DDoS attacks?

I just read that to protecting a server against a DDoS attack involves blacklisting IP addresses. What does the term blacklisting mean? What does it mean for a firewall to drop a connection? How ...
0
votes
1answer
61 views

What are features of a suitable tool for tracking and reporting security incidents? [closed]

What are features of a suitable tool for tracking and reporting security incidents? Is it a bad idea to have one central repository for tracking all types of incidents, from helpdesk issues, to ...
-1
votes
2answers
142 views

Is constantly downloading large amount of files from a web server considered DDoS?

For example, there's like a million files stored on a website (publicly, anyone with a link can get it), and I wrote a program to retrieve it one by one. Since obviously my program pings the server ...
0
votes
1answer
86 views

Ongoing DDoS: What is the next step after being able to handle it?

Our websites have been the target of an increasing DDoS, the reason is unknown. Right now, we have taken enough precautions to reliably identify and filter the problematic requests (approx 1 mio/day ...
2
votes
1answer
169 views

What is this attacker trying to accomplish?

My client is who is running a recent version of vBulletin is getting lots strange activity and I'm at a loss to explain what the attacker is trying to accomplish. The attacker registers a fake user ...
0
votes
0answers
85 views

Blocking IP After multiple connection with Netsh advfirewall to mitigate DDos

Hello I wanna block Ip address if they exceed 20 connections with port 80 TCP for HTTP Server. I wanna do this using Netsh advfirewall, In Linux I use IPTables: iptables -I INPUT -p tcp --dport ...
0
votes
2answers
539 views

Am I allowed to DDOS my own server?

I have bought a server and used it to host some game servers or my website. Now I am visiting a computer secruity course and I would like to test some of the presented attacks. Am I allowed to for ...
23
votes
3answers
4k views

Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?

For homework, I coded a TCP packet with raw sockets. So I was also able to change the source IP address to whatever I wanted. So why can't someone just make a program, which sends millions of these ...
-5
votes
1answer
138 views

How to avoid DDoS Attack [closed]

I buy my train ticket from our railway local web site. When ticket open for sale on web site then web site original traffic remain 50 (Just an example). Our railway web site is attacked by DDoS for ...
3
votes
2answers
281 views

If I send 4mbps of data to a friend with 4mbps connection, will I DDoS him?

Suppose my friend has a connection of 4mbps. If I just send him 4mpbs of random data with my server, wouldn't it block his connection? Even if the router has firewalls and closed ports, isn't enough ...
48
votes
5answers
18k views

How do major sites prevent DDoS? [duplicate]

As far as I know, I have never heard of or seen any large scale web sites like Amazon, Microsoft, Apple, Google, or Ebay ever suffer from DDoS. Have you? I have a personal philosophy that the bigger ...