Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks

learn more… | top users | synonyms

1
vote
2answers
70 views

How can perpertrators of denial of service attacks, determine the impact their attack has had?

Although I know how a user could mitigate Dos attacks and detect their presence e.g. checking packets received and sent, comparing current CPU usage to normal, comparing network usage to normal etc. ...
1
vote
2answers
86 views

Hosting multiple websites on the same server - Prevention from DoS

I have an server which contains around 4 instances hosted on it. I am aware that if a DoS attack happens on one of the instances it will take down all the other instances too. How to prevent such a ...
1
vote
1answer
369 views

Root/Naked domain and DDOS

Some services like Github has DDOS mitigation measures for their root/naked domain, but not other subdomain(s). What so special about the root domain concerning the DDOS attacks? [1] ...
1
vote
1answer
285 views

DNS zone size overload?

Is it possible to DOS DNS by creating custom dns zones with lots of text records in them so that the size of the DNS zone is in the order for example 100 Gigabyes, and then query all the dns records ...
1
vote
1answer
234 views

What are the hardwares used to protect against a DDoS attack on Network layer

What hardware is used to prevent a DDoS attack on a network layer? This question is for my project which I am doing. I have a game server and I need to simulate an attack - an SYN flood. So what ...
1
vote
2answers
2k views

How to mitigate SIP Reflection Attacks?

SIP has a practical need to be widely available, but its services are prone to being spoofed as reflectors used in DDoS attacks. A freeswitch server I manage has seen heaps of registration requests ...
1
vote
1answer
72 views

DDoS amplification attacks

I have been learning DDoS atacks and how to be protected from it. But I have a question: What are the common services being misused in UDP amplification DDOS attacks?
1
vote
1answer
117 views

What is the role of IP spoofing in DDoS attacks?

I've read that IP spoofing is often used in denial of service attacks, and I've also just recently read about ingress filtering, which attempts to use blacklisting to filter out spoofed IP addresses ...
1
vote
1answer
122 views

Must an attacker using a Smurf attack be on the same network as the victim?

I'm learning about Smurf Attacks. Since they need to use a broadcast address, doesn't that mean they can't work over the internet? For example if an attacker sends a router the packet with the ...
1
vote
2answers
85 views

Website Visited by Unresolved Ip

My Website is flooded with unknown visiters Awstats says that my website getting thousands of hits in few seconds. I am using robots.txt and .htaccess, but the problem stays there. Please help me ...
1
vote
1answer
118 views

kernel: Intrusion disconnecting me

I've read about it a little but I'm concerned. It never happened before and for last 5 hours my router gets kernel: Intrusion alerts similar to these: As soon as the kernel: Intrusion is detected, ...
1
vote
1answer
117 views

Different types of DDoS attacks [closed]

What is behavior of UDP flood, TCP SYN flood, Ping of Death and Smurf attack?
1
vote
1answer
7k views

Am I getting DDOS attacked?

There has been some weird activity with my WiFi router after somebody threatened to DDoS me. I am looking at my WiFi router's activity logs and I don't know what I am looking for. What happens is my ...
1
vote
1answer
72 views

Is DDOS more common than DOS?

Which attack takes place more often over the internet? I would have assumed DDOS due to the amount of botnets around today.
1
vote
1answer
160 views

What's the typical approach to caching invalid authentication attempts?

Clients (actually software pieces developed by some random dudes all over the Internet) are authenticating on a web server using "basic" authentication scheme and to do so they are passing the ...
1
vote
1answer
87 views

DOS attack to increase packets received from a single request?

Is there any attack out there that can be implemented where a single request to a server i host for example responds by sending the same file say 20 times back ? the idea behind the attack is to DOS ...
1
vote
3answers
158 views

What are some good ways to prevent a malicious visitor from maxing out our customer's API maximum allowed service calls?

We run an API service. We gave our customer a package for max limit of 12000 API calls / day. He reported to us that a user has been on purposely visiting his web page 12,000 times a day in order to ...
1
vote
1answer
154 views

What types of hacking attacks happen alongside a DOS or DDOS attack? [closed]

I'm trying to find some good material on this topic for a paper I'm trying to write for class. Any and all help is very much appreciated.
1
vote
0answers
43 views

What attack-methods for HTTP/L7-Attacks (Reflection and Co.) are you aware of [closed]

I know the following and would like to collect some more methods on how to attack websites and services via misused 3rd-party-applications: Wordpress PingBack/xmlrpc (seen a lot and wildly used) ...
1
vote
0answers
29 views

SYN Flood from fixed spoof IP but receive only one packet

Why i flood many packet to a victim from 1 fixed IP+Port. But on Victim i netstat see only one SYN_RECV packet
1
vote
0answers
96 views

How to keep my VPS server up on Hulk.py attack

This question in not duplicated, I tried everything that was published on stackexchange websites, but could not fix my problem. I have a web server. OS: Ubuntu 15.10 Configured on Apache2 Ram: 1.5 GB ...
1
vote
0answers
48 views

How to find which domain in my VPS triggered a DDoS attack with WP xmlrpc

Today, my data center suspended my VPS for DDoS attack reasons. They say one of my clients, that has WordPress website, started a DDOS attack to another websites using xmlrpc. But I don't know which ...
1
vote
0answers
102 views

What is an Origin Error Attack?

Similar to my previous question here, however I thought it was best to ask two separate questions rather than combining them into one. From The Forrester Wave™: DDoS Services Providers, Q3 2015 ...
1
vote
2answers
130 views

What danger can come from D-DoS over VPN

Every time I use VPN, I get a message to notify me to be sure that my PC is 'healthy' from pots infections. Also I've read in this article to stay away from that. My question, what damage could ...
1
vote
0answers
31 views

iptable ip_conntrack_max testing

I was trying to understand how ip_conntrack_max works so i have created two VM and set ip_conntrack_max to 10000 I used hping to open 10000 udp connection on VM using following command hping --udp ...
1
vote
0answers
16 views

Probabilistic packet marking content ID field

For Above image: All routers are using PPM. What will be the content ID field if 1) R1 = mark packet, R2= Mark packet, R3 = Not mark the packet. 2) R1 = Not mark packet, R2= Mark packet, R3 = Not ...
1
vote
0answers
105 views

VPN protection against DDoS [closed]

I am thinking of getting a VON, for DDoS protection and other various things, though what if an attacker knows my real IP already?
1
vote
0answers
42 views

Downloadable Autonomous System contact information

When under (a security) attack, it might be useful for the victim to first identify the source IP, then potentially contact the offending ISP. There seem to be plenty of tools for the part where an IP ...
1
vote
0answers
151 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
2answers
138 views

Mitigating DDoS With Command of Ports

Is there any type of DDoS where closing or taking full control of all port capabilities would be useful in mitigation of an attack?
1
vote
0answers
76 views

Ubuntu server seems compromised for a DDOS attack [duplicate]

I have this VPS Ubuntu v12.04 Server running with DigitalOcean. Zpanel/Apache/PHP stack was installed on the Server. For the past few days it was occasionally down. Initially, I didn't know what ...
1
vote
0answers
975 views

Akamai or Incapsula (or other) for CDN with DDoS Protection? [closed]

One of our clients is launching a new site and I've been tasked with making a short overview of the advantages/disadvantages of Akamai, Incapsula or other CDN providers who are strong with DDoS ...
1
vote
1answer
838 views

Orbit Downloader botnet program removal [solved]

Recently (shortly after midnight on 10/8/2013) I installed and ran Orbit Downloader. After learning that the latest version (4.1.1.8) has a botnet-like module included I immediately stopped the ...
1
vote
0answers
533 views

Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]

I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html I was reading... ...
1
vote
2answers
141 views

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it ...
1
vote
5answers
88 views

Does services provided by different companies for DDoS protection work well?

Is it necessary to use any DDoS service provided by different web hosting provider and other people? We know, they are running their business to provide security to thousands of web property. They are ...
1
vote
5answers
337 views

DDOS Server Attacks & Domain Names

I'm currently with a web hosting account whose servers seem to be constantly down due to DDOS attacks. I check my analytics daily and I'm seeing a major surge in fake traffic for several of my URLs ...
0
votes
3answers
189 views

Why does an overload of requests give one root access all of a sudden?

There's this saying that using a DDOS-attack, people first attack a server using millions of concurrent requests and by doing that they miraculously gain access to the server. How does this work? Why ...
0
votes
4answers
308 views

How can I remove an unknown device from my wifi network?

I have an OnHub (from Google), and there is a device I don't know on my wifi network. Is there some way for me to kick it, or DDoS it, whether through some command line command on windows or ubuntu, ...
0
votes
4answers
405 views

What can a zombie computer feasibly install and run?

I'm experimenting with a Proof of Work system that tries to force the use of a browser in order to solve the client puzzle. Basically, instead of just handing off the puzzle as hash with a well known ...
0
votes
1answer
4k views

dns reflection attack vs dns amplification attack

Over the past few weeks I have heard discussions about a DNS reflection attack and a DNS amplification attack. Is there truly a difference between the two or are people just using 2 different names ...
0
votes
2answers
134 views

How hackers implemented DDoS attack with 602 Gbps?

Everybody's heard about DDoS attack with 602Gbps Bandwidth that crashed BBC site, But is really Botnets and hacked servers can implements an attack in this scale ?
0
votes
1answer
818 views

defend against LOIC Hive Mind attack

Other than client puzzles, what are some things a website can do to defend itself against a LOIC Hive Mind attack? The Low Orbit Ion Cannon (LOIC) is an attack tool which features a user-friendly GUI ...
0
votes
3answers
2k views

A DDOS attack by uploading a few hundred large files - whats stopping anybody?

I am new to the IT Security field and am essentially a developer as opposed to a networking person hence the question may be a dumb one I am writing a REST service exposed to the internet which ...
0
votes
3answers
2k views

SSL vs TLS, which is less vulnerable to DOS attacks?

When I learned TLS does not allow a connection to be created until it is has finished a secure handshake, i figured that would make it better for preventing DoS attacks. However, all I seem to find ...
0
votes
2answers
188 views

Under constant ddos, even after switching 3 differnet routers? [closed]

I started getting ddosed when i pissed some minecraft nerd offt on some twitch chat, which he got banned from, and i never saw him again, but i moved to a hotel for about a week, and i kept getting ...
0
votes
2answers
243 views

Is constantly downloading large amount of files from a web server considered DDoS?

For example, there's like a million files stored on a website (publicly, anyone with a link can get it), and I wrote a program to retrieve it one by one. Since obviously my program pings the server ...
0
votes
3answers
176 views

Questions about ddosing?

Suppose a website is hit by a 500 Mbps DDos, and then the DDos stops for a second or so; does the website recuperate?
0
votes
2answers
272 views

Solution for traffic capturing from router

i'm a newbie and i'm having a problem that i can't find it by google. I'm researching abbout DDoS detecting method now. As we can see that nowadays people often analyze networking traffic from router ...
0
votes
3answers
187 views

DDOS protection for instant messenger server

I developed an instant messenger which uses TCP ports for its communication, and hosted the server application on a VPS account from some hosting company, but the first day I got attacked by a ...