Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks

learn more… | top users | synonyms

0
votes
2answers
124 views

How to deal with UDP bandwidth exhaustion DDoS attacks?

I am building a service, which will use UDP. It will run on Amazon AWS - in the firewall they provide, I can block everything except that one UDP port my service will run. The only thing I'm ...
0
votes
2answers
112 views

Repeated “Dos Attack” from remote IPs

I've been having some weird issues with a home network, and it seems to me like I have some vulnerability I don't know about. To be honest, though, I'm not a big network/security guy and I kind of ...
0
votes
1answer
55 views

Following strategy using DDoS mitigation service - UDP bandwith exhaustion attack from spoofed IPs

I need to defend against receiving a massive spam of UDP packets from random spoofed IP addresses. I would make it this way: In my protocol, every UDP packet contains username and password. Firewall(...
-1
votes
1answer
100 views

What anti-DDoS solutions for Windows are there?

I would love to know, If there is a way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the almighty iptables, but I wonder if there an equivalent for Windows.
-2
votes
1answer
3k views

Azure Based DDOS Mitigation, Azure Based Firewall?

I'd like to mitigate DDOS attacks, for an Azure vm server (just TCP ports 80 and 443). Azure appears to be a great solution. I can't find any Azure documentation, as to if there is an Azure firewall,...
3
votes
0answers
1k views

cisco asa syn flood detection and response not working

I have a Cisco ASA 5510 (ASA Version 8.3(2)) that has been getting a syn flood attack on it (or more accurately through it - targeting a host behind it) a couple of times a day for the past few days. ...
2
votes
0answers
60 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
2
votes
0answers
81 views

Securing API against DDoS attacks

I have designed a backend service which is only accessible via a custom REST API. As I understand, services such as CloudFlare are designed to protect HTTPS traffic, and do not apply for custom APIs. ...
1
vote
0answers
37 views

SYN Flood from fixed spoof IP but receive only one packet

Why i flood many packet to a victim from 1 fixed IP+Port. But on Victim i netstat see only one SYN_RECV packet
1
vote
0answers
113 views

How to keep my VPS server up on Hulk.py attack

This question in not duplicated, I tried everything that was published on stackexchange websites, but could not fix my problem. I have a web server. OS: Ubuntu 15.10 Configured on Apache2 Ram: 1.5 GB ...
1
vote
0answers
58 views

How to find which domain in my VPS triggered a DDoS attack with WP xmlrpc

Today, my data center suspended my VPS for DDoS attack reasons. They say one of my clients, that has WordPress website, started a DDOS attack to another websites using xmlrpc. But I don't know which ...
1
vote
0answers
103 views

What is an Origin Error Attack?

Similar to my previous question here, however I thought it was best to ask two separate questions rather than combining them into one. From The Forrester Wave™: DDoS Services Providers, Q3 2015 ...
1
vote
0answers
33 views

iptable ip_conntrack_max testing

I was trying to understand how ip_conntrack_max works so i have created two VM and set ip_conntrack_max to 10000 I used hping to open 10000 udp connection on VM using following command hping --udp -...
1
vote
0answers
17 views

Probabilistic packet marking content ID field

For Above image: All routers are using PPM. What will be the content ID field if 1) R1 = mark packet, R2= Mark packet, R3 = Not mark the packet. 2) R1 = Not mark packet, R2= Mark packet, R3 = Not ...
1
vote
0answers
43 views

Downloadable Autonomous System contact information

When under (a security) attack, it might be useful for the victim to first identify the source IP, then potentially contact the offending ISP. There seem to be plenty of tools for the part where an IP ...
1
vote
0answers
158 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
0
votes
0answers
62 views

From a topological point of view, are there any network structures which weaken a DDoS attack?

I am aware that I am doing some abstractions here (link-layer-3/link-layer-2 and router topology comparison, for instance). However, I wonder if there are any network structures (so-called graphlets/...
0
votes
0answers
154 views

Wordpress pingback attack

I am getting Wordpress pingback attach on my server. I tried to put if condition on nginx to block deny all requests that contains "Wordpress" in the header. It works fine but still nginx get millions ...
0
votes
0answers
921 views

What are the most popular DNS amplification attack tools for Windows and Linux?

I would like to test my edge-router firewall rules against some DNS amplification attack traffic. I could run some DNS lookup utility in an endless loop, but maybe there are some dedicated utilities ...
0
votes
0answers
151 views

Deny IP spoof from on ASA destination

on Cisco ASA I am seeing lost of logs like following (127.108.61.90) to 190.93.249.93 on interface inside (127.30.171.61) to 190.93.249.93 on interface inside (127.105.54.108) to 190.93.248.93 on ...
0
votes
0answers
33 views

Options to protect an outbound initiated connection IP?

Consider a service that has 3 separate organizations in a SaaS model. The end user(#1) connects to the first provider(#2) and then initiates a function from within the #2 that connects directly to #3....
0
votes
0answers
45 views

Behaviour of DNS query packet

When the configured name server resolver is not reachable, the query packet will retransmitted after certain t times (in windows, every 1 seconds until 8 seconds,max). The behaviour of the legitimate ...
0
votes
0answers
466 views

Is there any method to prevent/trace ddos attack?

I have a debian linux server which run a few online game services. I have some competitors in this area and i think one of them is behind the ddos attacks. I have full access to the router, so I set ...
-1
votes
0answers
21 views

How Common is the Microsoft ASN?

I'm working with a DDoS mitigation service, and it keeps track of the source ASN of what it considers an attack. Several times, a huge amount of traffic has come to one of my customers from an IP ...