New answers tagged

3

It may be possible, but attackers usually relies on an amplification attack to ensure the traffic coming from the botnet is much more effective. Amplification attacks are easily implemented on udp protocols where the source IP can be trivially spoofed as there is no three way handshake to establish a connection. If a udp protocol allows you to receive a ...


2

Botnets are usually part of a collection of hacked servers, but there are also websites / programs where people host DDoS platforms so they can "participate," such as the Low-Orbit Ion Canon. Regarding DDoS attacks, the bandwidth of the attack is only limited by the size of the bot net, and their combined available bandwidth. There's nothing magical about ...


0

This problem is inherent in the system and you will never be able to really prevent this. What one can do to prevent the inclusion of images in other domains is to process every request and check the referer header for the source domain. When you enter a URL in your browser an press enter the broweser will first download the HTML file and then will download ...


1

Not sure what you're trying to ask, but I'll try to answer to the question I think that you might be asking. As long as web technologies allow fetching resources from other domains this kind of DDoS attack is possible. Even if the remote server doesn't serve anything back, it must process the requests (eg. uses server resources). This kind of attack would ...


8

It turns out my previous assumption was correct. These DDoS "attacks" are actually a side-effect of a Makost[dot]net-style botnet and is NOT the intention of the attacker (in fact, they seem specifically designed NOT to cause a disruption of service which would make us aware of their activity). The attacks are in fact trying to gain access to my servers in ...


4

found the answer here Use CloudFlare IP addresses to your advantage Take action to prevent attacks to your site during peak season by configuring your firewall to only accept traffic from CloudFlare IP addresses during the holidays. If you only accept CloudFlare IPs, you can prevent attackers from getting to your original IP address and knocking your site ...


0

Depending. If a DDoS of the size of just 1 byte over a half of the internet is launched on the rest, the entire Internet will be down. But that is almost impossible. Normal DDoS attack can be absorbed but not stopped. In the example above by Tom Leek, the security guy can handle only so much people, if the entire world come flooding in, they can do ...


0

You could send a request to a large list of websites. If you spoofed your IP address as the target IP address, then all of the websites' responses would go to the target IP address, potentially creating a DDoS. It would be distributed, because lots of servers are all sending the response.


0

You usually won't see DDoS traffic on your analytic page. That's because GA and others rely on Javascript, while the vast majority of DDoS Bots don't support JS. For referer spam such as buttons-for-websites, semalt and others, you need some bot access control. more information available here. Disclosure: I work @ Imperva Incapsula, a CBSP which provides ...



Top 50 recent answers are included