Tag Info

New answers tagged

0

A straightforward approach would be to log the IP address and a timestamp in a logfile, and delete entries after a period of time. Straightforward but phenomenally innefficient. Really you should only be maintaining data for violators in indexed storage independent of your log data (you should probably also be keeping log files but that is seperate ...


0

I would say that DoS attacks are significantly more common, I should also point out that a packet flood is not the only form of DoS / DDoS attack. For example, I know of a fairly popular php product ( a Video encoding / gallery product, not going to name names since this is still undisclosed) which even in its current revision can be massaged correctly ...


0

No. A DDoS attack would be generating thousands of log entries per second, not three entries over the course of 20 minutes. Like usual, your router is simply presenting minor events in the most alarming language possible to scare you into thinking it's doing something.


1

Based on the timestamps (1min 46sec & ~15min gaps between events), this is not a DDoS. This is about par for random DoS attempts against an exposed device on the Internet, such as your Netgear router. A DDoS would show many events flooding in at the same time... you would get lots of logged events per second, or at the very least hundreds per minute.


1

A DoS attack consist of a large amount of 'requests' to the server/service. In the end, the server becomes unreachable for legitimate users. Imagine 2500 people forcing themselves into a city bus, 'normal' travelers will be unable to get on the bus due to the immense amount of traffic. But, to answer your question; A DoS attack has very little to do with ...


2

One easy thing you may do is limiting maximum POST size, as well as upload max file size. For exemple, using PHP, you may tweak : post_max_size integer Sets max size of post data allowed. This setting also affects file upload. To upload large files, this value must be larger than upload_max_filesize. If memory limit is enabled by your configure ...


4

DoS attacks do what you said: they prevent users from accessing the service. DoS by itself does not mean that theft is possible, although sometimes DoS attacks happen in order to distract those running the service from noticing another type of attack or to trigger known remediation processes that the attackers can exploit in order to perform a different ...


10

Ignoring packets is cheap, but if your connection is unable to handle the sheer volume of traffic per second then you're going to fall down hard. The only answer at that point is to filter traffic upstream of you. Because things are distributed and high performance routers really don't like consulting a large routing table just to play whack-a-mole on which ...



Top 50 recent answers are included