New answers tagged detection
Those DDOS attacks were performed using a botnet. A botnet is a network of consumer PCs infected with malware. Such botnets are routinely used for a lot of activities, most of them illegal or at least ethically questionable. For that reason the people who control a botnet do their best not to get found. They usually control their botnets using obscure ...
A DDOS-attach is typically executed by sending UDP-messages with a spoofed source-IP to a service which will send a reply to the source-IP given in the incoming message. For example: if IP 188.8.131.52 is running a DNS-server, sending a DNS-query to 184.108.40.206 as an UDP-packet with source-IP set to 220.127.116.11, will result in the DNS-server sending a reply to 18.104.22.168. ...
One reason is that the attackers are using bots which are victims PCs so there is no one source of the attack. Those bots are usually controlled using a Command & Control server, or simple IRC rooms, private Twitter feeds, etc.
There really isn't a command for this. Your best bet is to script a scan every few minutes, or find an app which functions more like a spectrum analyzer.
Top 50 recent answers are included