Questions tagged [ddos]

Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks

21 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
228 views

What is the meaning if all IoT hacked by Mirai all over the world identify themselves on my server since 15 days in the rhythm of 180 unique IoT/h?

In the past 15 days 57,000 unique Mirai IoT devices have attempted to connect and it’s constantly growing (180 new IPs/h). 88.9% come one time and never come back. We have checked. It’s Mirai botnet, ...
2
votes
2answers
80 views

Is there any working solution against large SYN Flood request?

Fighting against a large SYN Flood attack that is happening every 2 minutes repeatedly. During attack, number of syn-rcv is between 290-550 ss -n state syn-recv sport = :80 | wc -l CPU 100% (htop ...
2
votes
0answers
106 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
1
vote
2answers
90 views

How to secure an email subscription endpoint?

I have a simple static webpage that lets users sign-up for a newsletter. Once they enter their email address, it gets sent to a public endpoint (AWS Lambda). This lambda function forwards the email ...
1
vote
0answers
54 views

How are memcached servers used to perform a DDoS attack?

If I understand it correctly memcached servers respond with a larger packet as response to a user request. I spoof my address to 1.1.1.0 (memcached servers). Now that I, masquerading as the memcached ...
1
vote
2answers
422 views

How fill up a gig interface bandwidth with hping3?

I've been trying to test our software against DOS attacks. So, I used 'HPing3' but it just fills up 10-11M of my interface's bandwidth! I ran the tool 40 times, I mean 40 hping3 processes, ...
1
vote
0answers
123 views

Will More vCPU's and RAM Help Protect Against Some Smaller Scale DDoS Attacks?

Obviously having more vCPU's (virtual CPU's) and more RAM by them self won't be able to alone help stop and/or prevent a DDoS attack, but let's say after a DDoS attack is finished and/or slowing down ...
1
vote
0answers
172 views

How to find which domain in my VPS triggered a DDoS attack with WP xmlrpc

Today, my data center suspended my VPS for DDoS attack reasons. They say one of my clients, that has WordPress website, started a DDOS attack to another websites using xmlrpc. But I don't know which ...
1
vote
0answers
85 views

iptable ip_conntrack_max testing

I was trying to understand how ip_conntrack_max works so i have created two VM and set ip_conntrack_max to 10000 I used hping to open 10000 udp connection on VM using following command hping --udp -...
1
vote
0answers
20 views

Probabilistic packet marking content ID field

For Above image: All routers are using PPM. What will be the content ID field if 1) R1 = mark packet, R2= Mark packet, R3 = Not mark the packet. 2) R1 = Not mark packet, R2= Mark packet, R3 = Not ...
0
votes
0answers
28 views

Why does a tool that analyses unidirectional traffic provide conditions for a Fake Session attack?

When I read this document about Fake Session Attack: Bearing in mind that today most networks have asymmetric traffic routing (in which incoming and outgoing packets are being sent via different ...
0
votes
1answer
197 views

Server is sending large amounts of encrypted UDP traffic

The hosting company of a client has shut down their Windows server twice in the past week because the server seems to be sending out massive amounts of outbound encrypted UDP DNS traffic. I have now ...
0
votes
0answers
49 views

.htaccess File Changed - Question About Possible Breach Or Default Defense Mechanism

Today I got reports about one of my websites becoming inaccessible. I've come to learn that at the time we were under DDOS attack. After getting through that, the website started throwing a ...
0
votes
0answers
32 views

Fundamental difference in security research in Cloud platform VM and normal machine

I am trying to study the effects of various network based attacks in an Openstack Cloud environment that I have setup with few machines. However, what would be the fundamental difference between a VM ...
0
votes
0answers
128 views

Unkown attack on linux server wordpress website

I have a WordPress site. Recently under a serious DDoS attack. For this WordPress site I use nginx, varnish and apache in the backend. A part of access log shows this: 24.41.213.36 - - [23/Jun/...
0
votes
0answers
27 views

Which metrics can be considered in the context of DDoS-similarity analysis?

What data should be collected if i want to bind two different DDoS-attacks? In example i want to build a model, which will calculate the similarity of two DDoS-attacks. The basic metrics should be: ...
0
votes
1answer
105 views

Random accounts being created, why?

I have a small business that provides an online service, like a CRM service for businesses. Over the last few weeks, I've had 20 - 30 random accounts created. (this is unusual as I might get one or 2 ...
-1
votes
1answer
71 views

Security mechanism for quick checkout (without cookies/session id)

I am implementing quick checkout in my e-store. Customer only have to enter email and phone number to make an order, system checks whether customer with such fields already registered, if not it ...
-1
votes
2answers
5k views

Azure Based DDOS Mitigation, Azure Based Firewall?

I'd like to mitigate DDOS attacks, for an Azure vm server (just TCP ports 80 and 443). Azure appears to be a great solution. I can't find any Azure documentation, as to if there is an Azure firewall,...
-2
votes
1answer
164 views

Site receives high amount of random requests

[Question moved from stackoverflow] Since about two weeks, a site is receiving an increased amount of requests for nonexisting pages. The calls are for existing pages but with a prefix of 5 random ...
-2
votes
1answer
291 views

What anti-DDoS solutions for Windows are there?

I would love to know, If there is a way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the almighty iptables, but I wonder if there an equivalent for Windows.