Questions tagged [ddos]

Distributed Denial Of Service (DDOS) is the intentional paralyzing of a computer network by flooding it with data sent simultaneously from many individual computers (so-called zombies) which are used to stage DDOS attacks

Filter by
Sorted by
Tagged with
74
votes
4answers
12k views

Did I participate in the recent DDoS attacks on Dyn's DNS service?

It was reported that the recent large scale DDoS attack affecting multiple websites in the US was done by hacking 10s of millions of devices and using them for the attack. How can one in general know ...
3
votes
5answers
2k views

Could IOT Botnets be Stopped by Static IP addressing the Devices?

I followed the recent IOT DDOS against Dyn and noticed that the attack seemed have three rounds of attack and mitigation. Since I'm not well versed in infosec I did some reasearch around DDOS ...
2
votes
2answers
419 views

Hping and spoofed DDoS (or DoS?) what do -U and -P mean?

Recently I set up 2 virtual machines with Mint 18 inside, to practice and analyze some DDoS attack types. For now on, I'm using hping3 to perform some simple DDoS (or I should say, DoS attacks, since ...
5
votes
1answer
757 views

DNS Flood using DNS Amplification?

So, a DNS Flood is when you DDOS a DNS Server, and a DNS Amplification is when you use the DNS Server to execute a DOS attack (I think). Based on recent events (the attack to Dyn's DNS service) I was ...
4
votes
2answers
1k views

Is it possible my Computer is part of a DDoS network, is there a way to tell? [duplicate]

Title has it all. I consider myself a power user and a tiny bit more knowledgeable than the average Joe. Still I wonder sometimes if my computer might be part of a botnet without me knowing. Is there ...
6
votes
3answers
446 views

Did the October 21, 2016 DDoS attack on Dyn's DNS service cause Bandwidth Exhausion?

A recent attack on Dyn's DNS services affected several major websites last Friday, Oct 21, 2016. I would be interested to know if this was Bandwidth Exhaustion, or if it was mainly load on the server ...
10
votes
5answers
6k views

Is it illegal to DDoS a phishing page? [closed]

I used to go on a site called blockchain.info For storing bitcoins but today when I entered the URL I was redirected to a phishing page. I have entered all my information and it was obviously sent to ...
4
votes
1answer
3k views

Can phone services be affected by DDoS attacks?

Phone lines run on servers, people like to overload servers with botnets. Can a phone line be affected by a DDoS attack? Realistically, there are so many ways to make a phone botnet, so would a ...
53
votes
6answers
8k views

Why don't browser DNS caches mitigate DDOS attacks on DNS providers?

Why are the recent DDoS attack against DNS provider Dyn, and other similar attacks successful? Sure a DDoS attack can bring an entity down, and if that entity controls DNS servers then queries to ...
5
votes
1answer
549 views

How to access sites whose DNS server is under attack?

As many of you noticed, last night's DDoS attack against Dyn.com made many major services unavailable, including Twitter and Spotify. Spending one Friday evening without Twitter was enough and I want ...
4
votes
2answers
223 views

Why would attacking a DNS server have the affects it did?

I'm somewhat confused as to the technical details of the Oct. 21 DDoS. Dyn is a company, which according to wikipedia is an Internet performance management company, offering products to monitor, ...
5
votes
1answer
311 views

Why did the sites that went down in the Dyn DDoS attack (Oct 2016) not have secondary DNS?

Or if they did, why didn't it help them? (Edit: by "secondary" I mean "not at Dyn")
8
votes
3answers
939 views

Why was October 2016 Dyn attack limited to East Coast?

Maps on the Internet showed that the focus of the Dyn DDoS attack was on the East Coast of the US. But why? My DNS provider is not on the East Coast and I am located in Colorado. My DNS is 8.8.8.8 (...
100
votes
11answers
29k views

DDoS: Why not block originating IP addresses?

I'm a moderator of a major bulletin board. When a baddie shows up, we block their IP address; it works, at least until they find a new one. Why can't a protocol be developed for the world's routers to ...
6
votes
1answer
476 views

How was DDoS attack on Dyn made?

https://krebsonsecurity.com/2016/10/ddos-on-dyn-impacts-twitter-spotify-reddit/#more-36727 A DDoS attack on Dyn, on 21st Oct 2016, caused outages for Twitter, SoundCloud, Spotify, Reddit, etc. on the ...
8
votes
3answers
758 views

When detecting a DDoS attack, do you just block that with your firewall or do you report it to the source providers?

We are receiving a large load of connections, over 10 million per day, over multiple ports (80, 443, 8080, 8888, and 4072). This has been going on for 4 days now and it does not look like it is going ...
-2
votes
1answer
2k views

Protect against DDoS attacks? [closed]

I am going to make a game server which involves port forwarding, I also heard that people can DDoS attack. When they DDoS attack, what is it that they attack, the internet or the computer? Also, what ...
1
vote
1answer
145 views

What is the purpose of this attack?

The following is an excerpt of an apache access log output during the last 24 hours. http://pastebin.com/imtJfvLE Notes: The requests come from more than 5733 unique IP addresses ~2 requests per ...
1
vote
3answers
108 views

How can cloud service providers know that they are being used for launching a DoS?

Can cloud service providers like Amazon, Microsoft etc. detect that they are being used to launch a DoS/DDoS against any target? If yes, how? I am guessing that if they attack a single machine, a ...
0
votes
1answer
593 views

Restrict access to public URL many times

I have such situation. Imagine there is a public service (URL). What we don't want, is for someone, to be able to access this URL many times in short period of time, because they will be able to block ...
-2
votes
2answers
166 views

Is there a specific type of website that is more vulnerable to DDOS attacks?

I basically want to know if DDOSing using a single pc with 20 threads on HOIC or LOIC be different based on sites? There is a project website I made which goes down in a minute after the DDOS starts. (...
1
vote
2answers
2k views

Is port in UDP flood necessary? HTTP flood-down because? UDP, SYN and ICMP flood methods

I have questions about DDoS attacks. In flood scripts, the script sends UDP packets to "ip.address:random.port" Why It doesn't use only the IP? Is port necessary? If someone is HTTP flooding a ...
2
votes
3answers
22k views

Constant Dos attacks on my router appear to be taking out my internet connection

So I'm a noob here and have been doing some research on why my internet (cable modem) locks up about once or twice a week ever since installing a Netgear N900 router a few months ago. After asking ...
0
votes
2answers
856 views

Reverse DoS attack?

Let's say I have a 5mpbs up and 50 mbps down-link. I'm running a web-server with one quite large resource (it's about 1 megabit, not byte). What is there to stop a malicious individual from running 5 ...
59
votes
2answers
16k views

How can ISPs handle DDoS attacks?

How can an ISP with low bandwidth like 50 Gbps handle a DDoS attack with more than this? I know there is a solution called "Black Hole". Is this enough to mitigate DDoS attacks or are there any other ...
-4
votes
2answers
132 views

Facing digital abuse : need advice to severe all digital relationship with ex-boyfriend and secure my computer/phone [closed]

My ex-boyfriend broke up with me on October 9th, 2015 and we haven't been together since and we've been friends. He is still super controlling, jealous, verbally abusive, and manipulative even though ...
0
votes
2answers
705 views

How to log a ddos attack on a personal system

Say, someone decides to DDOS me. If I'm certain this is happening, how would I go about logging the information done there to submit to the appropriate authorities. As well as who would be the ...
2
votes
2answers
86 views

Deleting a webpage via 'malware DoS'

I mean, we all know the DoS/DDoS where machine(s) are flooding servers/computers with traffic that it cannot handle. Eventually, it just goes down and nothing can connect to it, neither connect itself ...
1
vote
1answer
655 views

Minimum number of ports needed for HTTP

I am supporting a public campground that provides web site access to its customers via a Time Warner Cable connection with wireless AP points in the park. The allowed port usage is blocking some ...
57
votes
11answers
15k views

Can a DDoS attack yield any information?

Can a DDoS attack reveal any information or be used to mount a hack? My understanding is that the whole point of DDoS or DoS is to consume all of the resources/overload the server causing it to crash. ...
6
votes
1answer
538 views

How does an ISP combat Bandwidth Exhaustion / Volume DDoS?

While similar to this question, I'm asking in regards to a traditional ISP environment where you are running your own server center and firewall access lists. With a Bandwidth Exhaustion attack, the ...
0
votes
1answer
2k views

Best option for DDoS protection on DigitalOcean server?

I would not like to use CloudFlare since they effectively act as a man in the middle and handle unencrypted data. Is there a CDN that mitigates the security risks that CloudFlare imposes? If not, is ...
4
votes
3answers
2k views

Can CloudFlare be DDoS-ed and issn't the actual DDoS mitigation limit, financial resources?

CloudFlare (known for fighting DDoS-attacks) is explaining quite a lot about DDoS on their website cloudflare.com/ddos. In an article named The DDoS That Almost Broke the Internet they write about a ...
13
votes
4answers
11k views

How to perform a proper DDoS test in a safe and controlled way?

What is the proper and safe way to perform a DDoS test without crashing the whole infrastructure? What different types of DDoS attacks are there and what things should be considered performing such a ...
22
votes
2answers
5k views

Does the amount of bandwidth available on a network determine how strong a DoS attack should be?

Does bandwidth alone determine how many packets a router or server can handle before the server is overran and then goes offline?
2
votes
1answer
82 views

Do a DoS where you permit only your own connection?

Yesterday I was discussing with my brother, a computer scientist, if it is posible to perform a Denial of Service on a webpage so you block all the traffic to the web but you allow your connection to ...
1
vote
1answer
136 views

Following strategy using DDoS mitigation service - UDP bandwith exhaustion attack from spoofed IPs

I need to defend against receiving a massive spam of UDP packets from random spoofed IP addresses. I would make it this way: In my protocol, every UDP packet contains username and password. Firewall(...
4
votes
4answers
10k views

What actual damage can a DDoS attack do?

Aside from not being reachable for actual customers and therefore financial loss, what damage (money/hardware/software) can a DDoS attack do? PS: I've read about streamers/youtubers/private gamers ...
5
votes
2answers
832 views

How to deal with UDP bandwidth exhaustion DDoS attacks?

I am building a service, which will use UDP. It will run on Amazon AWS - in the firewall they provide, I can block everything except that one UDP port my service will run. The only thing I'm ...
13
votes
3answers
3k views

What prevents me from launching an SYN-ACK flood using HTTP servers?

I've been studying networks lately and this issue came across my mind. What prevents me from sending a lot of SYN requests with source address of my (attack's) target and flooding the target's ...
3
votes
1answer
430 views

I am being DDoSed for no reason, how can I protect myself?

I recently experienced an unprovoked DDoS attack with a speed of 8Tbps against my website from over 80k unique IP addresses and I was wondering is there any way to protect myself against these attacks?...
0
votes
2answers
4k views

Repeated “Dos Attack” from remote IPs

I've been having some weird issues with a home network, and it seems to me like I have some vulnerability I don't know about. To be honest, though, I'm not a big network/security guy and I kind of ...
2
votes
0answers
145 views

What attack-methods for HTTP/L7-Attacks (Reflection and Co.) are you aware of [closed]

I know the following and would like to collect some more methods on how to attack websites and services via misused 3rd-party-applications: Wordpress PingBack/xmlrpc (seen a lot and wildly used) ...
4
votes
2answers
1k views

Should HSTS header be sent on an error response?

We need to configure our loadbalancer to send the HSTS header and we are debating whether or not to send the header on HTTP 4xx/5xx responses. Our main concern is application layer DDos attacks. We ...
138
votes
8answers
31k views

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

I received the following email, addressed to me at an email address on my personal domain (for which I run my own mail server on a VPS): FORWARD THIS MAIL TO WHOEVER IS IMPORTANT IN YOUR COMPANY ...
2
votes
1answer
344 views

SYN Flood from fixed spoof IP but receive only one packet

I'm generating a network flood with a lot of packets coming from one fixed IP+port pair (in this example, 1.2.3.4:2003). Why do I only see one SYN_RECV'd packet in netstat on the victim machine?
11
votes
2answers
602 views

Sophisticated DDOS attack

According to this article, ProtonMail was the victim of a very sophisticated DDOS attack. "At 2pm there was a dramatic escalation," said Yen. According to Yen and Gargula the attackers smacked 15 ...
1
vote
1answer
223 views

What are common services that are being misused in UDP amplification DDoS attacks?

I have been learning about DDoS attacks and how to protect from it. I have a question regarding DDoS attacks. What are common services that are being misused in UDP amplification DDoS attacks?
3
votes
1answer
95 views

If a firewall deletes DOS packets before they reach the designated application. Is it then possible to break trough the firewall with a DDOS attack?

My Question is that if a Firewall blocks for example a DOS attack of UDP packets. Is it then possible to "break" or take up the capacity of a server by sending enough packets trough a DDOS attack? or ...
2
votes
0answers
106 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...

1 2 3
4
5
9