All Questions
27 questions
3
votes
0
answers
138
views
Can botnets/malicious traffic be effectively reduced on my exit nodes?
I host a small collection of TOR exit nodes to the clear net. Believe it or not, the number one complaint I get in my inbox is not due to illegal materials coming through the nodes (of which I have ...
- 202
2
votes
0
answers
2k
views
Checking IP's reputation on CloudFlare and Google [closed]
Google and CloudFlare have recently indicated that my home IP address is contributing to a DDoS or spam network.
I am frequently being checked (What is the website checking about my browser to protect ...
- 125
0
votes
1
answer
204
views
Why do DDoS attacks spoof DNS source IPs?
Recently, a lot of my friends have been talking about botnets. They said they've created their own. Obviously, I know this is all illegal so I try not to take part in any of it.
But I've been ...
- 113
27
votes
2
answers
9k
views
How is Google abused for DDoS attacks?
While analysing a DDoS attack on my site using CloudFlare console, I've noticed that many attack requests come from AS139190 GOOGLE-AS-AP Google Asia Pacific Pte. Ltd. with Empty user agent.
I'm ...
- 383
1
vote
1
answer
781
views
Can't free proxies be used to create a botnet?
I recently learned that there are plenty of services on the internet that offer/list free public proxies (freeproxylists.net, hidemyass.com, proxyscrape.com to name a few). Is this safe? Can't an ...
- 67
0
votes
0
answers
173
views
DDoS in form of bad bots?
Recently, one of my servers came under attack by DDoSing it. After inspection of access logs, I can only find one common denominator: Referrer.
All of request come with (I assume) fake referrer:
...
- 125
-3
votes
2
answers
197
views
What's the main constituent part of botnet?
Is the botnet controlled broiler of servers or personal PCs?
We know the botnet can be controlled to DDoS attack, but what's the main constituent part of botnet?
I know the botnet's element maybe PC,...
- 935
-1
votes
1
answer
369
views
Can I identify which botnet is attacking my service?
My service is seeing a fairly sophisticated attack that is distributed across multiple IP addresses. I have a list of 'rogue' IP addresses. They are distributed all around the world. Is there some way ...
- 309
-4
votes
2
answers
2k
views
remove mirai virus on router
I need some help with removing the mirai worm on my rounter. Few days ago my ISP was on cyberattacks which it have affected over 100,000 customers who couldn't be able to get access to the internet ...
- 1
11
votes
4
answers
7k
views
Can I protect my router from a Mirai Worm and how do I know if I'm vulnerable?
Today this article was published by the BBC: Talk Talk and Post Office routers hit by cyber-attack. It states:
It involves the use of a modified form of the Mirai worm - a type of
malware that is ...
- 3,041
1
vote
1
answer
189
views
Is a router a better device for a IoT botnet than something in the router's network?
As some of you maybe noticed, there was a attack this weekand against routers of the german provider Telekom an their routers "W723 Typ B" and "W921".
According to the news here in Germany, they ...
- 155
4
votes
3
answers
861
views
What happens to zombie machines after DDoS attacks?
Do the zombie machines that takes part in a DDoS attack belong to ordinary people just like you and me? Can we be the part of a DDoS attack even without realizing it?
What happens to these slave ...
- 49
0
votes
2
answers
327
views
How hackers implemented DDoS attack with 602 Gbps?
Everybody's heard about DDoS attack with 602Gbps Bandwidth that crashed BBC site, But is really Botnets and hacked servers can implements an attack in this scale ?
- 41
3
votes
1
answer
1k
views
What is the role of IP spoofing in DDoS attacks?
I've read that IP spoofing is often used in denial of service attacks, and I've also just recently read about ingress filtering, which attempts to use blacklisting to filter out spoofed IP addresses ...
- 561
0
votes
1
answer
614
views
Possible virus hogging bandwidth [duplicate]
My computer might have a virus infection. I have used Norton Internet Security and Power Eraser to scan the computer but it still did not work.
The traffic on my PC looks like this
I used resource ...
- 1
1
vote
1
answer
959
views
distinguish between bots and legitimate clients [closed]
If an attack (DoS & DDoS) involves thousands of bots, how can the server distinguish them from legitimate clients?
- 57
0
votes
2
answers
5k
views
What could be the reason for the high traffic on the local network? [closed]
In our small company we have very high traffic outbound from local network to server which is getting blocked, and slow downs our server respond time. Especially at night.
I am not security ...
- 3
1
vote
1
answer
1k
views
Orbit Downloader botnet program removal [solved]
Recently (shortly after midnight on 10/8/2013) I installed and ran Orbit Downloader. After learning that the latest version (4.1.1.8) has a botnet-like module included I immediately stopped the ...
- 53
0
votes
4
answers
671
views
What can a zombie computer feasibly install and run?
I'm experimenting with a Proof of Work system that tries to force the use of a browser in order to solve the client puzzle. Basically, instead of just handing off the puzzle as hash with a well known ...
- 111
1
vote
1
answer
494
views
Botnet Attempting to Login to Website
Our server has recently become a target of what appears to be a botnet attack. The first indication was an insane amount of traffic to one of our client's websites - so heavy that the server entirely ...
- 411
7
votes
6
answers
2k
views
how to mitigate a DDoS from botnet on your website that comes from random IPs
I am wondering how do you mitigate a ddos attack which is coming from a botnet and hitting random URLs on a website.
If there was a consistent URL it was hitting then it would be fairly simple, and ...
- 365
4
votes
6
answers
2k
views
Bot detecting by considering request inter-arrival time
If there are some chances to detect a bot by considering the users page viewing time, is it possible to measure this time?
When a user request for a page (page request), browser request for several ...
- 353
5
votes
3
answers
980
views
How similar are bots regarding their HTTP GET request?
Lets assume a botnet is attacking a website by HTTP GET flooding. To find the bots, the only way seems to be finding the similarities of the HTTP GET requests considering the URL and header fields, ...
- 353
0
votes
1
answer
2k
views
Monitor incoming TCP/UDP flood attack and graph it
I'm preparing a presentation on a security issue and want to include a demonstration. It won't be in real time, I just need to show some pictures of the results.
I have some VPSes that will perform a ...
- 666
9
votes
4
answers
10k
views
Block all botnets and Tor addresses from accessing our site
I've heard that many DoS attacks and general "black hat hacking" attempts occur over the Tor network. Is it possible for me to dynamically block source Is by their presence in a botnet or ...
- 51.1k
23
votes
10
answers
88k
views
How do I know if my computer is being used for a botnet-based DDoS attack?
A botnet is a collection of compromised computers, each of which is
known as a 'bot', connected to the Internet. When a computer is
compromised by an attacker, there is often code within the ...
- 657
13
votes
4
answers
11k
views
Looking for botnet IP address feeds to protect against DDoS
I would like to get a live feed of botnet IP addresses delivered from a service and block them under certain conditions. Preferably community based/open source but open to looking at worthy commercial ...
- 139