All Questions
Tagged with distributed-dos or ddos
506 questions
23
votes
4
answers
14k
views
Why does a (D)DoS attack slow down the CPU and crash a server?
So I get the basic idea of (D)DoS used for flooding, but I don't quite understand how this causes servers to crash or get them to slow down due to CPU overuse.
As far as I know, the thing that is ...
- 455
0
votes
4
answers
1k
views
How do URL shortening services like bitly prevent ddos attacks? [closed]
i am working on a project that needs to shorten URLs to of about ~25 chars of length. I can create cryptic ids which map to full length URL and persist it in a DB. My only worry is how can i prevent ...
- 143
1
vote
2
answers
5k
views
DDOS attacks and multi-threading
Does a host create a separate thread for each TCP SYN request? Or it depends on the socket implementation for the host?
- 125
3
votes
4
answers
324
views
DDoS: A protocol where the victim says "Don't send me traffic for N ms"?
When a server senses (whether or not true) it is under DDoS attack, how about a protocol where it sends a non-spoofable message upstream to routers saying "Don't send traffic to my IP address for N ms"...
- 1,165
2
votes
1
answer
2k
views
GRE DDOS -- Wouldn't the firewall block it?
So I've been reading up on Mirai. And I found out that it implements a rather unique attack, described here, where it floods the victim with GRE packets. GRE is IP protocol number 47.
Now here's ...
-4
votes
2
answers
2k
views
remove mirai virus on router
I need some help with removing the mirai worm on my rounter. Few days ago my ISP was on cyberattacks which it have affected over 100,000 customers who couldn't be able to get access to the internet ...
- 1
11
votes
4
answers
7k
views
Can I protect my router from a Mirai Worm and how do I know if I'm vulnerable?
Today this article was published by the BBC: Talk Talk and Post Office routers hit by cyber-attack. It states:
It involves the use of a modified form of the Mirai worm - a type of
malware that is ...
- 3,041
1
vote
1
answer
374
views
Is the Mirai malware attacks related to the TR-069 is a classic port attack?
Refering to the following topic:
http://arstechnica.com/security/2016/11/notorious-iot-botnets-weaponize-new-flaw-found-in-millions-of-home-routers/?utm_content=buffer8f018&utm_medium=social&...
- 113
1
vote
1
answer
189
views
Is a router a better device for a IoT botnet than something in the router's network?
As some of you maybe noticed, there was a attack this weekand against routers of the german provider Telekom an their routers "W723 Typ B" and "W921".
According to the news here in Germany, they ...
- 155
-1
votes
1
answer
849
views
Does Windows firewall stop attack use bandwidth?
If I block all the international traffic except an IP range and an attacker starts a DDoS attack on my IP, will it effect on my bandwidth?
- 19
1
vote
1
answer
2k
views
Host sending massive amount of TCP/IP Packets with RA Flag: Part of DDoS Attack?
I have a host on the Network that tries to send TCP/IP Packets to various servers. The DST Port is always 80 or 443 and the Flags set are RST and ACK. These Packets are blocked by our firewall. I did ...
- 4,343
-1
votes
1
answer
151
views
Security mechanism for quick checkout (without cookies/session id)
I am implementing quick checkout in my e-store.
Customer only have to enter email and phone number to make an order, system checks whether customer with such fields already registered, if not it ...
- 1
0
votes
1
answer
311
views
How are Distributed Denial Of Service (DDOS) attacks resovled [duplicate]
I just realised that I don't know how (denial) of service attacks are resolved especially in the long term.
The attacking machines don't get tired and there must be some cooperation involved in ...
- 109
0
votes
2
answers
3k
views
How is the strength of a DDoS attack measured?
The DDoS attack on Dyn by Mirai malware that disrupted the internet was largest of its kind in history. Experts say that its strength was 1.2 Tbps. I don't understand the math behind it. How is the ...
- 525
1
vote
1
answer
177
views
What if IoT devices are fabricated with random passwords?
Considering the Dyn DDOS attack which was possible because the IoT devices have poor default passwords, will it be a solution if the company who produces the devices might generate random default ...
- 659
4
votes
3
answers
861
views
What happens to zombie machines after DDoS attacks?
Do the zombie machines that takes part in a DDoS attack belong to ordinary people just like you and me? Can we be the part of a DDoS attack even without realizing it?
What happens to these slave ...
- 49
5
votes
2
answers
1k
views
Is BCP38 enough to stop DDOS attacks?
BCP38 is a network security standard which has the scope to prevent spoofing the source of DDOS attacks. The main idea is that the ISP shouldn't forward traffic which is not coming from it's network ...
- 659
-2
votes
1
answer
320
views
Is it possible to crash the Internet? [duplicate]
Could a skilled hacker given the resources crash the internet itself? With more and more people joining the internet everyday, it would be becoming increasingly easier for hackers to just, overload ...
73
votes
4
answers
12k
views
Did I participate in the recent DDoS attacks on Dyn's DNS service?
It was reported that the recent large scale DDoS attack affecting multiple websites in the US was done by hacking 10s of millions of devices and using them for the attack.
How can one in general know ...
- 3,871
3
votes
5
answers
2k
views
Could IOT Botnets be Stopped by Static IP addressing the Devices?
I followed the recent IOT DDOS against Dyn and noticed that the attack seemed have three rounds of attack and mitigation. Since I'm not well versed in infosec I did some reasearch around DDOS ...
- 918
2
votes
2
answers
1k
views
Hping and spoofed DDoS (or DoS?) what do -U and -P mean?
Recently I set up 2 virtual machines with Mint 18 inside, to practice and analyze some DDoS attack types. For now on, I'm using hping3 to perform some simple DDoS (or I should say, DoS attacks, since ...
- 195
5
votes
1
answer
930
views
DNS Flood using DNS Amplification?
So, a DNS Flood is when you DDOS a DNS Server, and a DNS Amplification is when you use the DNS Server to execute a DOS attack (I think).
Based on recent events (the attack to Dyn's DNS service) I was ...
- 161
4
votes
2
answers
2k
views
Is it possible my Computer is part of a DDoS network, is there a way to tell? [duplicate]
Title has it all. I consider myself a power user and a tiny bit more knowledgeable than the average Joe. Still I wonder sometimes if my computer might be part of a botnet without me knowing. Is there ...
- 180
6
votes
3
answers
566
views
Did the October 21, 2016 DDoS attack on Dyn's DNS service cause Bandwidth Exhausion?
A recent attack on Dyn's DNS services affected several major websites last Friday, Oct 21, 2016. I would be interested to know if this was Bandwidth Exhaustion, or if it was mainly load on the server ...
- 14k
10
votes
5
answers
9k
views
Is it illegal to DDoS a phishing page? [closed]
I used to go on a site called blockchain.info For storing bitcoins but today when I entered the URL I was redirected to a phishing page. I have entered all my information and it was obviously sent to ...
- 203
4
votes
1
answer
5k
views
Can phone services be affected by DDoS attacks?
Phone lines run on servers, people like to overload servers with botnets. Can a phone line be affected by a DDoS attack?
Realistically, there are so many ways to make a phone botnet, so would a ...
- 1,176
53
votes
6
answers
8k
views
Why don't browser DNS caches mitigate DDOS attacks on DNS providers?
Why are the recent DDoS attack against DNS provider Dyn, and other similar attacks successful? Sure a DDoS attack can bring an entity down, and if that entity controls DNS servers then queries to ...
- 650
5
votes
1
answer
671
views
How to access sites whose DNS server is under attack?
As many of you noticed, last night's DDoS attack against Dyn.com made many major services unavailable, including Twitter and Spotify. Spending one Friday evening without Twitter was enough and I want ...
- 151
4
votes
2
answers
305
views
Why would attacking a DNS server have the affects it did?
I'm somewhat confused as to the technical details of the Oct. 21 DDoS. Dyn is a company, which according to wikipedia
is an Internet performance management company, offering products to
monitor, ...
- 10.2k
5
votes
1
answer
386
views
Why did the sites that went down in the Dyn DDoS attack (Oct 2016) not have secondary DNS?
Or if they did, why didn't it help them?
(Edit: by "secondary" I mean "not at Dyn")
- 174
8
votes
3
answers
1k
views
Why was October 2016 Dyn attack limited to East Coast?
Maps on the Internet showed that the focus of the Dyn DDoS attack was on the East Coast of the US. But why?
My DNS provider is not on the East Coast and I am located in Colorado. My DNS is 8.8.8.8 (...
- 1,575
101
votes
11
answers
31k
views
DDoS: Why not block originating IP addresses?
I'm a moderator of a major bulletin board. When a baddie shows up, we block their IP address; it works, at least until they find a new one. Why can't a protocol be developed for the world's routers to ...
- 1,165
6
votes
1
answer
566
views
How was DDoS attack on Dyn made?
https://krebsonsecurity.com/2016/10/ddos-on-dyn-impacts-twitter-spotify-reddit/#more-36727
A DDoS attack on Dyn, on 21st Oct 2016, caused outages for Twitter, SoundCloud, Spotify, Reddit, etc. on the ...
- 371
8
votes
3
answers
1k
views
When detecting a DDoS attack, do you just block that with your firewall or do you report it to the source providers?
We are receiving a large load of connections, over 10 million per day, over multiple ports (80, 443, 8080, 8888, and 4072).
This has been going on for 4 days now and it does not look like it is going ...
- 1,067
-2
votes
1
answer
3k
views
Protect against DDoS attacks? [closed]
I am going to make a game server which involves port forwarding, I also heard that people can DDoS attack. When they DDoS attack, what is it that they attack, the internet or the computer? Also, what ...
- 115
1
vote
1
answer
228
views
What is the purpose of this attack?
The following is an excerpt of an apache access log output during the last 24 hours. http://pastebin.com/imtJfvLE
Notes:
The requests come from more than 5733 unique IP addresses
~2 requests per ...
- 111
1
vote
3
answers
187
views
How can cloud service providers know that they are being used for launching a DoS?
Can cloud service providers like Amazon, Microsoft etc. detect that they are being used to launch a DoS/DDoS against any target? If yes, how?
I am guessing that if they attack a single machine, a ...
- 3,286
0
votes
1
answer
687
views
Restrict access to public URL many times
I have such situation. Imagine there is a public service (URL). What we don't want, is for someone, to be able to access this URL many times in short period of time, because they will be able to block ...
-2
votes
2
answers
241
views
Is there a specific type of website that is more vulnerable to DDOS attacks?
I basically want to know if DDOSing using a single pc with 20 threads on HOIC or LOIC be different based on sites?
There is a project website I made which goes down in a minute after the DDOS starts. (...
- 117
1
vote
2
answers
2k
views
Is port in UDP flood necessary? HTTP flood-down because? UDP, SYN and ICMP flood methods
I have questions about DDoS attacks.
In flood scripts, the script sends UDP packets to "ip.address:random.port"
Why It doesn't use only the IP? Is port necessary?
If someone is HTTP flooding a ...
2
votes
3
answers
50k
views
Constant Dos attacks on my router appear to be taking out my internet connection
So I'm a noob here and have been doing some research on why my internet (cable modem) locks up about once or twice a week ever since installing a Netgear N900 router a few months ago. After asking ...
- 21
0
votes
2
answers
1k
views
Reverse DoS attack?
Let's say I have a 5mpbs up and 50 mbps down-link. I'm running a web-server with one quite large resource (it's about 1 megabit, not byte). What is there to stop a malicious individual from running 5 ...
- 1
70
votes
2
answers
22k
views
How can ISPs handle DDoS attacks?
How can an ISP with low bandwidth like 50 Gbps handle a DDoS attack with more than this? I know there is a solution called "Black Hole".
Is this enough to mitigate DDoS attacks or are there any other ...
- 1,627
-4
votes
2
answers
239
views
Facing digital abuse : need advice to severe all digital relationship with ex-boyfriend and secure my computer/phone [closed]
My ex-boyfriend broke up with me on October 9th, 2015 and we haven't been together since and we've been friends. He is still super controlling, jealous, verbally abusive, and manipulative even though ...
- 1
0
votes
2
answers
911
views
How to log a ddos attack on a personal system
Say, someone decides to DDOS me. If I'm certain this is happening, how would I go about logging the information done there to submit to the appropriate authorities. As well as who would be the ...
- 1
2
votes
2
answers
178
views
Deleting a webpage via 'malware DoS'
I mean, we all know the DoS/DDoS where machine(s) are flooding servers/computers with traffic that it cannot handle. Eventually, it just goes down and nothing can connect to it, neither connect itself ...
- 792
1
vote
1
answer
1k
views
Minimum number of ports needed for HTTP
I am supporting a public campground that provides web site access to its customers via a Time Warner Cable connection with wireless AP points in the park.
The allowed port usage is blocking some ...
57
votes
11
answers
17k
views
Can a DDoS attack yield any information?
Can a DDoS attack reveal any information or be used to mount a hack? My understanding is that the whole point of DDoS or DoS is to consume all of the resources/overload the server causing it to crash. ...
- 689
6
votes
1
answer
805
views
How does an ISP combat Bandwidth Exhaustion / Volume DDoS?
While similar to this question, I'm asking in regards to a traditional ISP environment where you are running your own server center and firewall access lists.
With a Bandwidth Exhaustion attack, the ...
- 14k
1
vote
1
answer
3k
views
Best option for DDoS protection on DigitalOcean server?
I would not like to use CloudFlare since they effectively act as a man in the middle and handle unencrypted data.
Is there a CDN that mitigates the security risks that CloudFlare imposes?
If not, is ...
- 425