Questions tagged [ddos]

"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."

559 questions
4
votes
2 answers

404 Bot Attack on My Website (DDoS of Sorts)

Over the last few days I have noticed that my Wordpress website had been running quite slowly, so I decided to investigate. After checking my database I saw that a table which was responsible for tracking 404 errors was over 1GB is size. At this…
user1356029
  • 381
  • 1
  • 5
  • 14
4
votes
1 answer

Weird SSL certificate error on a domain that previously worked, DDoS related?

The domain in question is https://prophpbb.com The certificate previously worked without issue. There have been no recent changes or cPanel updates. When trying to debug, the ssl cert being requested is clearly not what I have installed. In fact, it…
mdvaldosta
  • 291
  • 2
  • 6
  • 19
4
votes
2 answers

Restrict access to public service many times

I have such situation. Imagine there is a public REST service. What we don't want, is for someone, to be able to access this service many times in short period of time, because they will be able to block our database (essentially a DDOS attack, I…
4
votes
0 answers

How to drop HTTP connection if request body is too big?

When I say drop connection I mean actually closing the socket without reading any more bytes. I am trying to prevent a DoS attack where the attacker is trying to make a lot of HTTP requests that upload very very large files. For my purpose, I will…
Alvin
  • 10,308
  • 8
  • 37
  • 49
4
votes
1 answer

DOS Protection in Azure Web APP

We are using Azure Web APP for for our FrontEnd site. Recently we have discovered DOS attack on our website. When I googled around I got to know solution for Azure Cloud Services. Is there any way, Azure Web APP can be protected with out of box…
4
votes
2 answers

S3 and CloudFront --> how Ddos and other attacks affect bills --> how to protect?

I am building a Kickstarter / Indiegogo campaign. It's a budget sensitive project, with limited server / AWS understanding. On our demo website, we'll be displaying 360-degree videos that will come from Amazon S3 or CloudFront, ideally…
James
  • 135
  • 1
  • 12
4
votes
2 answers

PHP mail hide sender IP for privacy

I am trying to secure my website for any potential DDoS attacks by using cloudflare services. I am hosting all the emails with Google and I am using PHP Mailer to connect to Gmail SMTP and send emails via that. After all this it seems that any…
NVG
  • 3,248
  • 10
  • 40
  • 60
4
votes
6 answers

DoS attack from google ip range

I believe I've been attacked with multiples request (5/sec all day long) from google ip range (66.249.65.* - maybe a ip spoofing??). This requests have googlebot signature (Googlebot/2.1; +http://www.google.com/bot.html) on http header, but it try…
Fulvius
  • 511
  • 6
  • 15
4
votes
1 answer

What are good limits to set for IIS Dynamic IP restriction module?

I recently tried to use the default settings, this is: 5 - max number of concurrent occurances -20 max number of requests in 200 milliseconds. However, this started cutting of my personal connections to the website (loading javascript, css etc.). I…
williamsandonz
  • 15,864
  • 23
  • 100
  • 186
4
votes
3 answers

DDOS Attack in ASP.NET with State Server Session

Cant find this issue anywhere... Using ASP.NET 3.5, I have 3 web servers, in a web farm, using ASP.NET State Server (on a different Server). All pages Uses session (they read and do update the session) Issue: my pages are prone to DDOS attack, it…
visual
  • 305
  • 4
  • 11
4
votes
4 answers

PHP, .htaccess, DDoS & speedy request protection

I have a question, i built this little script to check if a certain ip is flooding my website. When it does, i deny the ip in the .htaccess file. My question is, can somebody tell me if this script is completely useless or worth trying... The script…
3eighty
  • 199
  • 2
  • 5
4
votes
2 answers

Using Nginx to block IP's behind proxy

I'm running a Nginx 1.2.4 webserver here, and I'm behind a proxy of my hoster to prevent ddos attacks. The downside of being behind this proxy is that I need to get the REAL IP information from an extra header. In PHP it works great by doing…
Mr.Boon
  • 2,024
  • 7
  • 35
  • 48
4
votes
6 answers

Is it possible to prevent DDos Attack by cpanel configuration and php scripting?

My site is under DDos Attacks (UDP Flooding)! I have no access to linux shell and only cpanel is available for me! :( Is it possible to prevent this attacks by php scripting? Is there a way to configure cpanel to reduce or redirect attacks?…
Ahmad
  • 507
  • 1
  • 11
  • 22
4
votes
5 answers

How to avoid DOS attack in this code?

I have a code written in C/C++ that look like this: while(1) { //Accept struct sockaddr_in client_addr; int client_fd = this->w_accept(&client_addr); char client_ip[64]; int client_port = ntohs(client_addr.sin_port); …
user840718
  • 1,563
  • 6
  • 29
  • 54
4
votes
3 answers

Implications on DoS/DDoS with non-blocking frameworks

Are there any inherent advantages or disadvantages when it comes to handling DDoS attacks on an application running a non-blocking framework like node.js? As I understand it, these attacks overload the system resources with a ton of requests -…
badunk
  • 4,310
  • 5
  • 27
  • 47