"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."
Questions tagged [ddos]
559 questions
3
votes
1 answer
CURL and DDOS Problems
I need get some data from remote http server.Im using Curl Classes for multirequests.
My problem is Remote Server's Firewall. Im sending 1000 between 10000 GET and POST requests. And Server bans me from DDOS.
İ used this measures.
packages still…

Gnosis00
- 309
- 6
- 19
3
votes
3 answers
CloudFlare and Dynamic DNS for Web Apps
My understanding is that CloudFlare is a CDN that specializes in thwarting DDoS attacks for web apps; that is basically creates a read-only "cache" of your entire app so that, if you are DDoSed, your users can still access portions of your app and…

IAmYourFaja
- 55,468
- 181
- 466
- 756
3
votes
2 answers
Is it a security issue to show the current server load?
Would it be useful for a hacker in any way to publicly display current server stats, such as average load times and memory usage?
The only issue I can forsee is that someone attempting to DDoS the server would have a visible indication of success,…

Niet the Dark Absol
- 320,036
- 81
- 464
- 592
2
votes
2 answers
Safe connection limits for DDOS Deflate?
I work for a site that often get's attacked by bot networks. We have started to use this tool: http://deflate.medialayer.com/ which auto-bans ip's that have more open connections than the set value. By default it's set to 150, we are currently using…

Mr.Boon
- 2,024
- 7
- 35
- 48
2
votes
1 answer
Remote File Inclusion via Another Server?
My server (mediaquarter.at) is currently being DDoSed by requests like this (with some minor variations):…

xeraa
- 10,456
- 3
- 33
- 66
2
votes
2 answers
Can I avoid Google App Engine instances from being undesirably created?
I am currently running a Flask web application (Dash to be more precise) on Google App Engine (Standard Environment) as a service. For the moment I have a custom login/logout page and I am handling user sessions with Flask-Login. I am using…

user142389358902
- 208
- 1
- 9
2
votes
1 answer
I want to create multiple UDP sockets
import socket
import time
ADDRESS = ("192.168.0.100",4119)
DATA = bytes.fromhex("AA AA AA AA")
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM, 0)
s.connect(ADDRESS)
for i in range(0,99999999):
s.send(DATA)
s.close()
The code above is…

DownTop_oil
- 25
- 3
2
votes
1 answer
UnboundLocalError: local variable 'start' referenced before assignment
I have error "UnboundLocalError: local variable 'start' referenced before assignment" when run the code
def generateDestinationIP(start, end):
first = 10
second = 0;
third = 0;
#eg, ip = "10.0.0.64"
ip = ".".join([str(first),…

MKF
- 49
- 1
- 9
2
votes
1 answer
DNS Server Spoofed Request Amplification DDoS Mitigation for Server 2008 R2
We are undergoing PCI Compliance checks and our external nameservers (all Windows Server 2008 R2) have been hit by Nessus Plugin ID: 35450 (verbage below). Although this is a low severity hit, I see DDoS in the title and I freak.
Plugin ID:…

hexLax
- 63
- 1
- 6
2
votes
1 answer
GCP Cloud Armor DDoS setup
I am wondering how Cloud Armor works. Is DDoS protection enabled by default when I create "empty rule in policy" (allow all trafic)? Or is DDoS protection only part of HTTP(s) Load Balancer?
There is my notes:
HTTP(s) Load Balancer have basic DDoS…

Lukáš Prudil
- 33
- 5
2
votes
1 answer
How ASP.NET Core prevents DDoS attack by limiting the request size?
I created an API recently that allows video and audio files to be uploaded and it was working fine until one customer uploaded a large video and I got this error:
Failed to read the request form. Multipart body length limit 134217728…

mohammad rostami siahgeli
- 6,787
- 9
- 49
- 89
2
votes
2 answers
Tomcat via Apache Server going down after too many connections
I have an Apache (2.4) Server that serves content through the AJP connector on a Tomcat 7 Server.
One of my clients manages to kill the tomcat instance after running too many concurrent connections to a JSP JSON Api service. (Apache still works, but…

Fuzz
- 906
- 1
- 12
- 24
2
votes
0 answers
Throttle HTTP Request based on Available Memory
I have a REST API that is expected to receive a large payload as request body. The API calls a blocking method that takes 2 seconds to process each request and then returns 200 OK. I wish to introduce throttling based on available memory such that…

Somu
- 3,593
- 6
- 34
- 44
2
votes
0 answers
Iotify - Creating IoT devices to do GET requests to a local server using IoTify.io
I am trying to DDoS a local server on my PC in order to test out some anti-DDoS methods on my local server. I am trying to simulate several IoT devices that will do a http GET request to my server on loop, trying to attck the server, I have already…

M.Raaj
- 11
- 3
2
votes
1 answer
Ubuntu: unknown users trying to log via ssh
Hi I'm kinda new in "having own server". My server got recently turned off. Everything is working by now but when opened logs I was shocked.
I don't exactly know what's in there but it looks like some kind of DDOS attack. Some attempting users have…

Peter Hogya
- 73
- 7