Questions tagged [ddos]

"A distributed denial of service attack (DDoS) occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers."

559 questions
3
votes
1 answer

CURL and DDOS Problems

I need get some data from remote http server.Im using Curl Classes for multirequests. My problem is Remote Server's Firewall. Im sending 1000 between 10000 GET and POST requests. And Server bans me from DDOS. İ used this measures. packages still…
Gnosis00
  • 309
  • 6
  • 19
3
votes
3 answers

CloudFlare and Dynamic DNS for Web Apps

My understanding is that CloudFlare is a CDN that specializes in thwarting DDoS attacks for web apps; that is basically creates a read-only "cache" of your entire app so that, if you are DDoSed, your users can still access portions of your app and…
IAmYourFaja
  • 55,468
  • 181
  • 466
  • 756
3
votes
2 answers

Is it a security issue to show the current server load?

Would it be useful for a hacker in any way to publicly display current server stats, such as average load times and memory usage? The only issue I can forsee is that someone attempting to DDoS the server would have a visible indication of success,…
Niet the Dark Absol
  • 320,036
  • 81
  • 464
  • 592
2
votes
2 answers

Safe connection limits for DDOS Deflate?

I work for a site that often get's attacked by bot networks. We have started to use this tool: http://deflate.medialayer.com/ which auto-bans ip's that have more open connections than the set value. By default it's set to 150, we are currently using…
Mr.Boon
  • 2,024
  • 7
  • 35
  • 48
2
votes
1 answer

Remote File Inclusion via Another Server?

My server (mediaquarter.at) is currently being DDoSed by requests like this (with some minor variations):…
xeraa
  • 10,456
  • 3
  • 33
  • 66
2
votes
2 answers

Can I avoid Google App Engine instances from being undesirably created?

I am currently running a Flask web application (Dash to be more precise) on Google App Engine (Standard Environment) as a service. For the moment I have a custom login/logout page and I am handling user sessions with Flask-Login. I am using…
2
votes
1 answer

I want to create multiple UDP sockets

import socket import time ADDRESS = ("192.168.0.100",4119) DATA = bytes.fromhex("AA AA AA AA") s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM, 0) s.connect(ADDRESS) for i in range(0,99999999): s.send(DATA) s.close() The code above is…
2
votes
1 answer

UnboundLocalError: local variable 'start' referenced before assignment

I have error "UnboundLocalError: local variable 'start' referenced before assignment" when run the code def generateDestinationIP(start, end): first = 10 second = 0; third = 0; #eg, ip = "10.0.0.64" ip = ".".join([str(first),…
MKF
  • 49
  • 1
  • 9
2
votes
1 answer

DNS Server Spoofed Request Amplification DDoS Mitigation for Server 2008 R2

We are undergoing PCI Compliance checks and our external nameservers (all Windows Server 2008 R2) have been hit by Nessus Plugin ID: 35450 (verbage below). Although this is a low severity hit, I see DDoS in the title and I freak. Plugin ID:…
hexLax
  • 63
  • 1
  • 6
2
votes
1 answer

GCP Cloud Armor DDoS setup

I am wondering how Cloud Armor works. Is DDoS protection enabled by default when I create "empty rule in policy" (allow all trafic)? Or is DDoS protection only part of HTTP(s) Load Balancer? There is my notes: HTTP(s) Load Balancer have basic DDoS…
2
votes
1 answer

How ASP.NET Core prevents DDoS attack by limiting the request size?

I created an API recently that allows video and audio files to be uploaded and it was working fine until one customer uploaded a large video and I got this error: Failed to read the request form. Multipart body length limit 134217728…
2
votes
2 answers

Tomcat via Apache Server going down after too many connections

I have an Apache (2.4) Server that serves content through the AJP connector on a Tomcat 7 Server. One of my clients manages to kill the tomcat instance after running too many concurrent connections to a JSP JSON Api service. (Apache still works, but…
Fuzz
  • 906
  • 1
  • 12
  • 24
2
votes
0 answers

Throttle HTTP Request based on Available Memory

I have a REST API that is expected to receive a large payload as request body. The API calls a blocking method that takes 2 seconds to process each request and then returns 200 OK. I wish to introduce throttling based on available memory such that…
Somu
  • 3,593
  • 6
  • 34
  • 44
2
votes
0 answers

Iotify - Creating IoT devices to do GET requests to a local server using IoTify.io

I am trying to DDoS a local server on my PC in order to test out some anti-DDoS methods on my local server. I am trying to simulate several IoT devices that will do a http GET request to my server on loop, trying to attck the server, I have already…
M.Raaj
  • 11
  • 3
2
votes
1 answer

Ubuntu: unknown users trying to log via ssh

Hi I'm kinda new in "having own server". My server got recently turned off. Everything is working by now but when opened logs I was shocked. I don't exactly know what's in there but it looks like some kind of DDOS attack. Some attempting users have…