Knowledgebase
Difference between DDOS like attacks and users using download accelerators?
| Posted by chasebug, 10-19-2009, 03:27 PM | | Say you have a 500MB file here:
http://domain.com/samplefiles.rar
If see something like 20 hits per second from the same IP, are they doing DDOS in guise of download accelerators or is this the work of a download accelerator?
I thought download accelerators open a couple threads only for a download?
|
| Posted by filth, 10-19-2009, 03:51 PM | | If someone has 20 connections using a download accelerator then they are going somewhat over the top and I doubt they will be getting any benefit.
20 hits per second is more likely to be a DOS attack however a weak 1. As it is only 1 IP it cannot really be called a DDOS as this technically means multiple people (hundreds if not thousands usually) making large amount of requests.
|
| Posted by Html33, 10-19-2009, 06:07 PM | | DOS - Denial-of-service - Means an attacker is using one IP address. Normally their own.
DDOS - Distributed denial of service - Means to have a " Zombie " of infected computers with a virus, the creator can control what these computers do, and typically attacks websites by commanding them to do so by an IRC client.
Do you get a lot of these " 20 Hit per second " IP address connections? Maybe even do a who is and try and find out what this is, especialy if it's the same IP connection.
But, really.. Providing your not using all your bandwidth due to this, or it's not slowing your website down in any way i wolden't worry
|
| Posted by chasebug, 10-19-2009, 08:25 PM | | In access log, last 1000 lines, 1000 access in 8 seconds by 5 IP addresses.
I already blocked them manually, isn't there a firewall that can detect this and block automatically for me?
Because they keep coming back in 2-3 hours with different IPs doing the same thing again.
|
|
 Add to Favourites
 Print this Article
|
Also Read
