I'm under attack.

Pages (3): 1 2 3 Next

phillikiev
Junior Member

10-17-2016, 03:13 AM

Could you clarify what occurred? It seems there might have been a DDoS attack on your DNS server, possibly affecting many requests to the TTRS.PW domain. I’m here to help investigate further.

phillikiev

10-17-2016, 03:13 AM #1

Could you clarify what occurred? It seems there might have been a DDoS attack on your DNS server, possibly affecting many requests to the TTRS.PW domain. I’m here to help investigate further.

A_Piggy
Member

211

10-17-2016, 04:13 AM

Adjust your filtering settings. Specify allowed or blocked domains for DNS queries.

A_Piggy

10-17-2016, 04:13 AM #2

Adjust your filtering settings. Specify allowed or blocked domains for DNS queries.

JuDaKoMo
Junior Member

10-20-2016, 05:42 PM

JuDaKoMo

10-20-2016, 05:42 PM #3

Marcustheduke
Senior Member

679

10-26-2016, 07:15 PM

Yes, you can implement a smart firewall with automated updates via an API that refreshes blocked IP lists daily.

Marcustheduke

10-26-2016, 07:15 PM #4

Yes, you can implement a smart firewall with automated updates via an API that refreshes blocked IP lists daily.

Groetzman
Junior Member

10-29-2016, 08:45 PM

Oh no, that sounds problematic... I was considering Cloudflare, but it seems it might not integrate well with DNS.

Groetzman

10-29-2016, 08:45 PM #5

Oh no, that sounds problematic... I was considering Cloudflare, but it seems it might not integrate well with DNS.

OreoHer0
Member

226

11-03-2016, 10:26 AM

It seems they likely scanned your device and identified it as a DNS server, then launched a DDoS attack against you. Despite having a public IP address, the attackers probably probed it and reported it as a DNS issue. Your fail2ban protection is in place for other threats, but it doesn’t cover DNS abuse. The TTRs.pw domain shows no results, which suggests it’s not associated with that site.

OreoHer0

11-03-2016, 10:26 AM #6

Sihere
Member

187

11-10-2016, 06:41 PM

Cloudflare acts as your public DNS, which means they likely blocked it since it points to your local IP, but traffic is still routed through them.

Sihere

11-10-2016, 06:41 PM #7

Cloudflare acts as your public DNS, which means they likely blocked it since it points to your local IP, but traffic is still routed through them.

KMunster
Member

11-12-2016, 06:00 AM

DNS servers can be exploited for DDoS attacks through a technique called DNS amplification. The server you're using might have been targeted by attackers who sent spoofed requests, and this method remains in use despite being outdated.

KMunster

11-12-2016, 06:00 AM #8

kungfutyla
Posting Freak

780

11-12-2016, 06:19 AM

Really? That seems odd... it might be worth checking with them about it.

kungfutyla

11-12-2016, 06:19 AM #9

Really? That seems odd... it might be worth checking with them about it.

PersieO
Posting Freak

786

11-28-2016, 02:19 PM

#10

The document explains DNS amplification attacks in simple terms. It outlines how attackers exploit open DNS resolvers to send large traffic volumes, overwhelming target servers. The glossary clarifies key terms like amplification, reflection, and the role of DNS protocols in such incidents.

PersieO

11-28-2016, 02:19 PM #10

Pages (3): 1 2 3 Next