search

mushorg / conpot

ICS/SCADA honeypot
GNU General Public License v2.0
1.23k stars 415 forks source link

service conpot down after being attack like ddos #556

Closed zainalawaludin closed 2 years ago

zainalawaludin commented 3 years ago

hi i have problem with my conpot, if there are attack like Ddos attack, my conpot cannot access from browser, and finally i must restart docker conpot to resolve this problem. below capture from attacker image any idea for this problem? thanks

glaslos commented 3 years ago

Hi, please provide the log as text instead of an image. It makes it searchable and more accessible. I don't think we can do much more in this case. The SNMP server is rejecting the requests but even that requires resources which seem to get exhausted. We could potentially be faster at discarding the requests but I don't think we will win this game. Do you have any chance to prevent this before it reaches Conpot?

glaslos commented 2 years ago

Closing due to inactivity.