DDOS: Low Orbit Ion Cannon DDoS with JS and HTTP
This signature detects the behavior of the Low Orbit Ion Cannon (LOIC) packet flooding tool when using the JS or HTTP Method option. Attackers can use this tool to send extremely large amounts of packets over the network to attempt to overwhelm a target. When used collectively from multiple sources, a Distributed Denial of Service (DDoS) can occur. Due to high performance impact this signature can impart, this signature should only be used to protect your Web-servers when under active attack.
Short Name
DDOS:LOIC-JS-HTTP
Severity
Major
Recommended
False
Recommended Action
Drop
Category
DDOS
Keywords
Cannon DDoS HTTP Ion JS Low Orbit and with
Release Date
11/03/2022
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3542
False Positive
Unknown