Luca Deri b23781e807 Added the ability do identigy as DGA those host/domain names with too many consucutive repeated characters ...

such as ckaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa used fr netbios reflection attacks
https://www.akamai.com/uk/en/multimedia/documents/state-of-the-internet/ddos-reflection-netbios-name-server-rpc-portmap-sentinel-udp-threat-advisory.pdf

2020-08-21 18:41:35 +02:00

132 B

Raw History

View raw