Is it technically possible to bring down a specific web page on a web server by using DDos attack while the whole server is still operating?
For example, let's say that by using a DDos attack you want to prevent users from accessing a certain web page to block a specific content on that page, while allowing the web server still operating and serving the rest of other pages.
Any input would be appreciated.
No. A DDoS attack involves millions of computers bombarding a server with traffic. It doesn't matter what web page they're accessing; it's the server itself that is being attacked. Ports are being blocked and the processor is forced to run at a snails pace - individual pages aren't the target here.
Thanks for a quick reply.
That is what I thought.
Recently there was an alleged DDos attack on Korean election commission's web site, according to
The unavailable pages contain information about the voting place.
The Korean cyber security force had concluded that it was indeed a DDos attack. ?
Thanks for a quick reply.
That is what I thought.
Recently there was an alleged DDos attack on Korean election commission's web site, according tothis report. While the site was on attack, however, some specific pages were unavailable, but most other pages in the site were still accessible.
The unavailable pages contain information about the voting place.
The Korean cyber security force had concluded that it was indeed a DDos attack. ?
Depends on where the pages are stored. If it was a subdomain, then technically yes, it could still be up. People often include the subdomain as part of the 'main website'.
docs.website.com still remains up.
website.com remains up.
Another common configuration is to have a web server and a separate database server.
So if the DDOS involved a complicated SQL query, then the database server might be brought down and other static pages are left OK.
There is also the possibility that it was just random. e.g. Only 1 in 10 requests got served up as a result of the load, and it wasn't related to the particular page.
Is it technically possible to bring down a specific web page on a web server by using DDos attack while the whole server is still operating?
'Web server' is a rather ambiguous term. It could refer to the hardware (and, if there's a load-balancing scheme in place, to all hardware systems sharing the load), to the actual HTTP server (which may host several virtual hosts), and also to a particular virtual host within the base server.
In general, I suspect the answer is no. But given some particular server software and a web page that relies on particular DDosable services, either in that server software or in some backend, I don't think it would be technically impossible.
One such special case could be a page that is redirected from the main site ('
No, that doesn't seem to be what the article you refer to is about. But then I don't see that the article says anything about singling out one or more web pages on a particlar server either as far a I interpret that text it's about DDosing of entire websites. Or is there additional information somewhere else?
'Web server' is a rather ambiguous term. It could refer to the hardware (and, if there's a load-balancing scheme in place, to all hardware systems sharing the load), to the actual HTTP server (which may host several virtual hosts), and also to a particular virtual host within the base server.
I agree, wouldn't it be more accurate to say IP Address? DDoS attacks an ip address and the machine behind that. That might be just one domain (mydomain.com) and its subdomain, or it could be a subdomain (sub.mydomain.com), or even a group of domains, if they are all housed on the same machine.
So, if the pages that were unavailable were on one machine/IP, and the functional ones on another machine/IP, then maybe. Or, as someone pointed out, the database could have been attacked, leaving the actual pages operational.
Correct me if I am in error, please.