DoS attack, possibly a DDoS attack, help pls

thenumb3rguy · **Author**

Today my server is facing a DoS attack, probably a DDoS attack, im not sure.

Basically all they did is lag my server and eventually players had lost connection to the server. During that attack, the router literally froze and does not respond. I'm not quite sure how to fix this, i tried google and found some iptables rules, but the hacker is being able to attack my server. I've set my server's priority to low in my router and the ping lowers, but still unusual amount of ping, (40-60 even in the same city).

All i want is to, find his ip, find the guy and block him from our server.

kosek · 08-20-2013 , 04:35 Re: DoS attack, possibly a DDoS attack, help pls

u cant block dos attack / just disconnect router and wait till they stop

Maxximou5 · 08-20-2013 , 04:38 Re: DoS attack, possibly a DDoS attack, help pls

Contact your ISP, it is something they must investigate and handle. If need be they will involve the authorities, unlikely but can happen.

thenumb3rguy · 08-20-2013 , 05:13 Re: DoS attack, possibly a DDoS attack, help pls

maybe not.. cuz its hosted in my house, i dont know if its against their tos, but ill check b4 contacting them

HalfLife · 08-20-2013 , 05:15 Re: DoS attack, possibly a DDoS attack, help pls

However your post says that "Basically all they did is lag my server and eventually players had lost connection to the server", but your main problem is not related to this forum. You should post in General Forum.
But On-Topic:
This is related to your router. There are some applications that can ban their address after X connections, but better to buy them instead of contacting your ISP for the issue, because the attacker can change his IP address easily and attack again.

thenumb3rguy · 08-20-2013 , 05:40 Re: DoS attack, possibly a DDoS attack, help pls

Do u know which kind of routers can do this?

HalfLife · 08-20-2013 , 06:34 Re: DoS attack, possibly a DDoS attack, help pls

Well, I really don't know whether it works or not but once happened for me, I installed this tool and the IP attack never affected me again (I don't know did he try to attack or no that is why i'm not sure).

thenumb3rguy · 08-20-2013 , 06:36 Re: DoS attack, possibly a DDoS attack, help pls

im using linux.. also i tried using some packet capture tool like tcp dump, any ways to find the possible source ip?

HalfLife · 08-20-2013 , 06:40 Re: DoS attack, possibly a DDoS attack, help pls

Quote:

Originally Posted by thenumb3rguy

im using linux.. also i tried using some packet capture tool like tcp dump, any ways to find the possible source ip?

I never used linux and I know nothing about it

I have even never seen it

Prechan · *Last edited by Prechan; 08-20-2013 at 06:46.*

We have also been the target of DDOS recently.
Unfortunately apart from a physical firewall, there are not many solutions ...

Even if you reject the IP, packets keep coming on your servers.

You can use iptstate to view trafic on your server