Unstopabble ddos attacks

[Gut]

You can't stop a good bot net, but the OP can stop the few people who are DDOSing him by upgrading his network equipment and using iptables.

 

[Nikkster]

Do you understand what you are saying at all?
It's impossible to track down someone that is DDOSing you because the computers that send the packets were infected with a virus. When you infect them with your server they become part of your botnet.

@OP - If you got taken down by five bots then that is sad.

Impossible to track down? Geez christ. I am not sure how many times Tibia has been DDoS attacked and all the attacks have been tracked and the performer reported.

Trust me, I have years of experience with DDoS attacking, I am quite sure that I know what I'm talking about.

 

[Cykotitan]

Impossible to track down? Geez christ. I am not sure how many times Tibia has been DDoS attacked and all the attacks have been tracked and the performer reported.

F** transparent proxies how do they work

 

[Fallen]

F** transparent proxies how do they work

fucking newfags, how do they work

 

[Don Daniello]

Trust me, I have years of experience with DDoS attacking, I am quite sure that I know what I'm talking about.

Is that why the-website-is-down ? http://www.crewebs.com/

 

[stian]

Shut up, a true ddos attack just use pure bandwidth (in other word 50mbit+), there are NO way to stop it. Solution is to get a better line then them, or attack their nodes (from other servers etc). Thats the method the US military use. 1tbit line, +NSA(?)s govement protection counter ddos things.

Also, with SYN attacks you can just randomize the origin data in the packet since you don't care to get a responce from the server.

 

[Cykotitan]

I wonder how Kimmo stops those "5 Gbit/s" DDoS attacks on his PRQ.se server with a hardware firewall...

Those were probably UDP flood attacks, since TCP (SYN) attacks cause the attacker's IP to get shitlisted/blackholed.
This renders most script kiddie DDoS tools useless — since they require the server to respond in order to send further packets.

I wonder; does UDP flood work if there are no UDP services running...

 

[stian]

UDP is "stateless", so yes, they do work without a UDP service, but a UDP service is a huge advantage because the server will send shit too.

 

[Mokerhamer]

Hello,

Please check if these 2 ip's are OUTGOING instead of incomming.
222.232.53.72
222.232.53.70

I reconise the ip's but i'm not to sure. It remembered me of a failing virus that kept reconecting to the internet but couldent estable a conection so it looped for ages before it crashed.

 

[kornholi]

I wonder how Kimmo stops those "5 Gbit/s" DDoS attacks on his PRQ.se server with a hardware firewall...

Those were probably UDP flood attacks, since TCP (SYN) attacks cause the attacker's IP to get shitlisted/blackholed.
This renders most script kiddie DDoS tools useless — since they require the server to respond in order to send further packets.

I wonder; does UDP flood work if there are no UDP services running...

probably S/RTBH and uRPF

 

[Stormoguden]

probably S/RTBH and uRPF

and possible TCP/IP and DDoSPackage v140.1.1 also