Distributed Denial of Service (DDoS) :-(

[Rob.]

Wow, Was on irc today (coding a script for a client) And i accidentally posted my IP into chat. Now im getting Millions and millions of Distributed Denial of Service (DDoS) attacks every second its really lagging up my internet connection, I turned on commview(packet sniffer) and it just crashs the window, I notice loads of 'Spoofed' ip address :'( some one help.
I know a firewall on my PC would not help one bit regrading the internet speed. As the connections from the spoofed ips will still be getting made to my IP There for still lagging my connection.

Help :'( Static ip And its hard to change :'(

 

[CSX]

Leave your net of for an hour or say to make them think you have changed IP's?

Just an idea...

 

[Rob.]

Could work. But The info i know about the way the 'Hackers' DDOS they will have loads of Bots ( Hacked computers ) And theses will not stop DDos'n me untill i change my ip Or have some kind of protection.

 

[wozzaa]

Who are you with for your ISP?

If you unplug for an hour or so your ip should change unless you have specifically asked for a static ip.

 

[Rob.]

Who are you with for your ISP?

If you unplug for an hour or so your ip should change unless you have specifically asked for a static ip.

Ntl. The only way that works is if some one Grabs my old ip before i get reconnected to the internet so it isn't 100% going to work. With out spoofing my mac address i would still get the same ip Wouldnt i ?

 

[CSX]

Could phone NTL up tomorrow and ask for a new IP address explaining your reasons why...

That's assuming your still getting attacked tomorrow.

 

[Rob.]

Could phone NTL up tomorrow and ask for a new IP address explaining your reasons why...

That's assuming your still getting attacked tomorrow.

The thing there is (look around for Ntl workers), I'm getting it for free atm some kind of f**k up with there server they dont no about, if i have them going into my accout and stuff they might find it and fix it :-(.

 

[CSX]

The thing there is (look around for Ntl workers), I'm getting it for free atm some kind of f**k up with there server they dont no about, if i have them going into my accout and stuff they might find it and fix it :-(.

lol best not phone them then!

No other ideas then... leave it off when your asleep and take it from there maybe?

 

[Rob.]

lol best not phone them then!

No other ideas then... leave it off when your asleep and take it from there maybe?

Yer could do, I was thinking of some thing inbetween the modem and the computer? but that wouldnt work would it ? it would still be using my bandwidth as thats server side right .?

 

[CSX]

Hmm... could always get a hardware firewall but that would cost too much...

Try Sygate Personal Firewall?

http://www.tucows.com/preview/213160

It's free and has blocked some simple DDoS attacks in the past for me...

 

[Rob.]

Hmm... could always get a hardware firewall but that would cost too much...

Try Sygate Personal Firewall?

http://www.tucows.com/preview/213160

It's free and has blocked some simple DDoS attacks in the past for me...

This is'nt a simple DDoS lol, im getting millions of connections my DU meter reads a 8133 K/bs download, and it was reading 1399 K/bs upload but i turned off 'Echo' ( im on another connection atm as that ones dead )

 

[CSX]

This is'nt a simple DDoS lol, im getting millions of connections my DU meter reads a 8133 K/bs download, and it was reading 1399 K/bs upload but i turned on 'Echo' ( im on another connection atm as that ones dead )

I know its not simple but it's worth a shot! Might work might not...

Other then that it's hard to block a DDoS unless you have some powerful firewall or get the IP changed.

If people are intent on bringing something down via DDoS then they will!

 

[Rob.]

I know its not simple but it's worth a shot! Might work might not...

Other then that it's hard to block a DDoS unless you have some powerful firewall or get the IP changed.

If people are intent on bringing something down via DDoS then they will!

Very true, DDoS is a power full tool for 'Hackers'.
I got sygate and it just froze it lol.
Guess im going have to Spoof my mac address, connect the router and try change my ip that way.

 

[Daz]

The only way would be to stop it upstream from you.. which, your ISP may do. It has to be affecting them too, so they probably won't be happy.

Ring them.. and tell them what's happening.
The fact you are posting on here means it's a pretty poor DoS

 

[Rob.]

The only way would be to stop it upstream from you.. which, your ISP may do. It has to be affecting them too, so they probably won't be happy.

Ring them.. and tell them what's happening.
The fact you are posting on here means it's a pretty poor DoS

Im on my car pc connected to another router ( i have permision ).
Yer i guess im going have to phone up silly ntl.

 

[UncleGrumpy]

The only possible way to deal with it is for your isp to filter the ACK packets with spoofed return addresses that are probably hitting port 179, but some of the other favourites are 22,53,80,4001 and 6668.

 

[Rob.]

The only possible way to deal with it is for your isp to filter the ACK packets with spoofed return addresses that are probably hitting port 179, but some of the other favourites are 22,53,80,4001 and 6668.

There Smacking port 113.
Guess its phone call to ntl time.

 

[TwoSugars]

Not sure if it will work but cant you plug the NTL modem directly into your PC (no router in between) and use the DOS command:

ipconfig /release

then

ipconfig /renew

Just a thought.

 

[Rob.]

Nah, As when i type the Renew command it will just get sent the old ip from NTL because of the mac address.

( i think thats how it works )

 

[arj256]

Cant you log into the modem and change anything in there?

 

[Rob.]

Cant you log into the modem and change anything in there?

Like?

 

[Brasseye]

nice people you chat to......
what room were you in ??
hackers lounge ?

 

[Rob.]

nice people you chat to......
what room were you in ??
hackers lounge ?

nah i was in one of 'Efnet' help chats lol.

 

[arj256]

Like?

Im not sure, but had lots of things inside it like a router maybe something of help?

 

[Rob.]

Im not sure, but had lots of things inside it like a router maybe something of help?

Nah, Every thing in there is no good
Well thanks every one but the DDOS has seem to stopped

 

[KDF]

In future.

First thing to do is set your firewall, be it software (not so good) or hardware to drop incoming packets on the ports that are being attacked. Also for sure drop ping ack's

This should reduce the outgoing ack packets significantly, as a secondary effect this will make the DDOS'ers think you pc is no more.

Third, if your still having problems you need to phone your isp and get the to change your IP or block the DDOS at their end.

 

[cliokiz]

Just disconnect your Router/Modem or switch it off. Your ISP will have a pool of IP addresses and you have been allocated one of those, with a certain lease time. Once the lease time has expired, you will then be assigned a new IP address. This is based on the assumption that you have a Dynamic IP and not a static IP.

If you switch off your router and switch it back on, you'll probably find you will get the same IP address again. Leave the router off for an hour or so and then switch it back on, and you should then have a new IP address.

Problem solved!