Denial of Service attacks

Well I cannot really find a more appropriate section, so here it goes.

 

I have found myself become a victim to said attacks recently and I wish to know how to mitigate these attacks.  I am very clueless on how to do this.  So please, tips would be very much appreciated.

I don't really know anythiing about how to mitigate a DoS attack, but the people that can help you out will need to know about your setup, was it your personal home network?  A companies network?  what kind of OS are you running Windows, Linux, server or desktop edition?  Do you know exactly what they were attacking?  A web server? file server?  what software are you using? apache? IIS?

The more information you can provide the better, I understand if it is a corperate network you may be bound by a NDA or something, but the more you can tell us the better.

Find logs of your network traffic (incoming) and report the IP's to the police-robot-people.

Or just find if all the traffic is coming from a single location and deal with it yourself. (really easy if they're just using 1 strong connection doing it to you.)

I am using my home network.  Windows 7 Home Premium 64-bit and Xubuntu 12.04.

 

I am pretty sure they are using LOIC which makes the attacks not come from their IP's I think.  How would I make logs of my network traffic?  Wireshark?

easiest solution call your isp ask them fora new ip 

LOIC uses your ip unless you are using a vpn or something, which will also be attacking the vpn's bandwidth.

 

check what port all the trafic is on, and close whatever service that is / un-forward the port on your NAT. that will help but not fix the issue. call your isp, explain the ddos attack and request a new ip / them to release your dhcp lease (then you can just reboot your modem)

I have already contactced my ISP (AT&T) and they can't do shit, they've told me that.  And the people can just get my IP again through Skype since they have my Skype username.  

 

Thank you all though, if it happens again I will try this.

Why not use something other than Skype to communicate? If you are not connected to Skype, they can't get your IP address.

 

What type of DoS attacks? Layer 4 DoS can be stopped by a simple firewall. Just go through your logs and look for the IP address and block it. If I were you, I'd also block all Tor exit nodes (if the person is stupid enough to use Tor for Layer 4 DoS). If you're running a web server or something with WAMP/XAMPP and they're using Layer 7 against you, that's a problem. I guess you can also set up some simple firewall rules, but since Layer 7 requires very low bandwidth, it can be routed through a ton of different things.

When the hell is Skype going to fix that exploit?

Change your IP, get a new skype account.

I cannot change my IP.  I use Skype for gaming/just to talk to buds.  I will not drop a good program because I occasionally get DoS'd.

i don't think it's an exploit, skype wouldn't work without that information.

(Make sure you have your NIC card drivers before attempting this)
Start > Run > cmd, press enter

ipconfig press enter, note the ip

ipconfig /release press enter

go to control panel

go to network connections,

select your device you connect with right click > properties,

go to the bottom one TCP/IP > properties

"use the following ip address" type in 121.212.121.212 press tab, close/accept

unplug modem (doesn't work with router and modem)

wait 2 minutes

plug modem back in

That would change your internal network IP, not your external which is what would be relevant.

There really isnt much you can except first black list the ip that is DDOS'ing or if there are multiple ip's attacking you just change your ip adress(public not internal) even the white house when it was being DDOS attacked they simply changed there ip adress.

when will people learn that team speak is better?