• some asshole keeps attacking our router
    59 replies, posted
hey, i was just wondering, there is this asshole that attacked our router after he became mad in garrysmod, even though he seemed like a complete incompitent (apparently we had a port and lived in New Zealand) he apparently got a botnet or something to attack our router, causing complete internet failure for about a half hour. i really want to get back at this fucker, is there any way i can find out what IP attacked our router? and furthermore, does anyone know a good way to get back at him? this guy has done it like 3 times before, and i'm getting fuckin sick of it.
Is it your Local router?
yes.
It is very hard to as it is probably a DDoS
Just unplug it for an hour (thus changing your IP (maybe)) and forget it ever happened. That's the best advice I can give you.
isn't there a way to see what traffic goes through our router? and if i got his IP some other way (like his steamid) would there be a way to retaliate?
If he used a botnet you'll be unable to trace it unless it was a publicly known botnet. Even then It's unlikely that the Administrators would be privvy to giving you the information.
this guy is just a dick and i want to see him suffer, and suffer a ton.
Don't let the idiot bother you, trying to get revenge will just be a waste of time. Like mentioned above, try changing your IP address.
To clarify a bit more, you'll have the IPs of the networked computers that sent you service requests, you can get this from your ISP. If you were to investigate you could probably find that those IPs are known infected PCs. I know for a fact there is at least one public botnet that logs your IP if you ever use it to initiate a DDoS. But in all likelyhood there's nothing you can do, just ban him when you see him.
well, do you know his steamID? if so, use that to figure out who he is on steam, then talk to a lawyer about bringing him to court over this
thats the thing, i dont even know how he was able to crash our router. we aren't even the servers host...
Somehow, he got your IP address and probably ran a tool like LOIC and pointed it at that IP. I assume some random guy in GMod doesn't have access to a botnet of any size, if anything it was some of his other buddies that he convinced to run the same tool pointed at your IP at the same time. Most consumer routers don't give you access logs without a custom firmware, so unless you got his IP some other way you aren't going to be able to retaliate in any way, unless you find posting ASCII art dongs on his Steam profile page evil. If the attacks stopped, he and his buddies probably lost interest and went about their lives.
eeh, thats the problem. you see, he just DDOS'd us.... again. and not he's doing it again, Internets about to crash
[QUOTE=krazipanda;29939097]isn't there a way to see what traffic goes through our router? and if i got his IP some other way (like his steamid) would there be a way to retaliate?[/QUOTE] Theres not going to be a way to track his ip through your router traffic, as its coming from many different computers. But if you get his ip through steam, pm me and i'll show you a few tricks ;) [editline]20th May 2011[/editline] [QUOTE=benjgvps;29939316]Somehow, he got your IP address and probably ran a tool like LOIC and pointed it at that IP. I assume some random guy in GMod doesn't have access to a botnet of any size, if anything it was some of his other buddies that he convinced to run the same tool pointed at your IP at the same time. Most consumer routers don't give you access logs without a custom firmware, so unless you got his IP some other way you aren't going to be able to retaliate in any way, unless you find posting ASCII art dongs on his Steam profile page evil. If the attacks stopped, he and his buddies probably lost interest and went about their lives.[/QUOTE] Loic requires a lot of computers to do anything, and no one usually uses a botnet to control loic
Well if you were smart, you would have used "status" in the console of the Gmod server to get his IP address. You can try Wireshark if you want to see network traffic, but unless you know anything about network packets, it will be mostly useless to you.
I doubt he actually did anything. A DDoS takes resources. Other attacks take skill. I doubt some jackass you met in gmod has either one. So I think it's most likely that he made a bunch of empty threats and your internet going out was entirely coincidental. I don't know how anyone in this thread is taking this seriously.
I'm surprised that no one has suggested the OP to check his router's internal logs.
[QUOTE=B!N4RY;29941359]I'm surprised that no one has suggested the OP to check his router's internal logs.[/QUOTE] Usually not supported unless you are running OpenWRT or DD-WRT
[QUOTE=Goz3rr;29941387]Usually not supported unless you are running OpenWRT or DD-WRT[/QUOTE] Most linksys routers with OEM firmware have logs, they just aren't very helpful most of the time.
The stock firmwares on newer D-Link routers tells you quite a bit in its logs, same with a lot of other brands.
As for how he got your IP Source is incredibly stupid, your IP is sent by the server to everyone as soon as you join
[QUOTE=Tobba;29942443]Source is incredibly stupid, your IP is sent by the server to everyone as soon as you join[/QUOTE] IP addresses are no huge secret.
Put a padlock on it. [editline]lol[/editline] No one got the reference?
[QUOTE=ROBO_DONUT;29942497]IP addresses are no huge secret.[/QUOTE] They are since 12 year olds with their moms paypal password started to exist
[QUOTE=Tobba;29944315]They are since 12 year olds with their moms paypal password started to exist[/QUOTE] 86.60.173.186 Come at me bro
Look at the router security log, that should say his IP if he isn't behind 7 proxies.
[QUOTE=bohb;29940170]Well if you were smart, you would have used "status" in the console of the Gmod server to get his IP address. You can try Wireshark if you want to see network traffic, but unless you know anything about network packets, it will be mostly useless to you.[/QUOTE] thats the thing, it wasnt me that got him mad. a friend that came over was playing darkrp and raided him, then he raged hard and disconnected us. and 1 sec, i'll get his steam page [editline]20th May 2011[/editline] i have his steamID, but not his page. can we use the ID to find his IP? [editline]20th May 2011[/editline] [QUOTE=nikomo;29944599]86.60.173.186 Come at me bro[/QUOTE] Country: Finland State/Region: Western Finland City: Salo Latitude: 60.3833 Longitude: 23.1333 axe to the head or chest
Paste the steamid then.
[QUOTE=bohb;29940170]Well if you were smart, you would have used "status" in the console of the Gmod server to get his IP address. You can try Wireshark if you want to see network traffic, but unless you know anything about network packets, it will be mostly useless to you.[/QUOTE] Typing status in the console wont work to get their IP unless you are the server host.
Sorry, you need to Log In to post a reply to this thread.