Hack Forums
Is there anyway to prove that you have been DDoSed? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Is there anyway to prove that you have been DDoSed? (/showthread.php?tid=2193792)



Is there anyway to prove that you have been DDoSed? - killereaglemasta - Feb 8, 2012

I just want to know if you can prove it and if there is anyway to stop it


* - Fallenour - Feb 8, 2012

Log files is a great start. all windows systems keep event logs as well as system log files, starting there and searching syn ach attemtps is more than enough proof. as for stopping them, simply create a black list and add all the ip's that you want blocked "ie the ones ddosing you" most ddos come from shells which are located on servers, and blocking the servers takes care of that. Most of the time with little consequence to you (most sites you use often arent going to get rooted due to the fact they have actual defenses in place)


* - Fisherman - Feb 8, 2012

you can also change you ip via your CMD prompt...and if you can get the ip to the person you can report it to there ISP..not saying they will do anything but worth a try


* - synt4xx - Feb 8, 2012

If you were running something like Wireshark while the DDoS attack was going on, you would be able to save a capture of every packet going in and out. This is an easy way to identify all of your attackers bots.


* - нєχ - Feb 8, 2012

You can check your router logs. ( All depending on your Router )
Or you can get/buy a VPN, PM me for services.


* - District - Feb 8, 2012

You'd have to check your router logs, just like Explicit. said.


* - ItsFluffy - Feb 9, 2012

router logs are your best bet but usually used more for reporting, like if i report someone's isp directly i gather my logs and submit

RoadRunner requests your router logs to verify that someone in their system is actually doing what you say but if you can prove it they're internet can get suspended lol