**READ** Someone Destroyed My Server ?!?!

[MaTtY]

i was on my server yesterday when some guy comes in tell us how he is can wreck us n shit, then he starts saying the our server is going down. he kept saying shit about my server and hes gonna crash it or something. so i banned the guy, then no more than 1 minute later pings start shotting sky high and ppl started freezing and dissconnecting. i even started getting laggy, an im on lan. then i shut the server off and restarted it. when i joined i noticed that the console didnt show it had added master servers but it still said connected to steam servers. when i joined it was still really laggy. i restarted it again and it added the master servers and the no more lag for me but nobody could connect to my server. i tried a couple things after that but nobody could connect. i realized it must have been a connection problem only cause the server seemed fine no problems. so i checked my router settings and everything was changed. all ports where unforwarded, filters where all changed also. i redid everything and it works fine again. but who the hell did he do that? im afraid that its gonna happen again though. i know the guys steam id and his server ip also, so i can probably find him again.

[Drocona]

If you have his IP and logs you can simply track down his ISP with a simple traceroute. Send an e-mail to the ISP that the person with that IP has attempted and succeeded in hacking your network causing serious damage to your services. If proven right the client will be blacklisted on the ISP causing him to be unable to use internet again.

I'm afraid that the first thing you explained is a DoS attack which you can't do much about. A DoS attack means that one or multiple clients connect to your or someone elses IP and open a HUGE amount of connections to certain things causing the server running at that IP to malfunction and get 100% load during the attack, a restart can fix this.

The second thing is most probably an exploit for your router causing it to reset, check on your manufacturers website for firmware updates and install them asap. It should give more protection.

Might it happen again, try to put an old computer in front of your router with some special software on it, if you want to do this please contact me in private

[Uri Dead]

MaTtY Wrote:<snip some stuff>
so i checked my router settings and everything was changed. all ports where unforwarded, filters where all changed also. i redid everything and it works fine again. but who the hell did he do that?

If you have the routers web admin turned on and it's also pointing to the Internet, then yea, I can get in, really easily too if you have left it at the default mfg. password. Have a strong password if you require router access outside the LAN.

[MaTtY]

Uri Dead Wrote:

MaTtY Wrote:<snip some stuff>
so i checked my router settings and everything was changed. all ports where unforwarded, filters where all changed also. i redid everything and it works fine again. but who the hell did he do that?

If you have the routers web admin turned on and it's also pointing to the Internet, then yea, I can get in, really easily too if you have left it at the default mfg. password. Have a strong password if you require router access outside the LAN.

ya i did have the default password :/.