Question I'm not sure if someone is D(D)OS-ing me ?

Jan 9, 2025
7
0
10
Hi, new person here. So ... I'm not sure if someone is D(D)OS-ing me. My internet was always super slow, but last couple of weeks is super super slow. So how can I be sure if someone is D(D)OS-ing me, what to do about it, and how to get my connection back to normal?

Thanks for the help.
 
This is a lot to read but it might help you

If by D(D)OS-ing me you mean somebody stealing your internet to slow yours down their are several things you can do.

1. set up your internet up so that nobody can use your hub/modem without inputting the keycode into their device , example , if YOU buy something new you should not be able to go on the internet through your hub unless you give the device access by inputting the key code.

2. go onto an online game and look at something called the latency figures and see if they suddenly change , if you dont have a game that can do this go onto an online game and look in task manager at the figures for your internet usage , when you notice a slow connection look at the task manager again to see if the internet figures have gone up. If they have it means 1 of 2 things , either you have something connecting to the internet that you dont know about or somebody is stealing your connection.

3. i dont know what av you have but i use the ESET paid for and it has something called network inspector.
Download the free version from here.

https://login.eset.com/login

Yes you have to set up an account but do it. Download the free trail version but before you install it disable your own av because you should not have 2 av running. Once installed run the network inspector part of the software .... dont do it when your internet is so called super slow , it will find everything going through your hub/modem. When your internet goes slow do it again and see if their is anything new on the list. If their is then somebody is using your connection.

4, if option 3 gets a result contact your isp.
 
Maybe try to solve your real actual problem rather than guessing words you do not understand.

DDOS is impossible to prevent or fix. What it means is someone would have control of a bunch of machines any place in the world and then have them all send a bunch of garbage traffic to the WAN ip of your router. What can you possibly do by the time your router is involved the bandwidth has been used. Think of this as a more common thing. What can you do about all those scam callers you get on your phone. What if they decided to call you 1000 times in 1 hour from different phone numbers. DDOS is the same concept.

So do the standard and reboot the router. Next log into the router and see what machines are connected. If you actually suspect someone unauthorized is connecte change the WIFI passwords. You also want to disable a feature called WPS if it is on by default.

Try to test from a ethernet connected machine does it run any differnet. Could be as simple as one of your neighbors is using the same wifi channels as you. Even though they are not connecting to your router the traffic going to their router will interfere.
 
What do you mean password only access. Almost no router allows you to configure the router from the internet unless you turn that option on. You always want good wifi passwords but someone would have to live very close to you to use your wifi.

You likely can't change your public IP easily
 
Isn't there like option in router to have some sort of IP blocker, and I configure it that way that only people with certain IP can connect to my router ? So something like a IP filter option of some sort.

And I'm pretty sure if I call my ISP they can give me new IP adress so ...
 
Isn't there like option in router to have some sort of IP blocker, and I configure it that way that only people with certain IP can connect to my router ? So something like a IP filter option of some sort.

And I'm pretty sure if I call my ISP they can give me new IP adress so ...
A DDOS is an overload of the available bandwidth you have on the WAN port of the router. Banning an IP internal to the router just prevents LAN clients from accessing that IP address. Overloading the WAN can only be identified and fixed by your ISP.
A new public IP address may change something, if you have actually annoyed someone enough to attack you. But you don't know that you have actually been attacked. Logs from your router MIGHT give you an indication, but they may also show nothing.
 
The default is nobody can connect with your router. There is no way to prevent them from sending garbage traffic but your router will discard it. Problem is it has already consumed the bandwidth coming to your house before the router can discard it.

DDOS attacks against a home user are very rare it would more be a company someone was trying to knock offline.

Why do you think this is your problem. Do you have any logs or something showing you are being attacked. Be careful to not convince yourself you have some issue you do not.
 
I mean I know my internet capabilities ... It's slower than usual, sometimes random disconnects , sometimes random goes offline for 1 minute than it comes back , random site loading errors sometimes and stuff like that.
 
I mean I know my internet capabilities ... It's slower than usual, sometimes random disconnects , sometimes random goes offline for 1 minute than it comes back , random site loading errors sometimes and stuff like that.
When is the last time you simply restarted your cable modem/router (or whatever device you use to connect to the internet)?

Regarding the router, look at that section in this older guide (I need to update it soon):