This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is it possible to trace the attacker through a DDoS?

0

I was recently hit offline by multiple IP's confirmed but I need to figure out if its possible to trace them to the actual attacker.. There were only 23 IP's with TCP connections most ranging in the US, and Singapore, and a few in Germany. Is it possible to trace it to the attacker?

asked 14 Jun '13, 00:16

SnailTrail's gravatar image

SnailTrail
1111
accept rate: 0%


One Answer:

0

In general, no. They are either spoofed packets or sessions from bots (computers that were taken over by exploiting a vulnerability). Either way, the source IP is usually not related to the attacker.

answered 14 Jun '13, 00:21

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%