DDoS in DOTA 2 for Dummies: Everything you need to know. With pictures.

With DDoS being so popular right now in pro games, I decided to write a guide on what it means and what it is for DOTA 2. So let's get started and I hope you find some of my advice helpful.


**What is DDoS?**

There are tons and tons of information you can google about this subject so I'll try to be brief: DDoS is an attack triggered by a computer or server that receives a target and the order to start. Once started, [a network of infected computers](http://www.cisco.com/web/about/security/images/csc_child_pages/white_papers/ddos_fig02.jpg) will begin sending dead packets (useless data) to the target's router and hence blocking all sorts of communication. Imagine [a river flooded with trash and your router is trying to get rid of it with a shovel](http://www.chinadaily.com.cn/china/images/attachement/jpg/site1/20100802/00221917f7600dc04ded0d.jpg).


**How does it happen?**

First things first. In every DDoS attacks there are only two things that matter:

*Service provider: The attacker first has to find a DDoS service provider or as they are called nowadays: "Stressers". They are paid services and their prices depend on the amount of time they want to DDoS you for and how much bandwidth they offer (possible amount of trash they can throw at your router).

*The target: A target is identified by its IP address. If they have it, they can DDoS it. The attacker may encounter port problems but with enough dedication he WILL find the spot.

Once they have your IP they can use the DDoS provider to send trash packets to your router and eventually make your connection so painfully slow that you'll think you're disconnected.

So if one of these salty assh* gets their hand on the Dota 2 server's IP and they happen to be renting a DDoS Service then [this will probably happen](http://i.imgur.com/oGrtFRk.jpg).

*Note:* Picture taken from [this post](http://www.reddit.com/r/DotA2/comments/31n2rm/this_was_just_stupid_volvo_pls_bristle_paused_at/).


**How are IPs leaked?**

This is probably the most important part about DDoS. If there is no target, then there is nothing to DDoS.

Now, Valve server IPs are extremely easy to find so even scriptkiddies could DDoS the servers somewhat easily. So, how do you find the IP?

*[You can ask Dota 2 to give you the IP](http://prntscr.com/6qfx0c).

*Even if they spoofed the server's IP in the console, you could use a [Packet Sniffer and find it anyways](http://prntscr.com/6qg5uo).


Okay but that's for when Dota 2 servers get DDoSed, what about **pro players**?


*Your IP can be found by using a Skype resolver. All they need to find your IP is your Skype username. Even if you're online, the system will have your last used IP on file. [Example](http://prntscr.com/6qg27w).

*There are several other ways of finding your IP such as [Email sender IP](http://aruljohn.com/info/images/howto_yahoo2.png), ~~[packet sniffing Steam Voice Chat](http://cloud-4.steamusercontent.com/ugc/919017593061261582/08BE37D3477D124CEAB3473183E81311D6381793/)~~, and probably any number of other ways that I haven't heard of yet.


**Example**

So I found a free DDoS service that delivers a 10mbps blow to your router (up to 200mbps I think) as a trial for their service. This free version is strong enough to take down most domestic networks.

But that's not all, [see how incredibly easy it is to DDoS something](http://prntscr.com/6qg6r0). All you need is the target's IP and you're set.


**Protection**

We've reached the final part and before I continue allow me to tell you that I'm not a security expert and there may be several other ways to protect yourself from DDoS. So here we go:

* Rent a VPN. VPNs will hide your IP behind a strong and protected server. If you're chatting, sending emails or using Skype for some reason, make sure you're connected behind the VPN. You need to find one with a proper location either near you or near the target servers. I'd recommend PureVPN since it's cheap but there are literally hundreds of VPN providers.

* Limit your Skype usage. I know it's hard for pro players because most tournament organizers use Skype to communicate with everyone involved but yeah... as you can see, all they need is your username and even if you're offline they'll find your IP.

* Make sure nobody besides your team or friends know the Teamspeak server IP. Yes, Teamspeak servers can be DDoSed as well.

* Make sure you don't have any stupid viruses installed on your computer. Most people think their computers aren't infected, but you'd be surprised.

* Firewalls. Some routers have a built-in useless firewall. Windows also has a [useless built-in firewall](http://i.imgur.com/3fA05yq.gif) but it doesn't really matter since your router is the target. Anyhow, I'm sure you can hire an IT expert to set up a firewall for your gaming house or CASTING STUDIO.

* Don't post on fishy forums. Mods and Admins can see your IP.

That's about all I know. If you know of more ways to protect yourself please feel free to post them in the comments so I can add them here with due credit.


**HELP THEY ALREADY HAVE MY IP**

Once the attacker has your IP and an attack is underway (you'll notice you're being attacked because your internet will stop responding).

Now, does your ISP have dynamic IP?

* **Yes**: Close Skype and head over to your router and turn it off. Wait for 30 seconds and turn it back on. That should be enough time for it to get a new IP. Now go back to the previous section and protect yourself.

* **No**: Why the f*ck not? Okay whatever. Close Skype and call your ISP. Don't tell them you're being DDoSed unless you really really have to. Odds are that the person who's speaking to you won't know what that means. If he's clueless, ask to speak with his/her administrator/manager/person in charge. Tell them you need to reset your IP because it's causing trouble while playing online games or something.
When you're done, go back to the previous section and protect yourself. And also, change your ISP to one that gives you a dynamic IP.

**Closing remarks**

I'm also sick of watching paused games because of DDoS and I just want it to go away. You can't stop DDoSers, but you can stop yourself from being DDoSed.

Also, I wouldn't be surprised if mods deleted this thread like they did with those about scripters.


Any suggestions, comments or feedback are welcome.