Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

I'm currently running a game server on a dedicated Windows 7 machine and it is being attacked.

How do I know what kind of attack it is and from whom is sent?

When he attacks, the RDP freezes and the server doesn't respond.

I've tried different methods of protecting the server with firewall rules and nod32 firewall but nothing worked.

share|improve this question
4  
How do you know that it is an attack and not a software or OS bug? – schroeder Dec 19 '12 at 19:54
I have windows 7 fully updated. – Leo Dec 19 '12 at 20:22
What security do you have between the game server and the internet? Are you running any intrusion detection? What ports are open? What "game server" are you running, and is it up to date? Merely being fully patched is not evidence that the software is bug free. – Mark C. Wallace Dec 19 '12 at 20:51
1.I don't have IDS 2.80,8080,5816,9958 and rdp : 3216 , I'm running a game called conquer which is "open source" and updated by me . – Leo Dec 19 '12 at 21:01
4  
My question stands: how do you know that it is an attack and not a problem with the server itself? What is your evidence of an attack besides the server locking up? Have you found/configured the logs yet? Data, data, data ... – schroeder Dec 19 '12 at 21:38
show 2 more comments

1 Answer

up vote 3 down vote

The short answer is that you need more data. You need firewall and server logs to determine what happened at the time of the event. You can also run a packet capture and analyze the pure traffic for anomalies (use Wireshark for packet captures, Snort for IDS, etc).

share|improve this answer
1  
Agreed. OP has essentially zero evidence that this is an "attack" of any kind, and not simply an OS bug or networking issue. When you see hoof prints, look for horses, not zebras. – Stephen Touset Dec 19 '12 at 22:32
I recommend Security Onion for this. Its pretty easy for people who don't have experience setting up these things. – Rell3oT Dec 19 '12 at 23:42

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.