Around 4 months ago, someone learned my IP, and is threatening to DDoS attack me if I am not his slave. He was breaking the Discord TOS with all kinds of stuff in my DMs. I blocked him, but one of his friends told me to friend him back, or he will DDoS me.

What should I do?

  • 66
    Many internet service providers change your IP address every day, or when you reboot your router. Unless you have specifically ordered a static IP address from your ISP, a 4 month old address is probably irrelevant. A script-kiddie level DDoS attack against your home internet connection is also one of the least scary threats there could be. ISPs block various attacks every day.
    – amon
    Commented Nov 13, 2021 at 12:41
  • 31
    Why are you afraid of DDoS?
    – schroeder
    Commented Nov 13, 2021 at 14:09
  • 61
    Report the friends as being part of the harassment.
    – schroeder
    Commented Nov 13, 2021 at 14:11
  • 35
    "His friends told me to..." implies that you know who this person is. Report him to somebody. If you are both in school, report him to the school. If he sent these messages on a social network, report them to the network. If he is a child tell his parents. Tell his friends that you are doing all of this. This is "cyberbullying" and you should not put up with it. Commented Nov 14, 2021 at 20:23
  • 30
    Then they are probably just threatening random people in the hope of finding someone gullible enough to do what they want. Commented Nov 14, 2021 at 21:48

6 Answers 6


ISP's have ways of dealing with DDoS attacks targeting one or more IP addresses on their network. See How can ISPs handle DDoS attacks? for some interesting reading on this subject.

What you are describing sounds more like online banter than a serious threat, and I would be surprised if your your adversary actually follows through with their threat (or even has the capability to do so). But, if he does attempt to mount a DDoS attack targeting the IP address that your ISP has assigned to you, and you are impacted by it - simply report it to your ISP and they can likely mitigate the problem using one of the methods in the above link.

  • 2
    I do not feel the threat should be trivialised as 'online banter', although the attack may not be feasible the social manipulation involved suggests a malicious intent.
    – Baa
    Commented Nov 16, 2021 at 15:22
  • 1
    @Hugo That's a hard call, and we don't have all the info. In this case, the social manipulation is only possible because the OP takes it seriously. And, depending on the context, pseudo-malicious intent could be prevalent among peers.
    – jpaugh
    Commented Nov 16, 2021 at 15:50


He's trying to scare you into doing what he wants, but he has no means of harming you by knowing your IP. Feel free to block him and disregard anything he says.

  • 23
    This answer is not helpful. Assuming the person is a semi-pro video gamer, YouTuber, TikToker, Twitch streamer, or other online personality, a DDoS attack would disrupt their ability to work, and deny them their livelihood. Commented Nov 13, 2021 at 14:58
  • 49
    It is a helpful answer.
    – hft
    Commented Nov 13, 2021 at 22:05
  • 32
    @JohnDeters Except that that supposed "DDoS Attack" isn't real. It's a scare tactic, nothing more.
    – user163495
    Commented Nov 14, 2021 at 1:51
  • 24
    I don’t understand how you can proclaim it’s a scare tactic. DDOS as a Service remains widely available, despite the arrests of a few lowlife perpetrators. And it’s still a very cheap and effective tactic, especially if you only need to harass someone during a set timeframe, such as a video game tournament. Commented Nov 14, 2021 at 5:25
  • 49
    Because 99.9% of the time it is. Just because it's technically possible doesn't mean the threat is credible. It is overwhelmingly more likely that it's just a guy with rudimentary tech knowledge trying to scare someone.
    – user163495
    Commented Nov 14, 2021 at 5:32

Contact your ISP’s security team and explain your situation. They should be able to help you change your IP to a new address.

  • 5
    This is the correct answer (+1). Provided that the threat even makes sense, an end user has absolutely no capacity to defend against a (real) DDoS.
    – WoJ
    Commented Nov 14, 2021 at 18:08
  • 3
    There is no need to contact the isp in order to get your ip changed, unless you are paying out the nose for a corporate account with a static ip; that would just waste time. Just unplug your modem and leave it that way for a while, and eventually when you plug it back in, they will likely have assigned you a new ip.
    – kloddant
    Commented Nov 15, 2021 at 18:29
  • 2
    @kloddant This is not always the case, some ISPs assign dynamic IPs across sessions for devices and you have to take your router down for hours or sometimes even days to get a new address assigned. It's useful to inform the ISP or just ignore the threat, since ISPs know to protect their network anyways. The attacker will likely lose money for nothing when DDoSing him. Commented Nov 16, 2021 at 8:24
  • @kloddant I need to manually change my MAC address, or I keep my IP address for months at a time. Not everyone has a router that can change MAC addresses either.
    – user
    Commented Nov 16, 2021 at 20:20
  • True, let me clarify: I would first try changing my ip by unplugging the modem for a while and seeing if that does it, because that is much less of a hassle than calling up your isp, listening to a series of automated messages, and waiting on hold forever. It's a convenience thing. But yeah, if that doesn't work, then the OP might have to call them.
    – kloddant
    Commented Nov 16, 2021 at 21:02

Not enough information for a qualified answer. I will make some assumptions and spell them out. Basic assumption: You actually care about being DDoS'ed (you earn money doing live streams or something).

First, I assume he means a static server IP address, not your home IP. Most ISPs use dynamic pools to assign IPs and you will get a different IP from time to time - sometimes every day, sometimes whenever you reconnect, depends on your ISP. If he means your home IP, you are good, because in 4 months you most likely have a completely different IP now.

Then again, a static server IP makes no sense to "find out". They're public. All it takes to "find them out" is "ping domain.ext" and there it is. Which also means that changing the IP doesn't do squat.

Second, I assume that he actually has the capability to make a DDoS attack of sufficient strength to knock your server offline. Most likely that will trigger the anti-DDoS protection of your hosting provider. It is still likely that your server will go offline. It is not likely that it will stay offline for long, as your hosting provider will take action - they don't like DDoS traffic clogging up their network.

Third, I assume that he doesn't have sufficient capability to knock your hosting provider offline. People who sit on that kind of botnets don't generally use them to threaten random people into "re-friending" them, that's just ridiculous. You can make real money if you have a proper botnet. He'd rather do that.


Possibility a) we're talking about a server and a person who has the actual capability to run a DDoS. Advise: ignore him - sure he can knock you offline for a bit, but it'll cost him more than you and it won't last.

Possibility b) we're talking about your home IP. Then either - b1) the guy is a troll who's trying to scare you and he actually hasn't half a clue about how things work. You've most likely changed IP since then. ignore him, he won't harm you. Or b2) he keeps track of your changing IP and actually is only half an idiot. He could DDoS you and disconnect you, which might be shit during a game or a live stream. If so, talk to your ISP and report him to the police (threatening negative, illegal consequences if you don't comply with a demand is a crime). Also report his friend as an accomplice. Note that, depending on your jurisdiction, two people collaborating to commit a crime is sometimes enough to qualify the deed as organized crime - I'm not kidding. Once these people get involved, the shit hits the fan. Do not inform them that you've reported them. That could be construed as interfering with a police investigation.

Involving the police might seem harsh. I don't know the circumstances of your case. If you think "wait, no, that's not what I meant" then my basic assumption may be wrong and you will not be seriously affected by a potential DDoS. If the whole thing is mostly inconvenient and just scares you a bit, then ignore him and if he does eventually DDoS you, disconnect, read a book for an hour, come back and you probably got a new IP from your ISP and are online again. If not, call the ISP technical department and complain about a service outage. They'll figure it out, filter the DDoS traffic and put you online again.

  • 7
    I don't think reporting some dumb kid to the cops is the right thing to do. It's not like he's threatening to kill OP. Sending armed men with legal immunity and a power complex to some idiot who threatened to slow down someone's internet is way overkill. It's a good way to get someone shot.
    – forest
    Commented Nov 14, 2021 at 6:40
  • 1
    +1 for pointing out your private IP address changes occasionally with most ISP.
    – Baumflaum
    Commented Nov 14, 2021 at 9:22
  • 14
    Involving the police is not harsh. If you believe somebody is doing anything illegal you should absolutely report it. Nobody is forcing this person to do this (the denial of service attack I mean)
    – Neil Meyer
    Commented Nov 14, 2021 at 12:45
  • 11
    @forest In the UK at least, there's a sub-branch of the police force dedicated to dealing with script kiddies and 1337 haxxors. They rarely even get a criminal record for a first offence; just a “here's why this is a crime, here's how many years you'd get, don't do it again” letter (or visit – unarmed, obviously –, if the police aren't too busy). In the US, this is probably bad advice, but in many countries it's good advice.
    – wizzwizz4
    Commented Nov 14, 2021 at 19:12
  • 3
    @forest like I said, not enough information. It might be a dumb kid messing with another scared kid. Or it could be a verified asshole threatening someone who relies on the income from streaming to pay his bills. Let the asker decide how serious the situation actually is to him.
    – Tom
    Commented Nov 15, 2021 at 7:56

The worst this person can do is interfere with your internet speed. They won't be able to "hack you" or do anything to your computer, nor will they be able to obtain any sensitive information from you just because they know your IP. Don't worry about any serious consequences. Of course, if you're a competitive gamer, losing a match because someone is attacking your IP can be frustrating.

You have three options: comply, refuse, or protect yourself. Complying and becoming this person's "slave", as you put it, is probably not what you want. Given that this is their demand, it's very possible that they're bluffing anyway. It's not like they're blackmailing you with life-destroying secrets. Refusing may result in your internet speeds being decreased or you even being temporarily disconnected from the internet, but that's all. Finally, protecting yourself is most easily accomplished by changing your IP. If you have a dynamic IP, then rebooting your router or simply waiting for a new IP to be assigned to you is sufficient. Otherwise, you'll want to contact your ISP and explain the situation to them. Simply tell them that someone is threatening to DDoS you. They may change your IP for you.

Although ISPs do have ways to protect from DDoS attacks, they can only do so much, and often their last resort is IP blackholing, which protects them (and their other customers) at the expense of the attacker's target (you). Unfortunately, many people can still perform DDoS attacks sufficient to knock someone off the internet for a short time despite mitigations than modern ISPs often use.

  • 2
    You might need to leave the cable modem off for its lease period - often (but not always) 24 hours. The modem's status pages might give the lease period, or if can telnet/ssh into it, you can often find it that way. Or simply ask your ISP for the public IP's lease period.
    – CSM
    Commented Nov 15, 2021 at 13:15
  1. Figure out how this person found your IP address. Do you share any P2P (Peer-to-Peer) applications with this person? Fix this.
  2. Change your IP address

Discord is not P2P, so they didn't get your IP address from Discord, unless you clicked a link. This is where the HTTP proxy configured within your default browser will help. Generally, assuming you're a gamer, VPNs encapsulating your entire connection can negatively affect your ping/MS in game, which isn't great for gaming.

Furthermore, you can report this person to Discord here: https://support.discord.com/hc/en-us/requests/new

  • 12
    I clicked on a link, as I did not know that it was an IP logger... I tried rebooting my router, but it did not change anything...
    – user269980
    Commented Nov 13, 2021 at 17:44
  • 1
    @ThePro501 sometimes you have to keep your router off for a longer time. You should unplug it over night if possible, next day you should get a new IP assigned. If this isn't possible, simply contact your ISP. Also make sure to not open any URLs you got from the person who threats you again. I hope you didn't execute any files he or your friend sent you, it could be the case that he claims DDoS, but it's rather a virus infection on your system that can cause any trouble. Commented Nov 16, 2021 at 8:27
  • 1
    @ThePro501 That's worse as a carelessly opened link might provide them with quite a bit of info. Still, sounds like script kiddies who miiight've been able to get their hands on something like DDoS as a service. I'd ignore them because they obviously hope to blackmail you the easy way, so the more you respond the more gullible you appear. Blacklist, report, done. If you end up actually experiencing the DDoS, just contact the ISP. Still beats wasting time dwelling on it daily. That time&effort is lot better spent reading about cyber hygiene. And these kinds of lessons are important in life.
    – Lodinn
    Commented Nov 16, 2021 at 12:17
  • @Lodinn Well, at that time I did not know what an ip logger was :/
    – user269980
    Commented Nov 17, 2021 at 19:05

You must log in to answer this question.