My network has reset several times and I’ve narrowed it down to an apparent DDOS attack. Never the same IP source, all hitting the specific port I use for incoming qBt traffic, shutting down the client doesn’t help, router is getting 10-20 requests per second for idk, several hours. Is there anything I can do about this?
Edit: Thanks everyone, it’s apparently not an attack and my router just sucks aha. My router’s log was filled with “DoS(SyN-Flooding)” messages, and according to Wikipedia that’s a DDoS attack:
“DoS(SYN Flooding): IN=ppp1 OUT=br0 MAC= SRC=source-ip DST=qbt-ip LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=52897 DF PROTO=TCP SPT=source-port DPT=qbt-port WINDOW=64240 RES=0x00 SYN URGP=0 MARK=0x8000000”
You must log in or register to comment.
Maybe too many connections, use BitTorrent calculator to recommend some settlings (just input your max upload bandwidth)
10-20 requests per second
That’s not a DDOS
My network has reset several times and I’ve narrowed it down to an apparent DDOS attack
It’s not. You will need to lower your torrent client’s incoming connections limit and/or set lower limits to your incoming/outgoing bandwidth in your torrent client. It is clear your network router is unable to handle too much torrent traffic hitting it at the same time, hence the issues you are experiencing.
For qB
Tools / Options / Connection / Global Maximum Number Of Connections
Tools / Options / Speed / Global Rate Limits
There’s no specific number to enter there, you just have to experiment a bit and set lower numbers until the problem goes away and your network is stable.
shutting down the client doesn’t help
It will, eventually. It does take a bit for other torrent clients to realize you’re no longer online and stop sending you traffic / sharing your IP with other peers.
Thank you so much! Turns out my router is buggy and yes, I realized the hits were just peers. I’m a stoopid
Buy a real router, solve the issue permanently without restricting yourself.
I had the same issue with my router, and i had to go into Advanced -> Socket Backlog Size and set it to 1 (default is 5) to completely fix it. Do you have a TP-Link router as well?
Close the open port(s) for a while and take a break? It’s bots, and maybe enough rejections will make the botnet move on.
