The hosting company can use Wireshark and use port mirroring on for the Linux box hosting this server (saw this on Gametracker) to catch the source IPs and create firewall rules.

I can ping this server over the Internet (not good btw), and can probably SSH to it (haven't tried it though). There are probably no firewall rules to block certain ports and services (as if this server is in the DMZ).

If its serious DDoS, they will have to have a lot of bandwidth to accommodate for the high amount of packets overwhelming their network because the firewall may only be able to tolerate so many requests being sent to it.

I used Wireshark to catch the source IP crashing my old Battlefront II server I used to host for PS2 and it turns out I found out who it was because it was the same IP of another person who hosted their own server listed on Gametracker. I called him out on it and he denied it despite Wireshark clearly saying it was him (still have logs from 10 years ago lol). He was jealous my server was more populated than his xD.

Just some things I've noticed and suggestions.

I'll just reply on 2 above points 1) wireshark in my opinion is crap. We have a physical firewall attached to this server.
2) we have a lot of bandwidth it is a server hosted in a real data center with multiple backbone connections, it's not a virtual machine

(I'll reply properly when I'm on a computer)

Yea wireshark is free xD.

Wireshark is useless for what we have. Also highly unreliable. Its easier to monitor the connections and log them then look for inconsistencies later

Back in my day we just sent a swat team to your house

We still do that, if you wanted you could probably up it to the national guard if you tried hard enough.

Ash stole my profile picture so i stole his signiture