Author Topic: DESTROYER5062 - DoS Attacks (Small but lots of lag) (Read 5821 times)

Glases · February 21, 2013, 07:03:34 PM

I banned destroyer from my server and when I came back after 5 mins, server was lagging VERY bad, I check the console and I find this.

Code: [Select]

Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988
Sending punch packet to 174.16.223.208:17988

So I matched up the IP and it was matched to destroyer.

Code: [Select]

02/21/13 18:03:19 D DESTROYER5062 36171 174.16.223.208
Anyway, he is still doing it on and off, I think he has some kind of script to make him rapidly connect because its lagging like a bitch still.

Ad Bot · Advertisement

Linkusofepica · February 21, 2013, 07:04:19 PM

Just unban him if you want it to stop (I hope that will work)

Glases · February 21, 2013, 07:05:37 PM

Quote from: Linkusofepica on February 21, 2013, 07:04:19 PM

Just unban him if you want it to stop (I hope that will work)

So basically let him DoS me until he gets unbanned? Haha no.

Eepos2 · February 21, 2013, 07:05:47 PM

he can kiss his key goodbye, hope it stops soon.

Quote from: Linkusofepica on February 21, 2013, 07:04:19 PM

Just unban him if you want it to stop (I hope that will work)

Won't help.

Glases · February 21, 2013, 07:06:59 PM

It's now coming from multiple IP's it looks like. But hes still doing it and its lagging like hell.

basicly a whole lot of that VV

Code: [Select]

Got Connect challenge Request from 174.16.223.208:18217
Starting arranged connection to 174.16.223.208:18740...
   o possible[0] = 174.16.223.208:18740
Sending punch packet to 174.16.223.208:18740
Got connect request from 174.16.223.208:18217
  net name = DESTROYER5062
AUTHCHECK: DESTROYER5062 = internet client -> internet server, regular auth
BL_ID 36171 is banned, rejecting
Issuing Disconnect packet.
0 0
CDROP: 480465 174.16.223.208:18217
Got Connect challenge Request from 174.16.223.208:18217
Starting arranged connection to 174.16.223.208:18740...
   o possible[0] = 174.16.223.208:18740
Sending punch packet to 174.16.223.208:18740
Got connect request from 174.16.223.208:18217
  net name = DESTROYER5062
AUTHCHECK: DESTROYER5062 = internet client -> internet server, regular auth
BL_ID 36171 is banned, rejecting
Issuing Disconnect packet.
0 0
CDROP: 480465 174.16.223.208:18217

Got Connect challenge Request from 174.16.223.208:18217
Starting arranged connection to 174.16.223.208:18740...
   o possible[0] = 174.16.223.208:18740
Sending punch packet to 174.16.223.208:18740
Got connect request from 174.16.223.208:18217
  net name = DESTROYER5062
AUTHCHECK: DESTROYER5062 = internet client -> internet server, regular auth
BL_ID 36171 is banned, rejecting
Issuing Disconnect packet.
0 0
CDROP: 480465 174.16.223.208:18217

Zay · February 21, 2013, 07:07:41 PM

Holy stuff I've known DES for quite a long time and I never thought he'd be capable of this.

Linkusofepica · February 21, 2013, 07:08:07 PM

Hmmm... no clue.

Frosting · February 21, 2013, 07:09:14 PM

Maybe he's using more than one computer to lag the server, since it is coming from multiple IPs.

Eepos2 · February 21, 2013, 07:10:00 PM

Quote from: Zay on February 21, 2013, 07:07:41 PM

Holy stuff I've known DES for quite a long time and I never thought he'd be capable of this.

It's actually really easy to do.

YourBuddyBill · February 21, 2013, 07:29:09 PM

I hope he enjoys his key revoke and legal action from his ISP.

Daenth · February 21, 2013, 07:34:51 PM

oh lol this entire thread

This isn't a DoS attack. Punch packets are just tiny bits of information being sent to the client trying to join. They shouldn't affect your game play in the slightest. He isn't DoSing, he's just trying to join multiple times despite the fact he's banned.

Quote from: Glases on February 21, 2013, 07:05:37 PM

So basically let him DoS me until he gets unbanned? Haha no.

One of those IPs are yours. The other is an IP on your local network. The other 3 are not Destroyer5062's, but rather other players.

Destroyer · February 21, 2013, 07:36:30 PM

That starfish, slandering my name.

Eepos2 · February 21, 2013, 07:39:12 PM

Quote from: YourBuddyBill on February 21, 2013, 07:29:09 PM

I hope he enjoys his key revoke and legal action from his ISP.

what legal action lol.

Glases · February 21, 2013, 07:41:20 PM

Quote from: Daenth on February 21, 2013, 07:34:51 PM

oh lol this entire thread

This isn't a DoS attack. Punch packets are just tiny bits of information being sent to the client trying to join. They shouldn't affect your game play in the slightest. He isn't DoSing, he's just trying to join multiple times despite the fact he's banned.
One of those IPs are yours. The other is an IP on your local network. The other 3 are not Destroyer5062's, but rather other players.

This has happened before. http://forum.blockland.us/index.php?topic=208453.0

Daenth · February 21, 2013, 07:56:08 PM

Quote from: Glases on February 21, 2013, 07:41:20 PM

This has happened before. http://forum.blockland.us/index.php?topic=208453.0

Well, I stand corrected about punch packets causing lag. Destroyer5062 still doesn't appear to be DoSing you at all. What those two did to you previously was send a connection request multiple times before the server could even respond. What Destroyer5062 appears to be doing is sending a connection request, waiting for a server reply, getting rejected, and trying again (which is equivalent to clicking your server, clicking join, getting the "you're banned" message, closing the window, and rejoining). Unless the connection are extremely fast, it probably isn't him but a problem on your side.