PDA

View Full Version : Potential DDoSer



Dfyyyy
14th October 2012, 19:03
Banned a user for being a troll; meatspin spray, mic spam, over all annoying. Few seconds later experienced horrible lag only on one of my servers.

The guy goes by Joseph and other aliases. After I banned all traffic from his IP address, it stopped.

He has a long list of bans on google.

http://steamcommunity.com/id/josephhuggins/

# 494 "????" STEAM_0:1:9855119 00:12 198 55 spawning 92.24.182.236:27005

https://www.google.com/search?q=STEAM_0%3A1%3A9855119


Just a heads up for all you server owners.


Dfyyyy

Dfyyyy
28th October 2012, 23:00
Uncle Jemimus
STEAM_0:1:24061138
174.22.43.189

Another DDoSer and server crasher.

I know I need demos etc, but I never am on when it happens, my admins are.

Digit*
28th October 2012, 23:21
If you have admins, then it would be a smart thing to have them record the demos for you. Might be a bit of a hassle but atleast you've got some solid proof to prove your case.

Although what you have posted serves as a warning for other server owners just fine. :)

Bravo
28th October 2012, 23:21
One of these guys may have hit my server the other day, it kept crashing wasnt responding etc etc.
Its possible this also caused the issue someone raised for a Cake server.

Jonzky
29th October 2012, 00:02
One of these guys may have hit my server the other day, it kept crashing wasnt responding etc etc.
Its possible this also caused the issue someone raised for a Cake server.

Are you guys talking about DDOS or DOS (possibly using the source engine query (which I thought may have been patched?)).

If its the later then there are plugins out there that will stop and log anyone trying to bring down the server. Ifs its a DDOS then there's not much you can do to prevent it (assuming your lines are getting saturated).

Edit:
Not sure if it works and/or is still needed but:
https://forums.alliedmods.net/showthread.php?t=95312

Dfyyyy
29th October 2012, 00:21
Mixture of both, he mentioned a site he uses.


StOyKi: double that real age much
StOyKi: well gl with the ban
StOyKi: btw fyibooter works just as good



StOyKi: So btw
StOyKi: the command thing
StOyKi: block it
StOyKi: with that source anti cheat
StOyKi: it blocks command spam

Sparks
29th October 2012, 02:15
Both STEAM_0:1:9855119 Apand STEAM_0:1:24061138 appear to have already been banned on our sourcebans community.
Thanks for the heads up.