Which a**hole is dosing

Join Discord
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
Which asshole is dosing

Some nob end keeps dosing my server, im not doing nothing to no1 else whats the point?

Who every it is dont deserve to be aprat of any community if they cant act like a member of one.

Heres the logs of the router of my dedi

Code: 
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.95.232.46], Wednesday, Jan 27,2010 23:27:49
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [211.115.112.85], Wednesday, Jan 27,2010 23:27:49
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.73.136.179], Wednesday, Jan 27,2010 23:27:49
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [211.115.112.85], Wednesday, Jan 27,2010 23:27:48
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.95.232.46], Wednesday, Jan 27,2010 23:27:48
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.73.136.179], Wednesday, Jan 27,2010 23:27:48
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [211.115.112.85], Wednesday, Jan 27,2010 23:27:47
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.95.232.46], Wednesday, Jan 27,2010 23:27:47
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.73.136.179], Wednesday, Jan 27,2010 23:27:47
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [211.115.112.85], Wednesday, Jan 27,2010 23:27:46
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.95.232.46], Wednesday, Jan 27,2010 23:27:46
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.73.136.179], Wednesday, Jan 27,2010 23:27:46
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.95.232.46], Wednesday, Jan 27,2010 23:27:45
[DOS attack: ASCEND_KILL] attack packets in last 20 sec from ip [220.73.136.179], Wednesday, Jan 27,2010 23:27:45
 
Last edited:
Sort by date Sort by votes
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
Re: Which asshole is dosing

or you mean you have a remote dos program which does from proxys, asshole. everytime this happens u show up.
 
Upvote 0

danboss

Dedicated Member
Dedicated Member
Sep 2, 2003
104
4
114
Re: Which asshole is dosing

220.95.232.46 has been implicated in DDOS attacks since 2004, so I assume that it is someone using a proxy server.
 
Upvote 0
Hany

Hany

Golden Oldie
Golden Oldie
Feb 28, 2005
886
32
135
Re: Which asshole is dosing

ive been online on lomcn since morning lol?, i aint that sad if you ever visited our forums you will see we've been working our ass off on updates, spending 10hours a day for big patches, i aint got time to waste with such stuff
 
Upvote 0
IceMan

IceMan

Hero's Act Mir 2
Legendary
Apr 17, 2003
8,544
2
370
350
Re: Which asshole is dosing

listen this is not the place to talk about this.
you need to dos proterst ur server so it dont happen
 
Upvote 0

danboss

Dedicated Member
Dedicated Member
Sep 2, 2003
104
4
114
Re: Which asshole is dosing

Do you run an old version of phpBB?
Here's a log of people who tried to take advantage of the old (and since patched) highlight exploit in phpBB (ie- script kiddies who tried to hack this board) over the past few weeks:

220.95.232.46 - - [28/Nov/2004:17:10:33 -0500]
Click to expand...
 
Upvote 0
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
Re: Which asshole is dosing

nope =/...... i mjust letin ppl know i only told new ip address here on lomcn, and its getin dos'd, so some1 on this forum is doing it.
 
Upvote 0
kyndigs

kyndigs

LOMCN Developer
Developer
Feb 19, 2009
1,126
117
190
Reading, UK
Re: Which asshole is dosing

These IPs are all originating from korea.

Code: 
IP address [?]: 211.115.112.85 [Copy][Whois] [Reverse IP]  
IP country code: KR  
IP address country:  Korea, Republic of

Code: 
Network Name : KIDC-INFRA
Connect ISP Name : KIDC
Connect Date : 20040113
Registration Date : 20040715
Publishes : Y

[ Organization Information ]
Organization ID : ORG137200
Org Name : LG DACOM KIDC 
Address : Nonhyun-dong, Kangnam-gu
Detail Address : KIDC, 261-1
Zip Code : 135-010

[ Technical Contact Information ]
Name : IP manager
Org Name : LG DACOM KIDC
Address : Nonhyun-dong, Kangnam-gu
Detail Address : KIDC, 261-1
Zip Code : 135-010
Phone : +82-2-2086-2924
E-Mail : [Who Is Domain][trace][Reverse DNS Search]

As smart as Hany is, I dont think he is re-routing a Dos attack from korea, so please keep accusations and abuse till you have proof.
 
Last edited:
Upvote 0
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
Re: Which asshole is dosing

any idea how i can block these ips? ive enterd the IP's and unclecom.com + email.unclecom.com to block sites on router. But still its slowing inet connection down.

Any other way?
 
Upvote 0
Liandrin2

Liandrin2

Golden Oldie
Golden Oldie
Loyal Member
Jan 14, 2004
890
6
125
Maybe it´s somebody that you´ve screwed over with donations to a past server?

Know any Koreans who donated alot?
 
Upvote 0

danboss

Dedicated Member
Dedicated Member
Sep 2, 2003
104
4
114
Code: 
Test ID:	10019
Category:	Denial of Service
Title:	Ascend Kill
Summary:	Crashes an ascend router
Description:	It was possible to make
the remote Ascend router reboot by sending
it a UDP packet containing special data on
port 9 (discard).

An attacker may use this flaw to make your
router crash continuously, preventing
your network from working properly.
[B][COLOR="Red"]
Solution : filter the incoming UDP traffic coming
to port 9. Contact Ascend for a solution.[/COLOR][/B]

Risk factor : High
Any good?
 
Upvote 0
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
danboss said:
Code: 
Test ID:    10019
Category:    Denial of Service
Title:    Ascend Kill
Summary:    Crashes an ascend router
Description:    It was possible to make
the remote Ascend router reboot by sending
it a UDP packet containing special data on
port 9 (discard).

An attacker may use this flaw to make your
router crash continuously, preventing
your network from working properly.
[B][COLOR=Red]
Solution : filter the incoming UDP traffic coming
to port 9. Contact Ascend for a solution.[/COLOR][/B]

Risk factor : High
Any good?
Click to expand...

ive blocked port 9 but, aint done anything bud

EDIT: Ive noticed my connection to the dedi is fine now. but inet on dedi not working.

i keep checkin logs im still been spammed but stopin at router
 
Last edited:
Upvote 0
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
okay, ive changed settings to not respond to any ping, this shud do the job :P

Edit: lol cant connect to Dedi now, emailed them to fix problem =/
 
Last edited:
Upvote 0
Bon

Bon

Legend
Legendary
Jul 29, 2004
6,726
330
300
Kent, UK
i actually loled at sayin hanys clever enough to dos, hows he gonna dos with his 1mb sand connection. i dont know much about dos, but i always thought ur connection had to be higher than the 1 ur dosin?


Liandrin2 said:
Maybe it´s somebody that you´ve screwed over with donations to a past server?

Know any Koreans who donated alot?
Click to expand...

lol i was gonna post that... there was a few koreans/chinese, something like that that have donated on fourheros, so maybe
 
Upvote 0
The_Legend

The_Legend

LOMCN Veteran
Veteran
Loyal Member
Dec 23, 2009
447
4
45
na not many korean play evilmir, never have.

EDIT: uploading new client now, going to fix this dos problem tommorow, ill update you on the info then,
 
Last edited:
Upvote 0

Pottsy

Legend
Legendary
Feb 26, 2004
3,275
252
329
Lol the amount of security you have on your so called Dedi can be easily flooded with a simple Ping attack of 65K byte packets
 
Upvote 0
You must log in or register to reply here.
Top Bottom