A Rant: DDos Attacks

[itzSpitz-1420]

For a long time now, way too many comp games have been being hit with DDos attacks. At this point, I am beyond tired of it. I just came out a group where though we were stacked, 2 of our 3 games had our team DDos’d, with a total of 3 victims - where we would have literally won 3/3 of those games rather than 1/3. We almost 1 v 4’d those 2 games.

I am sorry for the rant post, but I think we can all agree something needs to be done about this. I know this is an Xbox issue as far as I am aware of, but I feel like there should be some Blizzard responce/initiative since this is being abused in one of their games and is clearly against their ToS. Even if it is as simple as a statement, it would at least feel like something is being done about it. It is becoming difficult to get motivated to play knowing that a 100% winnable game can be for no reason become a 0.01%.

I welcome anyone else to rant here, its just… frustrating… I might take a small break from OW.

[Kaedi-11739]

I should note Blizzard Customer Service has responded to perceived DDoS problems on Xbox in a forum thread on technical support. TL:DR. Avoid using Xbox Party Chat to avoid exposing your IP address. Here is the full post:

@Drakuloth

Hey all,

I wanted to take some time here to talk about what a DDoS attack is and is not, since there seems to be some misunderstanding here in this thread. I’m also going to provide some general tips to help with connection issues. This is going to be a somewhat long post because there are a few inaccurate things in this topic that I need to correct, so bear with me. I want to make sure I’m helping you all avoid making your IPs vulnerable to anybody who might do this sort of thing. Hopefully it helps anybody reading understand this all a bit better.

What is a Denial of Service attack and how does it work?

So let’s start with what a Denial of Service attack is. A Denial of Service attack happens when a person or organization floods a specific router with a bunch of requests by targeting its IP address. The router eventually becomes overwhelmed, resulting in connection issues for anybody who needs to use that router as long as the router is under attack. A Denial of Service attack is only a “Distributed Denial of Service” (DDoS) attack if it targets a router that affects many thousands of users. The fact that it targets a major internet router somewhere is what makes the attack “Distributed.” In the rare event that one of you are actually suffering a Denial of Service attack specifically, that is not a Distributed attack, it’s just a DoS attack. While mostly semantics, I thought that might be good to know for your personal information.

So they need my IP to do a Denial of Service Attack. How do they get it?

Without going into the actual process by which this is done (I don’t want to encourage any more people to do this, because it’s illegal), it starts by having a Peer to Peer connection with another person. I’m bringing this up specifically because it is impossible for someone to get your IP address from within Overwatch. We do not use any Peer to Peer connectivity in Overwatch - as both your game connections and Vivox go through our centralized servers.

Currently, some Party Chat on Xbox Live goes through Peer to Peer, but this is a problem that Microsoft is currently working on . Because Peer to Peer connections do not occur within Overwatch, your best chance at avoiding such an attack is to never join an Xbox Party Chat Request from someone you do not trust. If you only use Overwatch in game chat to communicate, you will not have your IP exposed, since all traffic goes through a centralized server.

I may have exposed my IP address and I think I’m being attacked. What do I do?

Please note that there is nothing that we can do to help you with a Denial of Service attack, because we have no control over your IP address. Similarly, if you are disconnecting from the game for any reason, we do not remove leaver penalties . If you’re regularly disconnecting, you need to troubleshoot the disconnections, and if you think you’re disconnecting due to a DoS attack, that means reaching out to your Internet Service Provider.

Since a DoS attack requires your IP address, the easiest way to fix it is to contact your ISP and ask them to change your IP address. Once they do this, the attacks should stop (unless you join a Peer to Peer service with someone and expose your IP address again.) With that in mind, if you continue to disconnect after changing your IP address, you were not experiencing a DoS attack. You’d want to do normal connection troubleshooting instead.

I hope this covers a bit about the situation and how you can avoid being DoSed, or fix situations where you’re in a position to be DoSed. Note that beyond providing this information, there’s nothing else we can do as support. If you run into any other issues, however, feel free to create a new topic about them.

[itzSpitz-1420]

Welp that was swift… not quite sure how I missed this. Thank you!

[Kaedi-11739]

They locked the topic in Technical Support because it kept getting bumped.

[Zee-12344]

@Kaedi-11739

TL:DR. Avoid using Xbox Party Chat to avoid exposing your IP address.

Always found it suspicious that people kept inviting me to parties ONLY in Comp.

[Meteor-14336]

There is a specific service people use (not saying the name) to obtain people’s IP address just by entering their gamertag. That’s how the biggest part of the DDoSing works.

I don’t know what could be done about it, since the service is 100% legal, but the DDoSing is not. I have no clue how it would be handled

[Kaedi-11739]

As mentioned the Xbox Party Chat service is what is being used to acquire IP addresses from players. Microsoft is working to dismantle Peer-to-Peer party chat entirely.

If you refer to some third-party software that does this, and if you have information on this, DO NOT post on the forums. Instead, send an email to hacks@blizzard.com.

[JuniorMcCoy-1279]

Thanks Wyoming. Someone finally pays attention to us console players