How to check if there was a DDOS attack or not?

Here’s the story :

I was playing a comp game via the LFG system (6 VS 6) and we caught the first point on Hanamura very fast and we got like 5-6 min to attack B and I started lagging (500-600 ms).

At first, I thought it was my internet connection but my friend could hear me just fine on Discord and it stopped lagging when there was 1 minute left. Suddenly, my ping went back to being just fine but we managed to get B within that last remaining minute (no overtime though), which was very strange.

When it was the opponent’s turn to attack, they got A very fast because of bad play in my team. But the enemy team struggled to catch the last tick on B. when there was less than 2 minutes left for them to cap the point and when were having the upper-hand, I got disconnected from the game. And they were able to catch B (with overtime).

I needed to reboot my computer to be able to start the game again and when I finally arrived, they were already capping the first tick of point A (with their overtime from previous round). I was just able to witness my team lose (I got no penalty).

I don’t want to be paranoid but it sounded really fishy and 2-3 people from the opponent team that were silent the whole game on the common chat started to welcome me with “wb” and welcomy stuff like this which sounded really off as if they were hiding something (they were clearly fake nice to me).

My question is simple : Is it possible to check if someone got DDOS attacked ? It happened less than an hour ago on another account. Can I verify this on my computer’s data or something.

I don’t like accusing people without any proof but I kept track of who that team was and I want to report them as soon as I can prove they DDOS attacked me. So if anyone has any advice to checking out this stuff, I’d be pleased to get your help.

Thanks in advance :slight_smile: !

Heya Presley5,

Checking into something like a DDoS attack is going to be outside of what we can assist with. In my personal experience, you would really need to be monitoring the incoming requests to your modem as you were playing or have a program that logs that information to then analyze posthumously.

That said, if you feel that there is something to investigate, you may always send a report to Risk@blizzard.com. Include the description of the occurrence and any other relevant information, and that team will be able to investigate further.

-Lantrasau

1 Like

Thanks for you quick answer.

Should I just copy-pasty what I’ve posted here to that e-mail address you mentioned ? Do I need to give more details ?

Do I also need to list those fishy players usernames for further investigation ?

Thanks again :slight_smile: !

I’d recommend streamlining a bit, something like;

I joined a 6v6 match via LFG on Hanamura at (Time and Time zone).
My connection appeared stable during the match.
After 5-6 minutes my latency spiked to around 5-600ms, and I was disconnected.
I rejoined, and got some strange responses that made me suspicious of a DDoS attack.

Involved Players:

Generally speaking, for reports like this we want to just stick to the facts and be concise. I know that team is super busy, so keeping extra information to a minimum is ideal. Hope it helps :slight_smile:

-Lantrasau

1 Like

One thing I’d like to add to this, since I was going over threads we checked anyway. If you’ve never played with these players outside of the game, they shouldn’t be able to DDoS your house specifically. Overwatch uses a client to server connection rather than a peer-to-peer. There’s no way within the game client itself for these players to find your IP and perform a DDoS on you.

Keep in mind that with the endorsement system, at least I have been seeing an increase in good sportsmanship when people come back, and an increase in mentions that it’s a bummer a team member left. That is another thing which could explain the welcomes back.

I personally suspect there’s a different type of connection issue going on here. If it comes back, in other matches, try catching a disconnection with WinMTR and reply back with that WinMTR test. We can use that to see if there’s anything else funky going on with the connection between your house and our servers.

2 Likes

Thanks for you answer.

I’m not an expert on the subject obviously. I know there has been a DDoS-er called Notime124 last year on PS4 (I’m on PC though) but I was told it was impossible to proceed the same way on another platform to DDoS attack someone.

My case might be a false alarm. The coincidence made it look fishy. I will definitely follow your instructions if it ever happens again. The only thing I’m sure of is that it wasn’t the whole internet connection that dropped so it could be an issue between my house and the game servers, as you said.

I’ll keep track of it. Thanks again.

Hey you two.

This forum’s for helping people with their tech issues, not arguing and name calling. I’ve hidden both of your posts since there wasn’t really anything tech-constructive going on in them.

Presley5, if you do see it again, don’t hesitate to reach out. That’s what we’re here for.

1 Like

Will do :slight_smile: ! Thank you again and sorry… I shouldn’t have answered the post in the first place :wink: !

Nothing to report ever since I opened this thread. Thanks for your concern.