Capo DDOS attacks on Zandronum tournaments

[Watermelon]

Before we get to the logs, there is a backstory you should know about.

Originally the Capo DDOS thing started when the WDL was formed. Capo got on a team, proceeded to throw games, and then got banned. I remember that Ralphis, Climhazzard, and myself all got hit by a DDOS attack. I wasn't ready for the attack and it ended up causing a lot more problems than you would think than just internet outage... but regardless, I didn't know who did it so I started monitoring my network. Eventually I found out I got DDOSed again using a TCP SYN flood, but what was really odd is that the attack was all from the same IP. I looked up the same IP and found it actually was one of the Odamex hosts, which confused me since the penalty for DDOS (10+ years in prison, or something insane here) causes anyone with a brain to spoof the IP so you can't find out who did it.

After tracking the IP down, I discovered it came from the same host that owned the WDL servers. Further, the IP of the DDOSer was on the Odamex master list... and that's because it was Rude's server. I immediately messaged Rude asking him what the hell he was doing, only to have him say that he had no idea and doesn't touch the servers. What I did find out though was that Capo had access to the server, which put everything into place. Capo has DDOSed people in the past using his Czech welfare money (so I guess that means the Czech Republic funded my DDOS by extension? oh man), and he sadly didn't stop there.

Now since this was on a completely different port, it wouldn't make sense for it to translate to Zandronum. However, right now this convo came up on IRC:

Code: Select all

<Water_> you said you ddos'd Galactus and then Dragon  at some point
<Water_> then admitted to ralph
<capodecima> if this helps me
<capodecima> " i really felt bad"
<Galactus> u honestly should be masterbanned
<capodecima> i never ddosed galactus
<capodecima> only dragon and tony
<capodecima> i told ya
<capodecima> i ddosed once tony
<capodecima> when i saw he was playing MM on csgo
<capodecima> then dragon during the finals
<capodecima> ifl
<capodecima> and then i never trolled
<capodecima> ugh
<capodecima> i mean ddosed lol
<capodecima> i feel like i was ddosed too
<capodecima> during this cheating accident when i was on master ban list for week
<Dragon> Doesn't matter if you ddosed me during the finals, I still won :)
<capodecima> they always show your full ip idiots heh
<capodecima> ye seems like i helped
<capodecima> you played like avc 

Luckily I was reminded of something from our good friend Galactus:

Code: Select all

<Galactus> Immortal got masterbanned for threatening to ddos someone, he didn't even do it

Capo did it to multiple people, and attacked someone in a Zandronum tournament. Where's the line?

[Ru5tK1ng]

<Ru5tK1ng> capodecima
<Ru5tK1ng> https://zandronum.com/forum/viewtopic.php?f=26&t=7482
<Linky> -{ Capo DDOS attacks on Zandronum tournaments - Zandronum }-
<Ru5tK1ng> is this true?
<Ru5tK1ng> say it isn't so true
<Ru5tK1ng> D:
<capodecima> ofc i ddosed some ppl 2 years ago and what?
<Ru5tK1ng> they are gonna ban you
<capodecima> jenova ddosed players too
<capodecima> was he banned for it?
<Ru5tK1ng> he did it on zd though
<Ru5tK1ng> not on zandronum
<Ru5tK1ng> and it was on IDL lol
<Ru5tK1ng> ZD didn't give a shit about IDL at that time
<capodecima> he ddosed me on zan yeah
<capodecima> like 4 years ago
<Ru5tK1ng> who Jenova?
<Ru5tK1ng> well he's done it to legion before
<Ru5tK1ng> but I think it was back on Skulltag
<Blitz> Oh dear
<Ru5tK1ng> welp, if one ddoser gets banned, all of them should get banned
-> llKyubokull has joined #SoT
-- Mode change [+o llKyubokull] on #SoT by Ultimus
<Ru5tK1ng> if people that make threats get banned
<capodecima> yes its old case
<capodecima> if they wanted ban me
<capodecima> they had ban jenova too
<Ru5tK1ng> fair is fair
<capodecima> and i really ddosed only dragon and tony maybe also water
<capodecima> but it was like for 5 mins
<capodecima> just joke
<capodecima> same like with jenova
<Ru5tK1ng> you mind if I post this?
<capodecima> he started ddos when i left D
<Ru5tK1ng> for the details?
<capodecima> ok

[Mobius]

capodecima> jenova ddosed players too
<capodecima> was he banned for it?
<Ru5tK1ng> he did it on zd though
<Ru5tK1ng> not on zandronum
<Ru5tK1ng> and it was on IDL lol
<Ru5tK1ng> ZD didn't give a shit about IDL at that time


Correction: Jenova did it in Zandronum. He did it to Legion, myself, and Strangle and there's a video of this.

[Samurai]

Just ban the cůnt already. He should have been kicked out of here/zdaemon/odamex years ago on countless different charges. It amazes me that he's still around.

[Catastrophe]

Code: Select all

<Galactus> Immortal got masterbanned for threatening to ddos someone, he didn't even do it

Just a correction here, I've been told by Mifu that he actually did DDOS someone.

Looks like his ban was overturned, see below.

[Ru5tK1ng]

<capodecima> Ru5tK1ng are they trying to ban like nobody knew about the ddos and shit?
<capodecima> bcz yeah:

Code: Select all

<AlexMax> I think it is a matter of good policy to keep DDoSers off my servers
<AlexMax> However, I've asked around and most players are convinced that even if I unbanned you, you'd find a way to get yourself banned anyway
<AlexMax> I meant to remove the ban, i forgot
<AlexMax> Also, that would be an unfair punishment to you given the fact that I've had players and even admins ddos people in the past
<AlexMax> You're unbanned
<AlexMax> don't make me regret this.
<capo> yep i know the ddos was dumb
<caoo> i kinda ruined my carrier
<capo> not carrier
<capo> but nobody want play on my servers now
<capo> i dunno what will with nada and stuff 
<capo> bad

<capodecima> this is from feb 15

[AlexMax]

Capo actually got banned on my Odamex servers for that DDoS incident at the time it happened. He's actually still banned, but only because I hardly touch my Odamex servers and forgot to unban him. I didn't keep him banned on Zandronum because that was Odamex, and this is Zandronum.

In the general case, though, I feel like there has to be a statute of limitations on this sort of thing. Trying to dredge up old shit to try and get somebody banned today always seems like a kind of shady thing to do. Handle it at the time it happened.

Besides, this is Capo we're talking about. Out of all the players on my server, I get the most complaints about him, bar none. Given enough time, he will always hang himself. If he's a serial DDoS'er, there will be another incident, and we can take care of him then.

Also, for what it's worth, Capo has not done himself any favors if he wanted people to believe he hasn't DDoS'ed anybody recently. This is a nice little public log where he threatened to DDoS somebody as recently as two months ago (this was from Quakenet's #odamex channel on 2016-04-28):

Code: Select all

[17:57:36] <capodecima> you just play like drunk denzoa
[17:57:40] <capodecima> or something
[17:57:44] <GhostKiller> i pay him to beat u up for me
[17:57:50] <GhostKiller> cuz i am often drunk?
[17:57:51] <GhostKiller> :D
[17:58:03] <capodecima> what you drink then
[17:58:11] <GhostKiller> your tears
[17:58:25] <GhostKiller> u r alcoholic so u have alcohol in ur tears :c
[17:58:35] <GhostKiller> T.Tdecima
[17:59:23] <capodecima> ugh sec
[17:59:32] <capodecima> i am getting your ip to ddos you
[17:59:42] <capodecima> you are getting bored me bro
[17:59:57] <capodecima> you are just full of shit
[18:00:13] <capodecima> and zero skills or knowledge
[18:00:17] <GhostKiller> T.T

When I investigated, I came to the conclusion that he was probably joking, but why the heck would you joke about this if you have a reputation for doing this in the past?

[Marcaek]

Because he has the IQ of a potato?

[Ru5tK1ng]

In the general case, though, I feel like there has to be a statute of limitations on this sort of thing. Trying to dredge up old shit to try and get somebody banned today always seems like a kind of shady thing to do. Handle it at the time it happened.

There was only semi-conclusive proof that he did it. It wasn't until long after his attacks did he literally admit to doing it. As with DDos'ing in its nature it's difficult to say for certain where the source is in most cases. There isn't a quick and easy way to handle things (like DDosing) as they happen.

Furthermore, while there was suspicion from members of the community who had a good idea Capo was the one responsible for the random attacks on Oda and Zan, there was not any type of case brought up to the Zan staff about it. There wasn't any solid proof and the attacks against people like Dragon and Water was simply speculation at best. As stated before, Capo eventually did admit to doing it on a few occasions but it wasn't until long after the fact.

So essentially, it comes down to only 2 options. You either ban capo for his past actions only because his confessions recently came to light or you let him pass and wait until he does it next time. Obviously, the latter sets a very bad precedent for this type of occurrence. If you do the former, you might as well take out others who have committed and admitted to DDos attacks.

[Empyre]

A DDos is a serious thing. Anybody who has ever done a DDos should be permabanned, and perhaps have criminal charges pressed against him, too. If there is a statute of limitations for that, it would be far more than only 2 years. It should be made clear that such attacks will not be tolerated. It is not a joke. It is a crime.

[ZZYZX]

Furthermore, while there was suspicion from members of the community who had a good idea Capo was the one responsible for the random attacks on Oda and Zan, there was not any type of case brought up to the Zan staff about it. There wasn't any solid proof and the attacks against people like Dragon and Water was simply speculation at best. As stated before, Capo eventually did admit to doing it on a few occasions but it wasn't until long after the fact.

Yea, except his first attack on Odamex was single-source DoS which could be traced (and it was traced):

After tracking the IP down, I discovered it came from the same host that owned the WDL servers. Further, the IP of the DDOSer was on the Odamex master list... and that's because it was Rude's server.

I don't understand why after such a fat proven precedent capo still manages to hide behind the "there's not enough proof" thing.

[Ivan]

Just ban that clown capo, seriously. Sometimes you guys are too merciful.

[ZZYZX]

Just noticed this line in the master banlist

Code: Select all

93.99.233.*:capodecima - 93.99.233.6 - DDOS - June 19th 2016 - Perm

[ShadowForce]

Just ban capo he's a parasite to online doom

[Dark-Assassin]

Bit slow there, it was already done.

[Armour]

Just ban the cůnt already. He should have been kicked out of here/zdaemon/odamex years ago on countless different charges. It amazes me that he's still around.

Just ban that clown capo, seriously. Sometimes you guys are too merciful.

Just ban capo he's a parasite to online doom

^This

[Sean]

Isn't it well known that Capo has an IQ lower than a raw potato?

[Dark-Assassin]

True, but I doubt the staff would ever let him take advantage of it again.

[John Zombie]

RIP
On a side note he gets banned the same day galactus' ban expires, I guess the retardation levels had to be balanced somehow

[Mobius]

A DDos is a serious thing. Anybody who has ever done a DDos should be permabanned, and perhaps have criminal charges pressed against him, too. If there is a statute of limitations for that, it would be far more than only 2 years. It should be made clear that such attacks will not be tolerated. It is not a joke. It is a crime.

Hypothetical: if I DDos someone and waited 3 years to confess do I get a pardon?