[666]

You can tunnel threw the connection line from the home router and the VPS which is so easy even a skid could do it. The reason people use VPNs now is just astonishing though I mean spending a good amount of money just to hide and IP address. Geez I'd rather buy a VPN modem..

---

When you are running a VPN it goes over the network layer which is 3 and normally lies outside the OSI. Proxies are just application-level that's why it's easy to bypass them.

[666]

Well, if he is behind a VPN or somekind of protection, it can be hard. Allthough, if you have something really strong to ddos with you can ddos down the VPN forcing him to either change server if the VPN he's using have, or he's forced to use his own IP, then you can get his real IP.

In retrospect it's pretty hard to ddos someone off a VPN. The way services work is there are the VPN concentrator which is a device that allows multiple users to connect to the severs at the same time then you have the switches and network filters and when a filter scans the packet headers of the data from the ddos it'll alert the concentrator and switch to work as a frogger type jump to the next geo sever almost eliminating any downtime. Of course if someone doesn't have a paid subscription they wont be getting the corporate or industry quality service they will have the downgraded average package and with the client *Most likely* they will be only connecting straight to an applicable stand-alone sever which will have no protection switches or anything else of that matter.

---

Well, if he is behind a VPN or somekind of protection, it can be hard. Allthough, if you have something really strong to ddos with you can ddos down the VPN forcing him to either change server if the VPN he's using have, or he's forced to use his own IP, then you can get his real IP.

I forgot to add that DDOS attacks send loads of data packets that are completely malicious otherwise if you loaded bandwidth it wouldn't really affect someone unless the data packets had malicious content. So when the filter scans the packet header and detects the malicious data it most likely wont even let it through. ***This is now becoming more popular, what I mentioned in my previous reply was what has been going on and what is, but at the moment the suppliers are now upgrading to more advanced filters that will just reverse the malicious data back to sender and then travailing back and forth they will eventually be terminated at the firewall.

[Twitty]

In retrospect it's pretty hard to ddos someone off a VPN. The way services work is there are the VPN concentrator which is a device that allows multiple users to connect to the severs at the same time then you have the switches and network filters and when a filter scans the packet headers of the data from the ddos it'll alert the concentrator and switch to work as a frogger type jump to the next geo sever almost eliminating any downtime. Of course if someone doesn't have a paid subscription they wont be getting the corporate or industry quality service they will have the downgraded average package and with the client *Most likely* they will be only connecting straight to an applicable stand-alone sever which will have no protection switches or anything else of that matter.

---

I forgot to add that DDOS attacks send loads of data packets that are completely malicious otherwise if you loaded bandwidth it wouldn't really affect someone unless the data packets had malicious content. So when the filter scans the packet header and detects the malicious data it most likely wont even let it through. ***This is now becoming more popular, what I mentioned in my previous reply was what has been going on and what is, but at the moment the suppliers are now upgrading to more advanced filters that will just reverse the malicious data back to sender and then travailing back and forth they will eventually be terminated at the firewall.

Wow, didn't expect that HQ response, never been searching around so much about VPN's etc, haven't installed one on a server neither. I just based my information on an earlier case I had when a little kid was DDoSing me about 4 years ago and thought he was so cool because he had a VPN, easily took the VPN down and successfully infected him.

[666]

Wow, didn't expect that HQ response, never been searching around so much about VPN's etc, haven't installed one on a server neither. I just based my information on an earlier case I had when a little kid was DDoSing me about 4 years ago and thought he was so cool because he had a VPN, easily took the VPN down and successfully infected him.

I'm not going to say it's impossible because it's technology there are always vulnerabilities, but he most likely had a free subscription. I'm just basing that off my knowledge I've taken courses on Network Security and Security + so I have some knowledge.

---

Wow, didn't expect that HQ response, never been searching around so much about VPN's etc, haven't installed one on a server neither. I just based my information on an earlier case I had when a little kid was DDoSing me about 4 years ago and thought he was so cool because he had a VPN, easily took the VPN down and successfully infected him.

And yea if you had like a 40K + botnet if you could find a good vulnerability in the sever you could probably take down the whole sever affecting everybody trying to connect to it, but I've never seen that happen and like I said it's not impossible.

[OldWolf]

capture anything it sends useing mitm and a pcap app and load up in networkminer or wireshark. machines usually send their real ip at some point even if they are on a vpn/proxy/whatever. I know this threads months old might be usefull for someone lol

[w00t]

capture anything it sends useing mitm and a pcap app and load up in networkminer or wireshark. machines usually send their real ip at some point even if they are on a vpn/proxy/whatever. I know this threads months old might be usefull for someone lol

Where on earth are you getting MITM access where you don't know their real IP?

[Adorapuff]

If you are resolving from skype, Try using http://speedresolve.com It usually goes past proxies to get the real Ip adress.

The only way that's possible is if the proxy somehow reveals the connected ips.

[superMAUS]

SE the VPN company hes using that your an FBI member requesting the details.
Or hack the VPN website and then pivot to the computer to log.

[timreed]

hm
Intresting Very Very Intresting hmm
Hmm

[Adorapuff]

SE the VPN company hes using that your an FBI member requesting the details.
Or hack the VPN website and then pivot to the computer to log.

There's only one problem with that. If they don't log, you'll have to ask them to "tag" the specific user meaning that you will have to wait until he connects again to see his real ip. Also they will usually "tag" a member only with a court order.