DDoS attacks

    I have several proofs which I'm gonna show in a few secs, which show how *censored* have been using a really old DDoS tool to block the server-port so that server is filled with bots.
    This is the name of the tool - *censored* and it's quite basic: you only need to use a batch file which will send bots to a IP-Port specified and will make it impossible to join. The thing these guys don't know is im far ahead them, so I know what they were using and the solution. However, I didnt expect such dumb move from them.
    The IP from the attacker was 31.16.96.152 which fits perfectly to the last IP I have registered from *censored* - 31.16.96.24


    [Blockierte Grafik: http://uef-clan.com/FTP/Anyder/Anyder/Pics/Proof.png]


    And then this is part of the debugger but the file is too big (3000+ messages which say the same)


    Event TimeEvent TypeThread IDMemory AddressFilenameMore Information
    00:00:01.222Debug String3924assigned slot(7) turn(0)


    00:00:01.222Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.222Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.434Debug String3924assigned slot(8) turn(0)


    00:00:01.434Debug String3924assigned slot(8) turn(0)


    00:00:01.434Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.434Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.634Debug String3924assigned slot(9) turn(0)


    00:00:01.634Debug String3924assigned slot(9) turn(0)


    00:00:01.634Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.634Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.844Debug String3924assigned slot(10) turn(0)


    00:00:01.844Debug String3924assigned slot(10) turn(0)


    00:00:01.844Debug String3924ReadJoin: Anyder_En'Ten


    00:00:01.844Debug String3924ReadJoin: Anyder_En'Ten


    00:00:02.054Debug String3924assigned slot(11) turn(0)


    00:00:02.054Debug String3924assigned slot(11) turn(0)


    00:00:02.054Debug String3924ReadJoin: Anyder_En'Ten


    00:00:02.054Debug String3924ReadJoin: Anyder_En'Ten


    00:00:02.277Debug String3924assigned slot(12) turn(0)


    00:00:02.277Debug String3924assigned slot(12) turn(0)


    00:00:02.277Debug String3924ReadJoin: Anyder_En'Ten


    00:00:02.277Debug String3924ReadJoin: Anyder_En'Ten


    00:00:02.484Debug String3924assigned slot(13) turn(0)


    00:00:02.484Debug String3924assigned slot(13) turn(0)


    00:00:02.484Debug String3924ReadJoin: Anyder_En'Ten


    00:00:02.484Debug String3924ReadJoin: Anyder_En'Ten



    I've blocked the subnet in order to not let such dumb posers play in my servers, and honestly, I hope the community does the same.

    To simplify, mods are stored in LVL file format, and hacks are EXE format (Mods = LVL, Hacks = EXE). If this definition is too difficult for the reader to comprehend I feel sorry for you. Both mods and hacks may sometimes be considered cheats, there are likewise instances wherein neither mods or hacks are considered cheats.

    2 Mal editiert, zuletzt von ReeN () aus folgendem Grund: Die Namen des Clans, der Spieler und des Tools wurden zensiert. Diese Art von Schlammschlacht ist hier unerwünscht.

    Zitat von [Rebels]HD

    It's True!

    Besides HD, Chilli said the same thing happened to them

    To simplify, mods are stored in LVL file format, and hacks are EXE format (Mods = LVL, Hacks = EXE). If this definition is too difficult for the reader to comprehend I feel sorry for you. Both mods and hacks may sometimes be considered cheats, there are likewise instances wherein neither mods or hacks are considered cheats.

    After discussing this topic, we decided to censor the clan name, the player names and the name of the tool.


    We censored the clan and player names because we don't want to have such a muckraking in our forum. The information about DDoS attacks works even without player names.


    The name of the tool has been censored, because we don't want to give someone information how he can make DDoS attacks himself.


    It's not allowed to publish the names in our forum. If someone is publishing the names again, it will be deleted without any comment.

    Zitat von waYne.daywalker

    Our Servers are getting Ddosed too, how can we fix this ?

    Yous cant. Last gameshare server patch (BattlefrontII.exe) includes the SIDE fix for these kind of attacks, so I dont think it will affect yours


    This is the attack I suffered some mins ago and what I did was ban the IP blocking it from the root.

    Bilder

    To simplify, mods are stored in LVL file format, and hacks are EXE format (Mods = LVL, Hacks = EXE). If this definition is too difficult for the reader to comprehend I feel sorry for you. Both mods and hacks may sometimes be considered cheats, there are likewise instances wherein neither mods or hacks are considered cheats.

    Attacked again from the IP 31.17.30.125

    Bilder

    To simplify, mods are stored in LVL file format, and hacks are EXE format (Mods = LVL, Hacks = EXE). If this definition is too difficult for the reader to comprehend I feel sorry for you. Both mods and hacks may sometimes be considered cheats, there are likewise instances wherein neither mods or hacks are considered cheats.

    Try changing all the ports... for example to 3640, 3641, ...

    To simplify, mods are stored in LVL file format, and hacks are EXE format (Mods = LVL, Hacks = EXE). If this definition is too difficult for the reader to comprehend I feel sorry for you. Both mods and hacks may sometimes be considered cheats, there are likewise instances wherein neither mods or hacks are considered cheats.

    Einmal editiert, zuletzt von Anyder ()