[CMM|theRipper]

Rayne, on 20 September 2011 - 03:48 PM, said:

I think only those for which this guy knows are well covered with admins. he's looking for admin attention, a chance to prove admins he can beat their protection.
I doubt we'll see him on TLWS server or some other half abandoned place.

thank you rayne :) a compliment to the attacked servers? :P

[Rayne]

theRipper, on 20 September 2011 - 07:16 PM, said:

thank you rayne :) a compliment to the attacked servers? :P

in a way, yes.

[Runamuk]

Sadly it takes stuff like this to show people there is a problem. It would be nice if they would roll all the patches and updates for 4.1 into a build so that we can take advantage of the work that coders have done without using 5 different builds. Also, they should add protection for stuff like this into the builds. It would be nice to limit the connections via the server and not an external script.

There are no real consequences for this kid so we won't see the end until he gets bored and just stops doing it.

[Pussnboots]

Found some of my older TKD photos... Reminded me of this situation.. ALL OVER AGAIN! Me beating on little kids!! ROFL!

This post has been edited by Pussnboots: 21 September 2011 - 12:17 AM

[SilverFoxZ]

lol :D

[pleco]

You can add LCDLC.net 's servers to this.

I wonder if we can pool up a bit of cash and hire someone from the equivalent to craigslist to have this punk beaten to an inch of his life. Kinda how russians deal with spammers, they make them STOP.

We have a range ban in place, keeping an eye on it.

The sad thing, this doesn't affect us. We have enough admins that we jump on it when it occurs and we have a full cast of regulars that keep our server fun to play. This only, really, affects the players in that IP range. It keeps them from the well managed servers, they will be forced to play on ignored servers chalked full of cheats.

Sad.

[Pussnboots]

pleco, on 21 September 2011 - 02:34 PM, said:

You can add LCDLC.net 's servers to this.

I wonder if we can pool up a bit of cash and hire someone from the equivalent to craigslist to have this punk beaten to an inch of his life. Kinda how russians deal with spammers, they make them STOP.

We have a range ban in place, keeping an eye on it.

The sad thing, this doesn't affect us. We have enough admins that we jump on it when it occurs and we have a full cast of regulars that keep our server fun to play. This only, really, affects the players in that IP range. It keeps them from the well managed servers, they will be forced to play on ignored servers chalked full of cheats.

Sad.

Or just use an updated server binary that checks for valid info.. such as GUID checking and PING checking.. Disallowing persistent CNCT connections..

So while in a game session run code like mine

if($ping == "CNCT"){
   $reply = "\"Take your spambot elsewhere biatch! PWNED by URsTats!\"";
   $r->byebye($name,$slotnum,$ip,$reply,$id);
}

And:

if(!is_int($ping)){
   $reply = "\"Your ping makes NO SENSE TO ME $name! Bye bye!\"";
   $r->byebye($name,$slotnum,$ip,$reply,$id);
}

My code bans per IP.. So, you don't have to deal with banning a range.. Plain and simple, he joins...he get's banned. Then he'll change his ip... he joins.. he gets banned again! :D I'll also be adding some sanitation code for every bit of the connection string so that if some tool comes up with some way to exploit something else, then at least anyone with URsTats would be safe :D

Anywho, there are alternatives to just range banning...


EDIT: UPDATE to URsTats -> http://www.urbanterr..._50#entry318012

This post has been edited by Pussnboots: 22 September 2011 - 03:33 AM

[Pussnboots]

LOL!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

This kid is SOOOOOO fun!!!

He decided he wanted to do an old fashioned "DDoS" trick... Failsauce!

Another message from The Kid...

--------------------------------------



IP:     199.48.147.35
Type:   Web Server
Name:
E-Mail: web@google.com
Location: In game
Description: YOUR WEBSERVER IS DOWN.

HAHAHAHAHAHAHAHAHA. WHY DONT YOU WRITE A PATCH FOR THAT TOO! HAHAHAHAHA


--------------------------------------

Funny... I do have a patch for that :D

He's gonna LOVE the packets he got back :>D

I was just WAITING for him to do this! >:D --> More to post later :D


EDIT: He is STILL using TOR NODES!!! ROFLSAUCE!!!! Silly Skid, Nodes are for n00bs! :P

tcp        0      0 alphahusky.info:http        tor10.anonymizer.ccc.:29838 

Yay! He's back! My turn! :D

EDIT 2:
Funny thing is.. He's watching this forum and sending me messages about is ill knowledge of information systems :D
This gives me a nice soft fuzzy feeling inside... I'm watching literally everything he does and is trying to do.. He stumbles a lot... I wonder if he realizes Win exploits don't work on a Nix box :P

EDIT 3: >:D I left a friendly reminder for our Skid friend too! :P

It's really quite sad to go through the logs and see how hard this kid has been trying to get back at me lol.. Anyways.. Off to dream of .... Germany.. Hmm.. or wait... Maybe the Netherlands >:D

This post has been edited by Pussnboots: 23 September 2011 - 06:39 AM

[sC`SailorMo-n]

We were flooded, too (Sexy's CTF). Just ban his range and forget about it. You're only giving him the satisfaction of being noticed, when this floods or DDOS attacks are nothing new (just check my history, I wrote about it some time ago).

This post has been edited by SailorMon: 23 September 2011 - 12:18 PM

[-VA-Pretender1988]

SailorMon, on 23 September 2011 - 12:17 PM, said:

We were flooded, too (Sexy's CTF). Just ban his range and forget about it. You're only giving him the satisfaction of being noticed, when this floods or DDOS attacks are nothing new (just check my history, I wrote about it some time ago).

Yeah this happened with sexy's about year back

http://www.urbanterr...540#entry284540