AAO25.com

America's Army => General Chat => Topic started by: Mixk on Monday, March 18, 2013, 01:15:13 AM

Title: Hacking servers again
Post by: Mixk on Monday, March 18, 2013, 01:15:13 AM
Something needs to be done to these two to stop this crap. It is getting old real fast and I don't know what can be done to stop this. There is two of them running together and after they crash our servers, ts and website the go and start up their own server. Server ip is currently 204.152.219.84:1716

http://battletracker.com/playerstats/aao/831131/

http://battletracker.com/playerstats/aao/830911/
Title: Re: Hacking servers again
Post by: BiG_SerGiO on Monday, March 18, 2013, 02:59:19 AM
"Fixed" for now. Make sure you protect ts and website in the meanwhile.
Title: Re: Hacking servers again
Post by: Mixk on Monday, March 18, 2013, 09:33:02 AM
"Fixed" for now. Make sure you protect ts and website in the meanwhile.
Thank You. I appreciate your help with this.
Title: Re: Hacking servers again
Post by: Possessed on Monday, March 18, 2013, 12:00:03 PM
get proof(eg time, IP and wich kind of exploitation they are using) and email their ISP.
I don't think we can do much here.
Title: Re: Hacking servers again
Post by: Mixk on Monday, March 18, 2013, 16:35:59 PM
Ok I will see what I can get done. Thanks Guys
Title: Re: Hacking servers again
Post by: JonnyM on Tuesday, March 19, 2013, 03:16:58 AM
You know hacking is a criminal offence in most countrys, get their details from their isp ans pass them onto their local police force.
Title: Re: Hacking servers again
Post by: Wolflnx on Tuesday, March 19, 2013, 10:34:49 AM
 :style:I made my own bad name list and ip bans for the server. It would be nice if the ip addresses are posted too. :rtfm:
Title: Re: Hacking servers again
Post by: wickid on Tuesday, March 19, 2013, 13:44:21 PM
i would banmask there ips' , so what u lose a couple innocent players. least this dickweed wouldn't be able to join again
Title: Re: Hacking servers again
Post by: K.Shelley on Wednesday, April 17, 2013, 20:06:47 PM
Found another hacker, as soon as he joins servers they crash. He's crashed 82nd, +EcK+, DDI, PE, and NoG so far.

http://battletracker.com/playerstats/aao/115689/
Title: Re: Hacking servers again
Post by: -[unR]BENDAWICH on Wednesday, April 17, 2013, 20:11:55 PM
Its not him 100%
Title: Re: Hacking servers again
Post by: 82nd_DXO_COL=Shad on Wednesday, April 17, 2013, 22:38:11 PM
There's alot of speculation but no hard proof yet.  Ports seem to be common, 2010 outgoing and  34261 incoming when the crashes occur.
I've been told that !i!i!insi and !i!i!fNgsy seem to be on all the servers that crash, and when they were on ours, they had the same ip and PORT, which seems weird.  This after looking at netstat and figuring who was who.
Title: Re: Hacking servers again
Post by: C0RRUPTER on Thursday, April 18, 2013, 01:49:58 AM
Yes someone keeps making the Servers Laggggggg then we all get 5 Warning then everyone get banned for some Jerk!! Please Fix it thanks
Title: Re: Hacking servers again
Post by: .scar[x]face. on Thursday, April 18, 2013, 08:21:37 AM
same ip and PORT, which seems weird.

super fishy
Title: Re: Hacking servers again
Post by: insidiae on Thursday, April 18, 2013, 08:55:29 AM
Found another hacker, as soon as he joins servers they crash. He's crashed 82nd, +EcK+, DDI, PE, and NoG so far.

http://battletracker.com/playerstats/aao/115689/

To start off with, when I played CoD4 there was a similar group who went around DDoSing servers and players in important matches (prize games) and as far as I know, there is no need to be joining a server to crash it. Furthermore why the hell would I join a server, looking to play, then proceed to downing it, for fun? I honestly can't get a hold on your stupidity and the simple fact that you accuse me of shit like this annoys me.

All the people claiming it's me are buttsore losers cause I'm simply better, therefore I am a cheater and apparently even a criminal. Take the piss, I've been around for 9 years in this game, with a break obviously, high ranks on both ESL and TWL, and reached invite back in the days.

I posted this on my topic, excuse me for double stating some stuff but I am just copy pasting:
"I received a ban on the 82nd server because Hard went around it was me and fNtsy crashing the servers, I have no clue how to and I'm pretty tired of his shit chatting we cheat especially cause he's below average. I'm not sure whether he's played between 2004-2008 because I have been in the relatively better teams and high ranks on TWL and ESL.

I either want solid proof of me being linked in any way to those DDoSing lads to support the ban or get unbanned. Sorry for the bitter tone but I can't think of it any other way than a total joke."

Also, I am not Kiwi, I have no clue who he is/was, and I would much appreciate it if you'd let me play and enjoy the game and stop spreading bullshit.

Here's my IP and port (from mijnip.nl):

80.56.176.183 - HOSTNAME: f176183.upc-f.chello.nl - POORT: 50821

Will make a screenshot if you that's what you need.

My apologies for being a dick at this moment, but it should be pretty clear to any somewhat intelligent individual that this is ridiculous.

Here's a list of my other trackers, so you can also check those and find they aren't linked to any of those (known) DDoSers or bans.
Currently using:
http://battletracker.com/playerstats/aao/115689/?s=661bcac765da5c496f3d71006b07eb492cff11c6
Made this cause I didn't manage to recover the above at first:
http://battletracker.com/playerstats/aao/831738/insidiae/
Another original account which I can't recover due to a blocked mail adress:
http://battletracker.com/playerstats/aao/231485/-wp.Wastii/

I hope I've provided  you with enough information now, and I am sorry to waste your time on checking for links between me and whoever's supposed to be responsible for the server attacks.

Thanks for reading.
Title: Re: Hacking servers again
Post by: insidiae on Thursday, April 18, 2013, 08:58:11 AM
There's alot of speculation but no hard proof yet.  Ports seem to be common, 2010 outgoing and  34261 incoming when the crashes occur.
I've been told that !i!i!insi and !i!i!fNgsy seem to be on all the servers that crash, and when they were on ours, they had the same ip and PORT, which seems weird.  This after looking at netstat and figuring who was who.

Sorry for double posting. But fNtsy is from Northern Ireland, I am from the Netherlands, how can our IP possibly be the same unless both of us were using VPN's. Which, for me at least, is not the case. My IP traces back to NL, and his probably to the UK. Also, if someone noticed us on all the servers, he was there aswell, do you see the irony? It's funny how you just take the credibility of a lowranked member in your team who bases his arguments on absolutely no proof at all and just decide to ban me.
Title: Re: Hacking servers again
Post by: Mixk on Thursday, April 18, 2013, 09:09:43 AM
I turned over the player who was crashing things to Sergio the night it happened and it was taken care of. 
Title: Re: Hacking servers again
Post by: insidiae on Thursday, April 18, 2013, 09:34:50 AM
Yet my username ban stays?
Title: Re: Hacking servers again
Post by: insidiae on Thursday, April 18, 2013, 17:25:02 PM
I'm pretty sure one of the 82nd admins has read this by now and it obviously wasn't me, then why is my username ban still up?
Title: Re: Hacking servers again
Post by: Mixk on Thursday, April 18, 2013, 18:09:42 PM
I'm pretty sure one of the 82nd admins has read this by now and it obviously wasn't me, then why is my username ban still up?
I have been trying to find out whats going on, but we have had an electrical storm here for most of two days straight now and haven't been on much. Also I am sure when someone has something that needs the attention of the 82nd it would be best post it if forums on our site so we will see it in a timely matter and try and help you out quicker. The admins here keep busy enough I am sure.
Title: Re: Hacking servers again
Post by: BiG_SerGiO on Thursday, April 18, 2013, 18:48:53 PM
It was:
http://battletracker.com/playerstats/aao/832606/
aka
http://battletracker.com/playerstats/aao/807735/

Banned again last night.
Title: Re: Hacking servers again
Post by: Possessed on Thursday, April 18, 2013, 19:05:01 PM
a simple spam to the Query port can "take down" a server :)
try new firewall rules :idea: :idea:
Title: Re: Hacking servers again
Post by: insidiae on Thursday, April 18, 2013, 19:21:56 PM
Thank god, now can I please be unbanned so I can continue being a geek at night when all the servers are empty? Same thing for fNtsy.
Title: Re: Hacking servers again
Post by: insidiae on Thursday, April 18, 2013, 19:43:30 PM
Made an appeal on your forums, hope I've provided enough information.
Title: Re: Hacking servers again
Post by: Rob_LD on Friday, April 19, 2013, 02:14:55 AM
Anyone got a full packet capture of the attack?
First thing you'll need to apply any firewall, IDS or whatsoever rule.