473
« on: Monday, May 02, 2016, 14:34:41 PM »
Attack packets, coming from Source Port 1900, with length above 200(around 250~300), just as the other hosts that attacked.
A normal loggin request comes from random ports, the packet length isnt above 200, I blocked my self and logged it. You BT account was banned days early, I added the rules to block you on Auth 1 or 2 days later, You own several accounts, you can spoof your HWid, but since you played with the same range, I could deny you from loggin for some time, as expected, you got around it, wich is easy, that time all the attack started, I logged legit login attemps from you as well, you can't deny you're behind the IP ranges I blocked, the forums is filled with bans on your accounts, using those ranges, the game logs show you playing from them, no one else did. the logs show also that You was part of the SSDP attacks, I see it as you starting the attack and using a amp. list, without the list it would be uneffective.
You don't need to be a specialist in the area, just read some articles(from Akamai) and you will understand how it works, analyze the logs and see the matching between the attacks method and the Pit request to our Auth, pretty simple to me. its strange that this came from someone affected by a ban, then the system started to be attacked. How could I do it, I cant spoof Pit IP in a SSDP attack, if the target is the Auth, spoffing his IP would make the exploited hosts ddos his IP not Auth. I showed to you some tools wich you can run even at home, from a linux server etc, just need to search for exploitable hosts and there are tools for this as well, I sent all the info to you, its not hard to anyone understand.