Welcome to Open Carnage

A resource for Halo 1 modding and tech, with unique means of rewarding individual content creation and support. Have a wander to see why we're worth the time! EST. 2012

pepe enriquez

DDoS attack on my servers

Hello good afternoon!


I currently have problems with my server being DDoS'd. I know that SAPP can help with the problem, but it's still not enough, ( packet_limit [amount] ). I have also installed anti-ddos guardian system, and even fixed my firewall, but nothing is enough against these bad people. I tried blocking by IP, but the IP changes; I ban by cdkey, and my friends can not enter. I hope you can help me.


# Name, CD key hash, ban count, ban end date
E5CR0T069,aba18fbda7a5d5cb****************,1,--
E5CR0T069,27a6953603e2db4d****************,1,--
E5CR0T069,599a7ccb253e10a2****************,1,--
E5CR0T069,9bab8520b139fcab****************,1,--
E5CR0T069,fa58c1f7a0778b3c****************,1,--
E5CR0T069,00f28adf5f4665ec****************,1,--
E5CR0T069,961a43f8cc1f9474****************,1,--
E5CR0T069,aa473b17efe85ca8****************,1,--
E5CR0T069,a1c94ac17cfe75dd****************,1,--
E5CR0T069,f13d047fb282db88****************,1,--
escroto69,eda9dccaa6071feb****************,1,--
escroto69,ee43551b895cc22b****************,1,--
[Yeisiño],f443106bd82fd6f3****************,1,--

---------------------------------------------------------------------------------------------------
<unknown>:190.$58.249.$$$/32:DOS_ATTACK:1512136620
<unknown>:190.$58.249.$$$/32:DOS_ATTACK:1512136837
<unknown>:190.$58.252.$$$/32:DOS_ATTACK:1512137408

<unknown>:200.$12.151.$$$/32:DOS_ATTACK:1517452200
<unknown>:201.$71.16.$$$/32:DOS_ATTACK:1517452741
<unknown>:189.$62.255.$$$/32:DOS_ATTACK:1517462967
<unknown>:189.$97.181.$$$/32:DOS_ATTACK:1517463386
<unknown>:189.$72.251.$$$/32:DOS_ATTACK:1506658855

<unknown>:181.$39.25.$$$/32:DOS_ATTACK:1506615389
<unknown>:200.$17.221.$$$/32:DOS_ATTACK:1506621013
<unknown>:190.$21.136.$$$/32:DOS_ATTACK:1506647412
papateorged:190.$48.78.$$$/32:AIMBOT:1506562486
<unknown>:31.$92.111.$$$/32:DOS_ATTACK:1511799340

<unknown>:190.$9.212.$$$/32:DOS_ATTACK:1516587791

-------------------------------------------------------------------------------------------
CdH'Moma ez:201.$56.21.$$$/32:-:0
CDH_FAKY:189.$43.239.$$$/32:-:0
MxTsystem:189.$50.207.$$$/32:-:0
=MxT=Ganyme:177.$44.125.$$$/32:-:0
MxT jm0r:187.$90.11.$$$/32:-:0
Player Joined, Name: MxT°Slash  PlayerNumber: 3  IP: 181.$34.68.$$$:2303  CD-Key Hash: f443106bd82fd6f3****************
IP 31.$92.111.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: @IcyHot  PlayerNumber: 1  IP: 190.$58.252.$$$:2303  CD-Key Hash: c2ca4b6d24c9e270****************
IP 200.$59.1.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: =MxT=Mak1na  PlayerNumber: 0  IP: 200.$59.1.$$$:2303  CD-Key Hash: d41d8cd98f00b204****************
IP 200.$59.1.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: New001  PlayerNumber: 1  IP: 190.$26.190.$$$:2303  CD-Key Hash: d41d8cd98f00b204****************
IP 190.$26.190.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: wK SKorp1oN  PlayerNumber: 0  IP: 190.$25.21.$$$:2303  CD-Key Hash: d41d8cd98f00b204****************
IP 190.$25.21.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: MxT TM  PlayerNumber: 1  IP: 187.233.$19.$$$:2303  CD-Key Hash: da0900965dd82b7b****************
IP 187.$33.119.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: MxT_Yat0g0d  PlayerNumber: 1  IP: 190.$58.17.$$$:18240  CD-Key Hash: 1cf76a5c698ba847****************
IP 190.$58.17.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: puto  halo  PlayerNumber: 0  IP: 200.$77.80.$$$:2303  CD-Key Hash: d41d8cd98f00b204****************
IP 200.$77.80.$$$ has been banned because the server received more than 256 packets in less than 1 second. (DOS_ATTACK)
Player Joined, Name: MxT TM  PlayerNumber: 1  IP: 187.$33.123.$$$:2303  CD-Key Hash: da0900965dd82b7b****************
Player Joined, Name: MxT Wfz'  PlayerNumber: 0  IP: 187.$33.141.$$$:2303  CD-Key Hash: da0900965dd82b7b****************
Player Joined, Name: sekiryuutey  PlayerNumber: 4  IP: 177.$37.183.$$$:53057  CD-Key Hash: 10440b462f6cbc31****************

 

That's just a little of my evidence; I still have more.


<p>«ÂÐÐ

Share this post


Link to post
Share on other sites

Members of Open Carnage never see off-site ads.

When I worked IT for a telecommunications company we installed fail2ban on everything with great success. Bots were always trying to brute force the phone systems to try to gain access and make free calls. It would likely work here.


Kavawuvi: one of these days these glutes are gonna squawk all over you

Share this post


Link to post
Share on other sites
5 hours ago, Krazychic said:

Not sure you should be publicising CD keys even if they aren't authentic.

It's only the hash that's being publicized, not the key itself. If it was a legitimate key, you wouldn't be able to steal it in any reasonable way. If it's not a legitimate key, well, that's your fault for pirating the game.

 

However, client IP addresses should not be publicly shown. Any server administrator should know better. As such, I've obfuscated the CD hashes and IP addresses in the post.

Krazychic likes this

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.