Vultr.com - Instant Cloud Server Deployment
Game Rank
Servers:
Teams:
Fans:
8893
Players:
53
PREV 1 2 NEXT
andymirPM
#11
Sep 19, 2011 5:21 PM
Joined: Feb 20, 2009
Posts: 12
217.146.80.40
81.19.212.130



sad_sadPM
#12
Sep 21, 2011 12:33 PM
Joined: Nov 18, 2010
Posts: 12
andymir wrote:
217.146.80.40
81.19.212.130


ok blocked these ip's
Hi@all fans BF1942!
Always welcome you in the game!
www.BF-GAME.com | fb.com/BF1942.DCF | vk.com/BF.GAME
no CD-KEY server modding

Closed Account
#13
Sep 21, 2011 7:57 PM
184.106.242.223
brandondoom27PM
#14
Sep 22, 2011 12:59 AM
Joined: Jul 19, 2008
Posts: 36
The issue this is a DRDoS scenario. In this particular scenario, spoofed getstatus commands are being sent to this and other bf1942 servers. The packets are spoofed to make it appear as though a particular IP address is requesting status from your server(and all other similar servers that will return UDP status). The IP address the packets are spoofed to imitate is the true DDoS target.

I will concede a by product of this, particularly with bf1942 is failure to communicate on port 23000. We have an automated process which will filter excessive getstatus queries but it can sometimes take a bit to get going(mainly to prevent innocent getstatus queries from being blocked.
sad_sadPM
#15
Sep 22, 2011 2:07 PM
Joined: Nov 18, 2010
Posts: 12
attack!

91.113.4.23
78.148.194.92
78.148.204.147

blocked this ip's
Hi@all fans BF1942!
Always welcome you in the game!
www.BF-GAME.com | fb.com/BF1942.DCF | vk.com/BF.GAME
no CD-KEY server modding

sad_sadPM
#16
Sep 23, 2011 1:39 AM
Joined: Nov 18, 2010
Posts: 12
IN UDP 76.111.53.176 27005
blocked this ip
Hi@all fans BF1942!
Always welcome you in the game!
www.BF-GAME.com | fb.com/BF1942.DCF | vk.com/BF.GAME
no CD-KEY server modding

andymirPM
#17
Sep 23, 2011 1:31 PM
Joined: Feb 20, 2009
Posts: 12
brandondoom27 wrote:
The issue this is a DRDoS scenario. In this particular scenario, spoofed getstatus commands are being sent to this and other bf1942 servers. The packets are spoofed to make it appear as though a particular IP address is requesting status from your server(and all other similar servers that will return UDP status). The IP address the packets are spoofed to imitate is the true DDoS target.

I will concede a by product of this, particularly with bf1942 is failure to communicate on port 23000. We have an automated process which will filter excessive getstatus queries but it can sometimes take a bit to get going(mainly to prevent innocent getstatus queries from being blocked.


Such that.
Usually queries go from 27015 port - CS server's port.

sad_sad, I have same spamming ip: c-76-111-53-176.hsd1.ga.comcast.net (76.111.53.176)


sad_sadPM
#18
Oct 08, 2011 4:31 AM
Joined: Nov 18, 2010
Posts: 12
Ура!

attack retreated )
Hi@all fans BF1942!
Always welcome you in the game!
www.BF-GAME.com | fb.com/BF1942.DCF | vk.com/BF.GAME
no CD-KEY server modding

andymirPM
#19
Oct 15, 2011 3:45 AM
Joined: Feb 20, 2009
Posts: 12
69.42.113.167


PREV 1 2 NEXT