Its a DDoS attack. Its the reasonhe comes on the game. And also teach other he ways. Very impressive, but idoitc. It can backfire. Anyways..I searched my PC logs. I got wiped clean. I lost my internet connection to my labtop for 2 days before it came back up. I have nothing in my logs. I never wiped them. He did it to get rid of my server. The owner, co-owner, and many others know its DDoSing. You can't prove it because he has something that clears the attack itself. He is not a normal DDoS'er. He think before doing anything. He is careful with people trying to track him down. But soon he will be put to justice.
| |
Sounds like you need to contact your ISP, they keep detailed logs.
| |
I'll have to do that tomorrow, it's a holiday today and late at that.
On a side note, the issue has the potential to be a threat not only to this game but other games as well. | |
When EXGenesis gets on here he may be able to provide useful information.
Ok thanks Reem | |
If you are hosting from home, which you haven't stated if you are or not.
Your home router normally keeps logs. | |
I never host at my home if I hear anything about DDoSing in that game.
So to answer your question. No, I wasn't hosting at my home. | |
Ryuusei87 wrote:
It looks like a DDOS attack, since my internet effectively dies when he does it. Your internet wouldn't be affected .. | |
Well thats pretty self-told there. That's kinda means if the host shuts down their server/gaame your connection just disconnection. As the way I see it.
| |
Connecting to a BYOND game is not the internet as a whole.
Anyway I would start the server back up and run netstat -a -n | grep :PORT | cut -d : -f2 | awk '{print $2}' | sort | uniq -c | sort Where PORT is the port number you are using on the game, this will output all the IP's connected to the port, so disable login for anyone, look for IP's that constantly show up and you got your man. Block the IP using fail2ban or iptables http://www.cyberciti.biz/tips/linux-iptables-examples.html Check #9 on the above website to block via iptables. | |
They've gone from attacking the player servers directly to attacking the servers that control hosting. Only the person that has access to those servers will be able to do anything now. Either way it's affect every person that plays the game not just a specific person now.
Firewalls do nothing to prevent the servers from being shutdown now, so the game is more or less impossible to run period | |
Since you don't know much about this kind of thing I think I might have to host this game to actually get a result to post here....
| |
Try it out.
| |
The person first in question is using a DoS vulnerability in BYOND itself. I reported it to Lummox ages ago. It just isn't fixed yet.
| |
I suggest looking into the actual definition of what 'DoSing' is.. I don't understand why people find DoS attacks to be such horrible things that only the '1337 hax0rs' can do.
| |
Only Harvard students are capable of DDoSing stuff.
| |
He mentioned his internet connection, either he is calling DreamDaemon a shell or he has a linux box at home.
You can try adding the logself tag to the DreamDaemon command - http://www.byond.com/docs/ref/info.html#/proc/startup
But I doubt that it will produce any useful information, but you never know.