IMPORTANT!! BAN THESE IP IMMEDIATELY

[CFH666]

24.164.243.26
24.123.16.12
24.49.144.5
68.105.167.132
65.73.227.106
67.11.160.172
208.62.104.227

They had a |9TH| tag on and after we banned them they changed their names.

These people have been causing tons of problem for us, from spawning boats and crashing server, to spamming urls to hackers sites, and crashing our server nightly for the past week.. AUTOKICKER will NOT kick them in time..they crash the server before autokicker even scans them and setting it to scan more often will kick people before they can even load the maps.

This is serious.. alot of weird shit has been happening to our server since these morons first started this about a week ago.

Banning them through autokicker or CI isnt kicking them quickly enough so we are getting the network guy where our server is hosted to block their IPs from the router so that it wont even let them through at all. You'll probably have to do the same.

We are also sending ABUSE emails to their ISPs informing them of the BS..
I also have an address for the owner of the site from a domain whois lookup and also IP WHOIS information on all IPs except for the very first one in the list. If you want that info, reply here. -- DONT EMAIL ME ILL NEVER REPLY TO IT

ALSO CHECKOUT
http://invisiblewarriors.com/iw/modules.php?name=Forums&file=viewtopic&p=4744&sid=faa4c0730097fd53443658ee8787a3e7#4744


6

[Defiant]

You need to send these to the Cheat Police,although i am for banning every piece of crap cheater i can and posting their IPs,i think there may a legal issue by posting it here.
i may be wrong,if so then my forums will have a special place for banned IPs. :D

[CFH666]

I was given a tip for CK Autokicker.

If you set scan time to 5 seconds, it will kick banned IPs every 5 seconds.. Then fo rthe ping kicks set it to like 15 pass.. 5x15=75 seconds before it kicks for high ping.. this way it will kick banned ips before they can even load a map, and it wont kick you before a map loads.



6

[NM156]

I've been waiting for this to show it's ugly face...

If you contact me CFH666, I might be able to stop them from crashing your server. This happened to the Clan I'm with, back a few weeks ago.

I cannot disclose how this is done, but I will work with you to resolve the issue privately. Even if I post the fix, someone will eventually reverse engineer it, and it'll be all over the cheat sites. We can't have this...

If this problem gets too wide spread, we'll have no choice, but to post the fix. But in the mean time, we'll do this via email, or voice server of your choice.

-NM
verymetl@hotmail.com

[Defiant]

there is already a patch out to prevent people from spawning objects on the server,it's on this site,here:

http://www.mohadmin.com/nuke/modules.php?name=Downloads&d_op=viewdownload&cid=2

if you have something different i would like to try it out though.

[NM156]

This has nothing to do with spawning objects. It's a good idea to use that dll patch you linked. I though about that after I made my initial post.

I'm talking about something else. If you log your servers, this exploit leaves a trace... ;)

-NM

[NM156]

Well CFH, I tried to help you... you seemed disinterested when I went to your server. Nothing more I can do...

-NM

[MSCSniperX]

I’m kind of lost on this one.. forgive me but did I read this thread right? what is the point of screaming foul and publicly publishing IP's when your not even interested in a fix? If I didn't know anything about this, a guy cried foul published Ip's and then someone offers to help and is ignored Id almost think this was a set up against 9th.. could be way off base.. just calling it how i see it..

[CFH666]

Ok let me clear some things up before this thrad gets ugly and turns into some retard flame fest like what usually happends.


Those IPs are the IPs of the people crashing our server. They are apperently members of the puremayhem clan I beleive. I said they were wearing 9th tags, not that they were 9th. I have never even heard of a 9th clan anyways.



NM156---

When you came to the server you were asking what they were doing to crash it. I told you they were making the server lag like hell somehow and I would have to turn off the servre and restart it to fix it. You did not offer me any help then.
Also with all this crap happening, I was a little suspicous about you asking what was going on in the first place so I wasnt going to say too much anyways.

--Perhaps if you would have mentioned that you might be able to prevent it I would have listened some more. You asked me a couple questions, I answered them. You didnt seem to ask any more questions, so I went back to playing.


Now, since I dont read these forums every day, I misse dyour offer on helping us out.


As for the spawning objects, we have that patch installed.


And as for screaming foul, thats a load of crap.. I must be really bored if I go around posting other peoples IPs of a so called 9th clan that Ive never heard of or seen for no reason to get them banned...

Our server isnt the only server that has had this happen too.


NM156, now that I am aware that there may be a way to prevent this unlike before when you came onto our server, I will be in contact with you.


6

[MSCSniperX]

It's not going to turn into a flame fest because NM and I are only here to help. I was coming in late on this scene trying to figure out why apparently you were not interested in NM's help..

As far as screaming foul.. that’s not my op. that’s a fact.. you came on here and posted peoples IPS and that they are crashing/causing problems that’s why I'm interested in your serious charges and subsequently interested in why you wouldn’t want help.. Iv seen countless times on other forums of 'set-ups' of people posting stuff that wasn't the complete story.. if you took the time to post peoples IPS and that we should ALL just arbitrarily BAN them, it's your responsibility to follow up.. we are just here to help out and try to figure out what the heck is going on.. I run several popular severs and I know I’m not going to just arbitrarily ban IP's from someone that posts them here or anywhere I don't even know.. hence I was suspicious when it looked perhaps you were not interested in help..

You have to appreciate the Irony that you initiated a post to expose IP's and everyone just arbitrarily trust you and ban them yet when NM tries to help you are suspicious of him.. Not trying to rub it in jus explain why we are the same way and just wanting more information on how we can help you..

Now, having said that it looks you ARE interested in getting this problem fixed so I am happy to see I must have been mistaken..

You have to appreciate the Irony that you initiated a post to expose IP's and everyone just arbitrarily trust you and ban them yet when NM tries to help you are suspicious of him.. Not trying to rub it in jus explain why we are the same way and just wanting more information on how we can help you..

NM is legit and the problem he describes is one of several methods of "crashing" a server that maybe not everyone knows about.. He was wondering if perhaps this is what you were experiencing.. If this is NOT your problem but rather "LAG" I don't think NM will be able to help you..


I have heard there is a way to lag a sever as you describe.. I myself will look more into this for you asap..

[CFH666]

Its not lag. Everyones frame rates actually goes down to about 3 fps. Pings stay normal... I said lag, but it is not network lag. As far as the moh server actualy crashing on the server, it never did. I just turned it off for about 10 minutes and restarted it.

As for why I didnt go into much detail about this, I didnt want to give too much out. Although Im sure most people know what sites they can go to to find this crap out, I chose not to post any specific information other then the peoples IPs.

They were using a vote exploit that apperntly confuses the server so i turned off voting and it seemed to have stopped. As I mentioned to NM156 when he asked on our server.


6

[Spiceman48]

CFH, there IS no flame here. You can read the post as if you were talking this over with two buddy's at a coffee shop. NM would not dare to expose any information about any exploit, and this includes the one you mentioned here REGARDLESS of where it's posted. Gheez MAN ... stuff's getting burried all the time on "Those Sites" and you bring it up again for a whole new crop of folks to pick up on and search for.

I beleive you and NM have spoken privatly, and have resolved the issue, but Sniper X makes a valid point for anyone posting IP's, I cringe at the thought someone would post my IP and say I did something wrong when in fact I'm just being framed. Your intent was honorable as we see now, and I'd hate to discourage you from wanting to notify the gameing community that there is a group of deadbeats trying to spoil the game. But in this particular case ... with regards to techniques people use to crash servers, you have to understand some level of trust has to be built between two people. I understand NM stopped talking to you for a moment, but than you left. Someone came on my server and started asking me questions, I'd wanna hang around to find out what this guy's up to. ... Well .. the thread's dead with regards to your particular problem and I'm glad this worked out for you. NM's awesome ... I'm done.

[LPChip]

Another thing which is the best is as follows.

You have to be server admin for this.

Make sure you have a QConsole.log file

When it happens, write down the exact time (with seconds), date and ip of the people.

After that, do a trace (i suggest www.visualroute.com (and then their life demo) for this) Enter their ip. This will do a trace location to their computer. On the way, it will pass by their IP. Click the items (names of company's) and make sure you got their ip. on the new window, they show an abuse email addres: (example: abuse@isp.com)

Open your email, and send an email towards that email addres. Post the end of qconsole.log (which shows the important things), the time, date and the ip.

You could also add a story that you hate it that thei're ****ing up your server, and also include a link to this topic as reference.

ISP's ususally disconnects their users permanently because they broke a rule.

result: they can't connect, so they won't be able to disturb you.

In case your trace leads to lets say, an internet cafe, email the internet cafe instead. they are able to track down their regular users, and a next time they are kicked out immediatelly.