[bf1942] DoS against port 29900

David Stevens dave at netdefense.ca
Wed Oct 12 09:55:13 EDT 2005

They won't take it seriously until their ranking system gets hacked again
(then it will be fixed in <3 hrs) or it crashes THEIR servers.

-----Original Message-----
From: Steven Hartland [mailto:killing at multiplay.co.uk] 
Sent: Wednesday, October 12, 2005 4:43 AM
To: bf1942 at icculus.org
Subject: Re: [bf1942] DoS against port 29900

Yep we made EA aware of this issue a two weeks ago. ATM they dont
seem to be taking it seriously. Looks like that's a light one we had 150Mb
DDoS's for a number of days. Had to null route an entire /16 to ensure
the DoS didn't reach its intended target.

    Steve / K
----- Original Message ----- 
From: "James Gurney" <james at globalmegacorp.org>
> Has anyone seen a DoS attack targeting the BF2 gamespy port? I came home 
> to find my server taking a (fairly pathetic) 0.1Mbps flood against port 
> 29900. Unfortunately, the reply was pumping out 2Mbps of traffic, 
> presumably saturating the DSL of whatever poor sap was hosting the 
> trojan. No problem, easily shut down.. I'm just curious if anyone has 
> seen this before.. Seems pretty random.
> tcpdump revealed the source port as 22222. Port 22222 shows up in Google 
> as being the source port for a bunch of trojans, but none of which 
> appear to target the gamespy port (as far as I can tell).

This e.mail is private and confidential between Multiplay (UK) Ltd. and the
person or entity to whom it is addressed. In the event of misdirection, the
recipient is prohibited from using, copying, printing or otherwise
disseminating it or any information contained in it. 

In the event of misdirection, illegible or incomplete transmission please
telephone (023) 8024 3137
or return the E.mail to postmaster at multiplay.co.uk.

More information about the Bf1942 mailing list