[cod] ddos attack on port 28960

[GateKeeperLL]

if it is ddos, you are right it is probably coming from a shell... but still my method allows the ISP to shut down the connection... again if it is a 600mbit ddos attack... and you are probably correct in the assumption that it is a disgruntled killer that was on the server... i deal with this crap all day  lol... cheerz... g8
  ----- Original Message ----- 
  From: tommii | Mailinglist 
  To: cod at icculus.org 
  Sent: Monday, August 18, 2008 2:32 PM
  Subject: RE: [cod] ddos attack on port 28960


  I think this won't help.

  Did you make somebody mad on your server or did you ban somebody after a fight ?

   

  Because this guy is not sending this DDoS from his own pc.

  How did you figure it's a ddos ? did your server go down ?

   

  Tom

   

   

  From: GateKeeperLL [mailto:gatekeeper at linkslobby.com] 
  Sent: maandag 18 augustus 2008 22:28
  To: cod at icculus.org
  Subject: Re: [cod] ddos attack on port 28960

   

  trace what ip it is coming from, or block of ip's, whois and find the isp, search your mp logs and see if the offending ip has been on your server... if he/she has, document the user name, document when the attacks take place and send all this info to the offending ip's ISP for action... cheerz g8

    ----- Original Message ----- 

    From: Cheetah 

    To: cod at icculus.org 

    Sent: Monday, August 18, 2008 2:09 PM

    Subject: [cod] ddos attack on port 28960

     

    Hey guys, sorry for my english...
    Already second time my servers (server.cod-4.ru) under ddos attacks (600mbit). Server are running on linux gentoo and with your linux bin (cod4-linux-server-06282008.tar.bz2). Attacks go to only 28960 port.
    Have you any ideas?

     

    Thanks
    CoD-4.ru

     
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://icculus.org/pipermail/cod/attachments/20080818/6cf307b6/attachment.htm>