[cod] ddos attack on port 28960

[Cheetah]

>How do you know it's a 600mbit . do you know the guy ?
Higher provider has told to me.


  ----- Original Message ----- 
  From: tommii 
  To: cod at icculus.org 
  Sent: Tuesday, August 19, 2008 12:47 AM
  Subject: RE: [cod] ddos attack on port 28960


  How do you know it's a 600mbit . do you know the guy ?

  But yeah Gatekeeper is right. Write down the IP, grad the log files and mail your and his ISP.

   

   

  From: GateKeeperLL [mailto:gatekeeper at linkslobby.com] 
  Sent: maandag 18 augustus 2008 22:38
  To: cod at icculus.org
  Subject: Re: [cod] ddos attack on port 28960

   

  if it is ddos, you are right it is probably coming from a shell... but still my method allows the ISP to shut down the connection... again if it is a 600mbit ddos attack... and you are probably correct in the assumption that it is a disgruntled killer that was on the server... i deal with this crap all day  lol... cheerz... g8

    ----- Original Message ----- 

    From: tommii | Mailinglist 

    To: cod at icculus.org 

    Sent: Monday, August 18, 2008 2:32 PM

    Subject: RE: [cod] ddos attack on port 28960

     

    I think this won't help.

    Did you make somebody mad on your server or did you ban somebody after a fight ?

     

    Because this guy is not sending this DDoS from his own pc.

    How did you figure it's a ddos ? did your server go down ?

     

    Tom

     

     

    From: GateKeeperLL [mailto:gatekeeper at linkslobby.com] 
    Sent: maandag 18 augustus 2008 22:28
    To: cod at icculus.org
    Subject: Re: [cod] ddos attack on port 28960

     

    trace what ip it is coming from, or block of ip's, whois and find the isp, search your mp logs and see if the offending ip has been on your server... if he/she has, document the user name, document when the attacks take place and send all this info to the offending ip's ISP for action... cheerz g8

      ----- Original Message ----- 

      From: Cheetah 

      To: cod at icculus.org 

      Sent: Monday, August 18, 2008 2:09 PM

      Subject: [cod] ddos attack on port 28960

       

      Hey guys, sorry for my english...
      Already second time my servers (server.cod-4.ru) under ddos attacks (600mbit). Server are running on linux gentoo and with your linux bin (cod4-linux-server-06282008.tar.bz2). Attacks go to only 28960 port.
      Have you any ideas?

       

      Thanks
      CoD-4.ru

       
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://icculus.org/pipermail/cod/attachments/20080819/baa0d9d1/attachment.htm>