Port flooding continues

[luck777jojo]

well, it's still happening so.... if you know who is doing this and why it sure would be great to know, or better yet if you know the script kiddie who's doing this then I would seriously appreciaty you beating his face in.

I suspect this isn't someone who knows what they're doing much since those groups usually approach us first and tell us what their problem with us is and we try to work things out.
Port flooding on the other hand is a rather pathetic way to take down a site, and most script kiddies just do it for fun without any motif behind their actions other than "yay i just downloaded this cool new program which says it can take a site down let's try it out".

Still I urge anyone with any information about this to come forward, script kiddie or not if there is some motif behind their actions I will be willing to hear them out.

[JAvEX]

Yea, that really sucks. I was wondering why every 10 minutes or so I get MPC timing out for about 5 minutes, then it seems to work again, and then it repeats the process...

Unfortunately I have no information to share with you, if I come accross any gossip/rumors/anything, I'll be sure to let you know about it. I hope we can get this all sorted out as soon as possible. I'm sure who ever is doing it will read this; just fess up, let us know why you're doing it, and hopefully we can work something out...

[o({})o]

If you find that your computer is making connections to our server without your permission, please tell us ASAP. It is possible that this is caused by a program put out by someone outside of, or even on, MPC. Any information you have will be much appreciated.

[Luky Jay]

What if there motive is because you guys release hacks for games? Then what you gona do. Im pretty sure it is, either that or your competition. Eg. (highly doubt they would do this coz there not pricks) but gzp flooding your forum so people goto gzp not mpc?

[KizZamP-]

What if there motive is because you guys release hacks for games? Then what you gona do. Im pretty sure it is, either that or your competition. Eg. (highly doubt they would do this coz there not pricks) but gzp flooding your forum so people goto gzp not mpc?
nah not gzp,we basically have an idea of who it is.

[Skyline_R34]

If you find that your computer is making connections to our server without your permission, please tell us ASAP. It is possible that this is caused by a program put out by someone outside of, or even on, MPC. Any information you have will be much appreciated.
Does anyone know the command in cmd to see connections?

EDIT:
Use "netstat -a" without quotes of course.
Also, I get this line coming up quite a few times:
TCP simon:1467 mpcforum.com:http TIME_WAIT
The port is different but the connnection is the same. It could just be the browser.

[KizZamP-]

netstat -n

but skyline : he's asking since i told you something,but i don't think you have it anyways...speak to you on irc.

[czkb]

http://www.sysinternals.com/Utilities/TcpView.html
i use this tool;)

[lolerfork]

@czkb, This server is run on SuSE, TCPView wouldn't work, but I'm sure they have there own ways of catching the person responsible.

[luck777jojo]

@czkb, This server is run on SuSE, TCPView wouldn't work, but I'm sure they have there own ways of catching the person responsible.he posted it for the users who are running windows because it was suggested that everyone check to make sure their PC is not being a zombie because of a cheat or some other file possibly being used now.

[Cha0sCha0]

Oooh, someone's launched a DDOS attack on MPC? I hope you find out who it is, and if you do, mind shareing their IP?

[lolerfork]

he posted it for the users who are running windows because it was suggested that everyone check to make sure their PC is not being a zombie because of a cheat or some other file possibly being used now.

ah. Sorry, didn't catch that.
If you want to send me a link to all the new hacks, I can open them all with VMWare tomorrow and see what connects to what.

[czkb]

@czkb, This server is run on SuSE, TCPView wouldn't work, but I'm sure they have there own ways of catching the person responsible.

LOL (Suze = Linux = i dont use it)


i dont use linux and is for that ive posted a windows tool (but is utile for viewing network activity on any windows system):hurt:

[o({})o]

Why don't people just get decent firewalls that they can check their activity in?

[Conker]

rofl nah :P i think lots of people use sygate which is free but isn't very good

any other progs that can check your connections?

edit:
you sure it isn't goons?

[snowcatxx87]

Accessing the site is becoming a pain :(

[Absolution]

GD also got flooded, not nearly as bad though.

Its a shame...

[gil]

Everytime I visit MPC is actually faster than ever :D

Someone likes me...

[Weedh3ad]

rofl nah i think lots of people use sygate which is free but isn't very good

any other progs that can check your connections?

edit:
you sure it isn't goons?

TCP Viewer works great.

No it is not them.

[Meshios.CN]

edit the buffer size... it will stop/reduce this a bit..

[c0kane]

Sygate is pretty decent. Well, Sygate Pro anyway.

Been using it for years and never gave me any problems.

[shadow1]

http://www.grc.com/dos/grcdos.htm, this might help. I read this a long while ago, and it seems quite similar to your situation.

If you discovered an irc channel links to a company, then it's most likely they has some security flaws in the software they're using. I am sure if you write to them with some proofs, they will try to clean things up (mostly for their benefits). I had people tried to drop eggs into my servers before, and had to upgrade some software to fix the flaws.

dammit, signed up on the 3rd of January 2005 and I made 2 posts including this one...

[ICE} Revisited]

What if there motive is because you guys release hacks for games? Then what you gona do. Im pretty sure it is, either that or your competition. Eg. (highly doubt they would do this coz there not pricks) but gzp flooding your forum so people goto gzp not mpc?
Accordin to Javex, he times out every 10 mins, meaning this is the work of one person attempting to take down the site. Therefore its not a group of people who wants to take down MPC.
Oooh, someone's launched a DDOS attack on MPC? I hope you find out who it is, and if you do, mind shareing their IP?
No its not a ddos because only one computer, not a number of them, is attacking MPC. If someone hands you the IP, wtf are you going to do?
you sure it isn't goons?
Goons arent script kiddies who uses port flooding to take down sites.

[kkll70]

Lol well MPC is as good as new.. well atleast for me lol ^^ havn't lagged or anything.

[gil]

Lol well MPC is as good as new.. well atleast for me lol ^^ havn't lagged or anything.
All the good props to luck :)

[Dark Hacker]

Well i never had real trouble... but i did notice some increase of speed lately... THX 2 U LUCK :P

[Supernova]

Well i never had real trouble... but i did notice some increase of speed lately... THX 2 U LUCK :P

lol same thing with me, mpc has been faster, also i dont know if this would work for sites, but cant you just lower ur ports? ex current ports=5000~8000 new ports 6000~7000

[luck777jojo]

the only port that is used is port 80
that's the default http port and it will stay that way to maximize compatability with different internet browsers.

[Ping_pong]

Just a question, This entire week i need to connect to MPC using a crappy slow connection proxy... Is my IP adress banned or something? :\ Getting kinda anoying switching proxy's all the time...

Or is this because the flooding is stil going on? O_o

EDIT:
No proxy used to check THIS page and this is what happens;
http://img233.imageshack.us/img233/3282/zomg4fe.jpg

[DarK MinsTreL]

Um, looks like your not even connecting to mpcforum.com . Wtf is vorbeeld.com? Try setting up www.opendns.com on your computer or network and see if you can connect then. It looks like your isp is blocking some sites with their dns servers?

[KizZamP-]

Um, looks like your not even connecting to mpcforum.com . Wtf is vorbeeld.com? Try setting up www.opendns.com on your computer or network and see if you can connect then. It looks like your isp is blocking some sites with their dns servers?
voorbeeld means "example".

[o({})o]

Ping_pong, none of your past IP's have been blocked... If you want, PM me with your current non-proxy IP and I will check that as well since it is the one you have had trouble with.

[.Panic]

Is it still going on? I can't acces the site sometimes, are they DDOSing you from proxies? Because you could ask the proxy owner if he could check access and use.

Also you can charge 1000$ +, so this could be better for joo too, atleast from what I experienced.

[KizZamP-]

Is it still going on? I can't acces the site sometimes, are they DDOSing you from proxies?
he fixed it now.
Because you could ask the proxy owner if he could check access and use.
depends if they're using transparent/anonymous/high anonymous.

[.Panic]

he fixed it now.

depends if they're using transparent/anonymous/high anonymous.
Doesn't hurt to try though ;)

[Gr4v3D!gg3r]

Cant you guys just hunt the ip down and track his provider?

[o({})o]

Cant you guys just hunt the ip down and track his provider?

There are hundreds of IP's, and most of them are dead ends.

[Gr4v3D!gg3r]

hmm ..so just no script kiddies i quess, probebly mad anti cheaters who gets there asses owned everyday! :D

In Euroland where i live all the people who live there need an internet ID somewhere in 2007, so the goverment can track down every step you take.... Big Brother...

Its ment to track terrorist and criminals down but i realy doubt that will help, we will lose our freedom bit by bit..