10.07.2012, 05:56
Recently the SAMP server over at MT-Gaming has been experiencing some very disturbing issues where it suddenly hangs without notice, allowing connections to the login screen but nothing afterwards. The server also doesn't crash completely, meaning you have to restart the server to allow people back on and potentially face rollbacks.
After some browsing of the forums here, it was initially thought to be a flooding attack because of the long list of IP addresses we'd see in the server logs after the hang happened. However, after some further investigation a pattern was discovered. Shortly before the server would go down, a player named "con" would connect to the login screen but not to an actual character. Some small time passes and then everything goes to shit.
After some digging through our various logs, we came to the conclusion that Silentfood is attacking us for absolutely no reason other than malice. He is a former admin / former developer who has spent more time away from the server than associated with the server at this point but continues to harass us at any given chance.
The purpose of this thread is to alert other servers to his actions and to not trust him or his "services".
First off, a small sampling of his actions against the server:
And the connecting of the dots:
These are not the actions of someone who should be trusted with any sort of authority or responsibility and should most definitely not be trusted with your money. Do not trust Extracontrol with your business, why risk the chance of him turning on you?
Last but not least, if anybody would be able to provide some sort of help with regard to how he is managing to hang our server from the login screen, that would be greatly appreciated. Obviously banning his IP address is one solution, but clearly there is a flaw somewhere that is being exploited.
tl;dr - Do not trust this man (http://forum.sa-mp.com/member.php?u=145645 / http://www.*******.com/silentfood) or his company (http://extracontrol.co.uk/) as he is attacking a peaceful mind-its-own-business server without reason or provocation.
After some browsing of the forums here, it was initially thought to be a flooding attack because of the long list of IP addresses we'd see in the server logs after the hang happened. However, after some further investigation a pattern was discovered. Shortly before the server would go down, a player named "con" would connect to the login screen but not to an actual character. Some small time passes and then everything goes to shit.
After some digging through our various logs, we came to the conclusion that Silentfood is attacking us for absolutely no reason other than malice. He is a former admin / former developer who has spent more time away from the server than associated with the server at this point but continues to harass us at any given chance.
The purpose of this thread is to alert other servers to his actions and to not trust him or his "services".
First off, a small sampling of his actions against the server:
Quote:
[07/04/2012 19:35:40] [join] con has joined the server (49:92.25.110.127) [07/04/2012 19:35:58] Incoming connection: x.x.x.x:20314 [07/04/2012 19:36:30] Incoming connection: x.x.x.x:15317 [07/04/2012 19:36:34] Incoming connection: x.x.x.x:58377 [07/04/2012 19:36:40] Incoming connection: x.x.x.x:53421 [07/04/2012 19:36:40] Incoming connection: x.x.x.x:54827 [07/04/2012 22:26:09] [join] con has joined the server (91:92.25.110.127) [07/04/2012 22:26:18] Incoming connection: x.x.x.x:49425 [07/04/2012 22:26:37] Incoming connection: x.x.x.x:61220 [07/04/2012 22:26:47] Incoming connection: x.x.x.x:63434 [07/04/2012 22:27:00] Incoming connection: x.x.x.x:51884 [07/04/2012 22:27:02] Incoming connection: x.x.x.x:54629 [07/04/2012 23:21:15] [join] con has joined the server (71:92.25.110.127) [07/04/2012 23:21:53] Incoming connection: x.x.x.x:29344 [07/04/2012 23:22:13] Incoming connection: x.x.x.x:63576 [07/04/2012 23:22:16] Incoming connection: x.x.x.x:59596 [07/04/2012 23:22:20] Incoming connection: x.x.x.x:60802 [07/04/2012 23:22:21] Incoming connection: x.x.x.x:62954 [07/05/2012 02:45:16] [join] con has joined the server (28:92.25.110.127) [07/05/2012 02:45:56] Incoming connection: x.x.x.x:61960 [07/05/2012 02:45:56] Incoming connection: x.x.x.x:59093 [07/05/2012 02:46:32] Incoming connection: x.x.x.x:55543 [07/05/2012 02:46:46] Incoming connection: x.x.x.x:1092 [07/05/2012 02:46:47] Incoming connection: x.x.x.x:64721 [07/05/2012 02:46:48] Incoming connection: x.x.x.x:55312 [07/05/2012 17:15:31] [join] con has joined the server (115:92.25.110.127) [07/05/2012 17:15:40] Incoming connection: x.x.x.x:55653 [07/05/2012 17:15:50] Incoming connection: x.x.x.x:20138 [07/05/2012 17:15:58] Incoming connection: x.x.x.x:1211 [07/05/2012 17:16:07] Incoming connection: x.x.x.x:54718 [07/05/2012 17:16:08] Incoming connection: x.x.x.x:57897 [07/05/2012 22:16:15] [join] con has joined the server (42:92.25.110.127) [07/05/2012 22:16:19] Incoming connection: x.x.x.x:52852 [07/05/2012 22:16:23] Incoming connection: x.x.x.x:65026 [07/05/2012 22:16:26] Incoming connection: x.x.x.x:53213 [07/05/2012 22:16:26] Incoming connection: x.x.x.x:63303 [07/05/2012 22:16:46] Incoming connection: x.x.x.x:29117 |
These are not the actions of someone who should be trusted with any sort of authority or responsibility and should most definitely not be trusted with your money. Do not trust Extracontrol with your business, why risk the chance of him turning on you?
Last but not least, if anybody would be able to provide some sort of help with regard to how he is managing to hang our server from the login screen, that would be greatly appreciated. Obviously banning his IP address is one solution, but clearly there is a flaw somewhere that is being exploited.
tl;dr - Do not trust this man (http://forum.sa-mp.com/member.php?u=145645 / http://www.*******.com/silentfood) or his company (http://extracontrol.co.uk/) as he is attacking a peaceful mind-its-own-business server without reason or provocation.