[TheAvengers2]

Interestingly, the rdns to the second ip (37.59.74.170) links to a premium cheating website. I wonder what motives are behind their attacking of random communities.

[blue zebra]

Motivation? I don't know. Advertising that sh*t cheat?

[GoD-Tony]

Originally Posted by littlebags Wouldn't SMAC with Connect protect a server from something like this?

That's for another type of attack and this one shouldn't need Connect to be blocked. Unfortunately my code for checking legitimate LAN clients is interfering with this.

I was planning a small update today, maybe I can include a fix for this as well.

[Zephyrus]

according to gametracker graphs i got this around 5 or 6 AM yesterday too





notice the spikes on all 3 servers around the same time

[Nolongerinthegame]

Originally Posted by TheAvengers2 Interestingly, the rdns to the second ip (37.59.74.170) links to a premium cheating website. I wonder what motives are behind their attacking of random communities.

Lol on that website. There is a little notice if you try to "purchase" a cheat.

It says you must not be a member of Valve, Gmod team, or attempt to crack th cheat or build an Anticheat or your account will be suspended and legal acton may be taken!

So if valve purchase the cheat and obviously try to stop It and these noobs find out, they will attempt to sue them? Would like to see that.

[37.59.74.170]

I'm the owner of the "sh*t cheat". Your servers are being hit with spoofed packets to make them DDoS mine, so please stop spamming my email and ddosing my website because I have as much control over this as you do

[Zephyrus]

Originally Posted by 37.59.74.170 I'm the owner of the "sh*t cheat". Your servers are being hit with spoofed packets to make them DDoS mine, so please stop spamming my email and ddosing my website because I have as much control over this as you do

1. how would that work? i dont think that they had attacked enough servers at the same time and constantly enough to ddos your ip
2. the connection process starts with a kind of handshake where the client and the server accepts a challenge number thats sent in every packet, with spoofed ips they would never receive the required challenge from the server

[37.59.74.170]

Originally Posted by Zephyrus 1. how would that work? i dont think that they had attacked enough servers at the same time and constantly enough to ddos your ip 2. the connection process starts with a kind of handshake where the client and the server accepts a challenge number thats sent in every packet, with spoofed ips they would never receive the required challenge from the server

I don't know how it works. Maybe the handshake challenge is what comes to my server. The attacks are not really so big though.

[Zephyrus]

Originally Posted by 37.59.74.170 I don't know how it works. Maybe the handshake challenge is what comes to my server. The attacks are not really so big though.

i see so its not constant, just spikes, then i dont see the point of this at all if its indeed a reflected attack

[gamemann]

Happened on those 2 servers. But if you look at the first one it seemed to happen more often....