Line of Sight: Vietnam

Banlist

EDIS — Tue, 04 Feb 2014 15:21:40 GMT

The Banned IP's List txt. The file opens as a html.
All IP's r arranged so any ip can b easilly found via internet browsers menu (>Edit>Find) n u dont need 2 look 4 every particular ip by urself.

MasterBanList here

IMPORTANT! Updates on the MasterBanList appears in 24 hours.

If you think you have been banned by mistake, use the Ban Appeal. Good luck.

The Advanced Banned IP's List txt. The file opens as a html.
All IP's r arranged so any ip can b easilly found via internet browsers menu (>Edit>Find) n u dont need 2 look 4 every particular ip by urself.

AdvancedBanList here

IMPORTANT! Updates on the AdvancedBanList appears in 24 hours.

If you've found your IP range on the ABL, DON'T use the Ban Appeal. You are done.

A way to start new year

SHADOW — Fri, 30 Dec 2011 13:28:49 GMT

One more IP to our favoured list.
This time it wasnt unexpected, more like - strongly overdue.
Activity registered from IP 82.101.238.106, it used to belong (probably still does) to one long banned guy called "pegasus".
He was banned for years... Now he remains banned but holds no right to use ban appeal guide to change it.

Some examples of his recent activity:

1st flood attempt on my server with crash message. Server was on 1.01 so not much to see there - 1st message crashed it:

I took actions to prevent it from ever happening again. He probably noticed that his flood-crash attempts became useless so he began old and well known "random port flooding with fragmented packets". It is supposed to make server lagy, but with fast enough connection - makes no effect.

IP range that goes to ABL:
82.101.0.0 - 82.101.255.255

Good luck next time

The Promotion

SHADOW — Wed, 30 Nov 2011 10:46:12 GMT

Today is a very special day for one little guy out there. Dont know how many people are still fighting in the battlefields of LOSV, or how many people will find this topic interesting, but thats not significant. Important thing here is "the promotion". The knucklehead (nothing personal really ) Im talking about, has been fighting for this all the time, constantly, regardless anything, with no commonsense whatsoever. He has overcome many obstacles in his path... Banned and kicked from countles servers, hated by players he persistently continued his quest by finding few more new ip's so that he could crash all servers there was. Certainly he had a reason for that, he wanted players to come to his server where he could show them the real skill of "bugs" and "mods" usage. Standing inside a rock, where noone could ever find or kill him, he would own newbies with M79 Granade launcher for hours and hours, till the last of them quit in shame. Naturally everyone who had played LOSV at least a week knows that Im talking about poor turkish boy.
It was getting harder and harder for him to gather new ip's, after all these years he probably understood what some of us knew all along: he cannot continue this forever, not if he wants to crash all servers. (e-3D) servers became out of bounds within few weeks and same with those who were smart enough to use MBL. Still he could find a narrow gap every few months, but that was not enough. Noone could bear it... seeing "You have been banned from this server" message again and again and only for a single, small, tiny crash that wouldnt even crash all the players... He had to act.
Today he proved to be ready to take his fight to a whole new level. His path is well known, like all those stumbling around the well earned banns, he summoned once poverful and unstoppable flood.
Even though it is no longer working as it did, even though he payed money for it (probably) and even though he will fail like those before him failed, he did really earned his rightfull place in advanced ban list. Congrats!

After this whole "fairy-tale" which has no happy ending for our "hero", some facts:

He tryed flood with random fragmented packets some time ago, which wasnt very useful I didnt even posted about it.
Now he is using some sort of well known flood, you can see how it looks in the "multiplayer8" and "multiplayer9" log files below. Hoever, it doesnt seem to be very useful too. While beeing in a server I notinced nothing and I mean nothing at all. No increase in packet loss, no "LOS Player has quit or lost the connection" messages buildup, no common chat messages flood. Seems like a simple Ban is working on this one well. However I got this on my old pc, different situation with connection here. He showed that he is willing to spend money (probably) on this, so it is posible that he will spend even more in the future (like someone had done so in the past). So Im taking action before he can do some real harm.
Im going add these to IP's to ABL for now, since he uses it, later if necessary it will be extended.
95.222.0.0 - 95.223.255.255
176.198.0.0 - 176.199.255.255
178.0.0.0 - 178.222.255.255
178.224.0.0 - 178.255.255.255

78.94.0.0 - 78.94.255.255

My recommendation would be to use MBL together with ABL, since it has proven to be effective.
Some extra IP's that could be used in future can be found here (this is exceptional, most of his new IP's are from Unitymedia NRW GmbH)

Ip list for Deutsche Telekom AG and Unitymedia NRW GmbH

SHADOW — Sun, 24 Jul 2011 17:27:09 GMT

Here you can find a list of ip's from Deutsche Telekom AG and Unitymedia NRW GmbH. Both are known as Turk's internet providers. These ips were not used by turk yet, they are not in MBL.
Ip's could be used in future. This also doesnt mean that he cant get another ips, however this should narrow his choices.

Included ip ranges (some of them already in MGL)
Deutsche Telekom AG:
217.224.0.0- 217.255.255.255
62.153.0.0 - 62.153.255.255
62.154.0.0 - 62.154.255.255
62.155.0.0 - 62.155.255.255
62.156.0.0 - 62.156.255.255
62.157.0.0 - 62.157.255.255
62.158.0.0 - 62.158.255.255
62.159.0.0 - 62.159.255.255
62.224.0.0 - 62.224.255.255
62.225.0.0 - 62.225.255.255
62.226.0.0 - 62.227.255.255
79.192.0.0 - 79.255.255.255
80.128.0.0 - 80.159.255.255
81.28.64.0 - 81.28.79.255
84.128.0.0 - 84.191.255.255
87.128.0.0 - 87.159.255.255
87.160.0.0 - 87.191.255.255
93.192.0.0 - 93.255.255.255
193.158.0.0 - 193.158.255.255
193.159.0.0 - 193.159.255.255
194.25.0.0 - 194.25.255.255
195.145.0.0 - 195.145.255.255
195.243.0.0 - 195.243.255.255
212.184.0.0 - 212.184.255.255
212.185.0.0 - 212.185.255.255
217.80.0.0 - 217.95.255.255
Unitymedia:
62.143.0.0 - 62.143.255.255
78.94.0.0 - 78.94.255.255
80.69.96.0 - 80.69.111.255
81.210.128.0 - 81.210.255.255
88.152.0.0 - 88.153.255.255
92.50.64.0 - 92.50.127.255
94.79.128.0 - 94.79.191.255
95.222.0.0 - 95.223.255.255
109.90.0.0 - 109.91.255.255
176.198.0.0 - 176.198.255.255
176.199.0.0 - 176.199.255.255
5.146.0.0 - 5.146.255.255

37.24.0.0 - 37.24.127.255
178.0.0.0 - 178.255.255.255

Weather you use it or not it's your choice.
If not we strongly recommend using basic MBL: The MasterBanList <<--

Common proff that our bans are legimate

SHADOW — Tue, 12 Jul 2011 09:48:12 GMT

One more common proof that our bans are legimate.
Apparently 1 of "tua anal" members doesnt like to be banned from e-3D servers, so he is trying to force his "unban" using old tricks.
Found this a day later, during simple log check. Here you can see some of his activity:

Jul 8 22:09:34 2011 Inbound Traffic Blocked - Fragmented packet UDP 82.101.235.164:59156->78.62.90.193:80 on ethoa0
Jul 8 22:09:34 2011 Firewall Info suppressed in 1 second(s)

Jul 8 22:09:42 2011 Inbound Traffic Blocked - Fragmented packet UDP 82.101.235.164:60620->78.62.90.193:80 on ethoa0
Jul 8 22:09:43 2011 Firewall Info suppressed in 1 second(s)

So we have 1 more candidate for our ABL.

Important stuff:
Full MasterBanList here

IMPORTANT! Updates on the MasterBanList appears in 24 hours.

If you think you have been banned by mistake, use the Ban Appeal. Good luck.

AdvancedBanList here

IMPORTANT! Updates on the AdvancedBanList appears in 24 hours.

If you've found your IP range on the ABL, DON'T use the Ban Appeal. You are done.

Attacks from outside !?

Roca — Thu, 20 Jan 2011 20:25:36 GMT

i was just starting the server when suddenly it shut me out to windows
i found this , This is last part of a text :

08/12/10 13:06:57 Banned player from IP 201.58.15.243 attempted to join and was rejected.
08/12/10 13:07:19 Banned player from IP 201.58.15.243 attempted to join and was rejected.
08/12/10 13:10:22 Connection accepted from IP 75.90.48.235.
08/12/10 13:10:24 Player has entered the game.
*ROCA*E*SGT*(MX)*: lol
08/12/10 13:10:54 Connection accepted from IP 71.188.143.66.
08/12/10 13:10:56 Biahwtrooper has entered the game.
08/12/10 13:11:26 Banned player from IP 86.180.182.187 attempted to join and was rejected.
DD2 Player: #############################################
#####################################################
###################################### #### #####################################################
#####################################################
############################## #### #####################################################
#####################

Bad News

Roca — Tue, 18 Jan 2011 22:26:54 GMT

Forum: Report a cheater/hacker
Thread starter: Roca
Last message posted by: SHADOW
Number of replies: 4

Floder's fail

SHADOW — Sun, 31 Oct 2010 17:46:32 GMT

Here I have 1 more proof that Credo(solo) became simple cheater. It is nothing new, he was atttacking E server for some time, but this is the 1st time he tryed that on me. Well he failed but he showed that he is banned for a reason. I recomend every1 to do the same. Here are some proof: Oct 31 17:46:04 2010 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/final_inbound/rule/4: UDP 86.140.35.30:55689->192.168.1.242:60001 on ethoa0 ... Oct 31 17:32:29 2010 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/final_inbound/rule/4: UDP 86.140.35.30:55367->192.168.1.242:60001 on ethoa0 Later that day: Oct 31 19:09:37 2010 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/final_inbound/rule/4: UDP 86.179.172.13:52736->192.168.1.242:60001 on ethoa0 ... Oct 31 19:08:34 2010 Inbound Traffic Blocked - Advanced Filter Rule /fw/policy/0/chain/final_inbound/rule/4: UDP 86.179.172.13:52722->192.168.1.242:60001 on ethoa0 Both Ip's are from banned Credo Ip range. This shows failed attemt to flood server.

hacker from China

Roca — Thu, 19 Aug 2010 09:15:07 GMT

Forum: Report a cheater/hacker
Thread starter: Roca
Last message posted by: SHADOW
Number of replies: 1