I did an analysis of my logs. The suspect always connects from 24.175.189.64, and I found 4 different Steam IDs, each ID with a unique set of names. What is the chance that 4 different people can connect and somehow show up as being from the same IP? I banned all of them, hopefully end of story.
----- Original Message ----- From: "Ned Haskin" <[EMAIL PROTECTED]> To: <hlds@list.valvesoftware.com> Sent: Sunday, June 12, 2005 7:46 AM Subject: Re: [hlds] IP Spoofing hlds server? > It could be as simple them both using the same broadband connection for > steam. > While using a dialup box to im you which would have a different ip. As > in, they are both > in on it, ban the ip and let them sort it out with valve. > > Ned > > Kevin Ottalini wrote: > > > it doesn't have to be that complex ... they are just cooperating > > together to > > try and get the cousin unbanned. > > > > All the "good" player has to do is let his "bad" cousin use his steam > > account from the banned IP so it looks like > > (effectively) they are both ip banned even though they are on > > different ip - > > and the "good" player just talks to you > > (IM) normally from his normal ip address. > > > > I personally would ban both of them. > > > > ----- Original Message ----- > > From: "Ook" <[EMAIL PROTECTED]> > > To: <hlds@list.valvesoftware.com> > > Sent: Saturday, June 11, 2005 11:31 PM > > Subject: [hlds] IP Spoofing hlds server? > > > > > >> Is it possible for someone to spoof an IP address when they connect to a > >> server? One of my regulars IM'd me and said he could not connect to my > >> server. He gave me his steam account login to test it and I verified his > >> steam account could connect to my server just fine. I had him go to > >> "what > >> is > >> my ip address" via google, and then had him hit my web server so I could > >> verify his ip address - they were the same. He said he was still > >> banned. I > >> inspected my ban lists, and neither his steam id nor his ip address were > >> in > >> them. Just to test, I removed a different IP address that belongs to > >> someone > >> that knows him that I recently banned (I think they are cousins or > >> something > >> like that) (it's a long story), and then he was able to connect. But > >> when > >> he > >> connected, he connected from the banned ip that I just unbanned, not the > >> ip > >> he hit my web server with. > >> > >> So - here is the confusion. I verify his ip address, but when he > >> connects, > >> it's from a different ip address. I think I'm being jerked around - > >> Either > >> he (or something somewhere) is somehow spoofing his ip address, or he is > >> talking to me from one place, and he has his cousin (who was banned) on > >> the > >> phone and to make a long story short, they were trying to con me into > >> unbanning his cousin. So - is there any way he can IM from one address, > >> but > >> when he connects to my server, connect from a different ip address? > >> > > > > > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
