Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread msleeper
I think Neph did? Somebody post up their admin/abuse contacts.


On Mon, 2010-01-25 at 01:02 -0600, Cc2iscooL wrote:
 Has anyone sent an abuse notice to their provider?
 
 On Jan 25, 2010 12:16 AM, Mike Stiehm mikesti...@gmail.com wrote:
 
 We just got hit by this guy..
 
 -Original Message- From: hlds-boun...@list.valvesoftware.com
 
 [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of John Sent: Sunday,
 January 24, 2010 10:46 ...
 
 Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
 servers You mean an ACL. Ro...
 ___
 To unsubscribe, edit your list preferences, or view the list archives, please 
 visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread Michael Secord
http://centralops.net/co FTW :)

Address lookup
canonical name  st3gaming.com.
aliases 
addresses   208.113.196.53
Domain Whois record

Queried whois.internic.net with dom st3gaming.com...

Domain Name: ST3GAMING.COM
Registrar: NEW DREAM NETWORK, LLC
Whois Server: whois.dreamhost.com
Referral URL: http://www.dreamhost.com
Name Server: NS1.DREAMHOST.COM
Name Server: NS2.DREAMHOST.COM
Name Server: NS3.DREAMHOST.COM
Status: ok
Updated Date: 19-nov-2009
Creation Date: 18-nov-2008
Expiration Date: 18-nov-2010

  Last update of whois database: Mon, 25 Jan 2010 21:54:18 UTC 

Queried whois.dreamhost.com with st3gaming.com...

Legal Stuff:

The information in DreamHost's whois database is to be used for
informational purposes only, and to obtain information on a
domain name registration. DreamHost does not guarantee its
accuracy.

You are not authorized to query or access DreamHost's whois
database using high-volume, automated means without written
permission from DreamHost.

You are not authorized to query or access DreamHost's whois
database in order to facilitate illegal activities, or to
facilitate the use of unsolicited bulk email, telephone, or
facsimile communications.

You are not authorized to collect, repackage, or redistribute the
information in DreamHost's whois database.

DreamHost may, at its sole discretion, restrict your access to
the whois database at any time, with or without notice. DreamHost
may modify these Terms of Service at any time, with or without
notice.

+++

Domain Name: st3gaming.com

Registrant Contact:
   st3gaming.com Private Registrant 
st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Administrative Contact:
   st3gaming.com Private Registrant 
st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Technical Contact:
   st3gaming.com Private Registrant 
st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Billing Contact:
   st3gaming.com Private Registrant 
st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Record created on 2008-11-18 20:08:30.
Record expires on 2010-11-18 20:08:30.

Domain servers in listed order:

   ns1.dreamhost.com
   ns2.dreamhost.com
   ns3.dreamhost.com
DreamHost whois server terms of service: 
http://whois.dreamhost.com/terms.html

Get a 14-day free trial of unlimited everything from DreamHost Web Hosting.
Includes A FREE domain registration! http://www.dreamhost.com/
Use promotional code WHOIS for an additional $50 off any plan!


Network Whois record

Queried whois.arin.net with 208.113.196.53...

OrgName:New Dream Network, LLC
OrgID:  NDN
Address:417 Associated Rd.
Address:PMB #257
City:   Brea
StateProv:  CA
PostalCode: 92821
Country:US

NetRange:   208.113.128.0 - 208.113.255.255
CIDR:   208.113.128.0/17
NetName:DREAMHOST-BLK6
NetHandle:  NET-208-113-128-0-1
Parent: NET-208-0-0-0-0
NetType:Direct Allocation
NameServer: NS1.DREAMHOST.COM
NameServer: NS2.DREAMHOST.COM
NameServer: NS3.DREAMHOST.COM
Comment:
RegDate:2006-04-12
Updated:2007-11-01

OrgAbuseHandle: DAT5-ARIN
OrgAbuseName:   DreamHost Abuse Team
OrgAbusePhone:  +1-714-706-4182
OrgAbuseEmail:  ab...@dreamhost.com

OrgNOCHandle: ZD69-ARIN
OrgNOCName:   Network Operations
OrgNOCPhone:  +1-714-706-4182
OrgNOCEmail:  net...@dreamhost.com

OrgTechHandle: MNA53-ARIN
OrgTechName:   Nagel, Mark
OrgTechPhone:  +1-714-706-4182
OrgTechEmail:  mna47-a...@dreamhost.com

# ARIN WHOIS database, last updated 2010-01-24 20:00

DNS records
nameclass   typedatatime to live
st3gaming.com   IN  NS  ns1.dreamhost.com   14400s  (04:00:00)
st3gaming.com   IN  SOA 
server: ns1.dreamhost.com
email:  hostmaster.dreamhost.com
serial: 2009080200
refresh:15642
retry:  1800
expire: 1814400
minimum ttl:14400
14400s  (04:00:00)
st3gaming.com   IN  MX  
preference: 0
exchange:   aspmx.l.google.com
14400s  (04:00:00)
st3gaming.com   IN  A   208.113.196.53  14400s  (04:00:00)
st3gaming.com   IN  NS  ns3.dreamhost.com   14400s  (04:00:00)
st3gaming.com   IN  NS  ns2.dreamhost.com   14400s  (04:00:00)
53.196.113.208.in-addr.arpa IN  PTR 
apache2-igloo.boxster.dreamhost.com 14400s  (04:00:00)

-- end --

 Original Message  
Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoSrival 
servers
From: msleeper mslee...@ismsleeperwrong.com
To: Half-Life dedicated Win32 server mailing list

Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread Kevin b er
 --

  Original Message  
 Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS
  rival
 servers
 From: msleeper mslee...@ismsleeperwrong.com
 To: Half-Life dedicated Win32 server mailing list
 hlds@list.valvesoftware.com
 Date: 1/25/2010 3:44 PM

  I think Neph did? Somebody post up their admin/abuse contacts.
 
 
  On Mon, 2010-01-25 at 01:02 -0600, Cc2iscooL wrote:
  Has anyone sent an abuse notice to their provider?
 
  On Jan 25, 2010 12:16 AM, Mike Stiehmmikesti...@gmail.com  wrote:
 
  We just got hit by this guy..
 
  -Original Message- From: hlds-boun...@list.valvesoftware.com
 
  [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of John Sent:
 Sunday,
  January 24, 2010 10:46 ...
 
  Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
  servers You mean an ACL. Ro...
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds
 
 
  ___
  To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
  http://list.valvesoftware.com/mailman/listinfo/hlds
 

 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread Michael Secord
It doesn't matter. You have the ISP's abuse contact info. That's who you 
want to have shut him down...domain name means jack in this case...

--Original Message--
Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
servers
From: Kevin b er kevin-b...@starmen.net
To: Half-Life dedicated Win32 server mailing list 
hlds@list.valvesoftware.com
Date: Mon, Jan 25, 2010 4:11:01 PM -0600
 Not really FTW.

 The illegal actor is hiding behind proxy registrations.

 On Mon, Jan 25, 2010 at 3:56 PM, Michael Secord gizmokid2...@gmail.comwrote:

   
 http://centralops.net/co FTW :)

 Address lookup
 canonical name  st3gaming.com.
 aliases
 addresses   208.113.196.53
 Domain Whois record

 Queried whois.internic.net with dom st3gaming.com...

Domain Name: ST3GAMING.COM
Registrar: NEW DREAM NETWORK, LLC
Whois Server: whois.dreamhost.com
Referral URL: http://www.dreamhost.com
Name Server: NS1.DREAMHOST.COM
Name Server: NS2.DREAMHOST.COM
Name Server: NS3.DREAMHOST.COM
Status: ok
Updated Date: 19-nov-2009
Creation Date: 18-nov-2008
Expiration Date: 18-nov-2010

   Last update of whois database: Mon, 25 Jan 2010 21:54:18 UTC 

 Queried whois.dreamhost.com with st3gaming.com...

 Legal Stuff:

 The information in DreamHost's whois database is to be used for
 informational purposes only, and to obtain information on a
 domain name registration. DreamHost does not guarantee its
 accuracy.

 You are not authorized to query or access DreamHost's whois
 database using high-volume, automated means without written
 permission from DreamHost.

 You are not authorized to query or access DreamHost's whois
 database in order to facilitate illegal activities, or to
 facilitate the use of unsolicited bulk email, telephone, or
 facsimile communications.

 You are not authorized to collect, repackage, or redistribute the
 information in DreamHost's whois database.

 DreamHost may, at its sole discretion, restrict your access to
 the whois database at any time, with or without notice. DreamHost
 may modify these Terms of Service at any time, with or without
 notice.

 +++

Domain Name: st3gaming.com

Registrant Contact:
   st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Administrative Contact:
   st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Technical Contact:
   st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Billing Contact:
   st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
   A Happy DreamHost Customer
   417 Associated Rd #324
   Brea, CA 92821
   US
   +1.2139471032

Record created on 2008-11-18 20:08:30.
Record expires on 2010-11-18 20:08:30.

Domain servers in listed order:

   ns1.dreamhost.com
   ns2.dreamhost.com
   ns3.dreamhost.com
 DreamHost whois server terms of service:
 http://whois.dreamhost.com/terms.html

 Get a 14-day free trial of unlimited everything from DreamHost Web Hosting.
 Includes A FREE domain registration! http://www.dreamhost.com/
 Use promotional code WHOIS for an additional $50 off any plan!


 Network Whois record

 Queried whois.arin.net with 208.113.196.53...

 OrgName:New Dream Network, LLC
 OrgID:  NDN
 Address:417 Associated Rd.
 Address:PMB #257
 City:   Brea
 StateProv:  CA
 PostalCode: 92821
 Country:US

 NetRange:   208.113.128.0 - 208.113.255.255
 CIDR:   208.113.128.0/17
 NetName:DREAMHOST-BLK6
 NetHandle:  NET-208-113-128-0-1
 Parent: NET-208-0-0-0-0
 NetType:Direct Allocation
 NameServer: NS1.DREAMHOST.COM
 NameServer: NS2.DREAMHOST.COM
 NameServer: NS3.DREAMHOST.COM
 Comment:
 RegDate:2006-04-12
 Updated:2007-11-01

 OrgAbuseHandle: DAT5-ARIN
 OrgAbuseName:   DreamHost Abuse Team
 OrgAbusePhone:  +1-714-706-4182
 OrgAbuseEmail:  ab...@dreamhost.com

 OrgNOCHandle: ZD69-ARIN
 OrgNOCName:   Network Operations
 OrgNOCPhone:  +1-714-706-4182
 OrgNOCEmail:  net...@dreamhost.com

 OrgTechHandle: MNA53-ARIN
 OrgTechName:   Nagel, Mark
 OrgTechPhone:  +1-714-706-4182
 OrgTechEmail:  mna47-a...@dreamhost.com

 # ARIN WHOIS database, last updated 2010-01-24 20:00

 DNS records
 nameclass   typedatatime to live
 st3gaming.com   IN  NS  ns1.dreamhost.com   14400s  (04:00:00)
 st3gaming.com   IN  SOA
 server: ns1.dreamhost.com
 email:  hostmaster.dreamhost.com
 serial: 2009080200
 refresh:15642
 retry:  1800
 expire: 1814400
 minimum ttl:14400
14400s  (04:00:00)
 st3gaming.com   IN  MX

Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread Nephyrin Zey
Reading comprehension is low on this list. I'm emailing an abuse report 
to his host now. I also sent a update about my conversation with his 
host to this very thread. I *also also* mentioned his host was cet.com - 
he registered his domain through dreamhost, nothing more.

- Neph

On 01/25/2010 02:33 PM, Michael Secord wrote:
 It doesn't matter. You have the ISP's abuse contact info. That's who you
 want to have shut him down...domain name means jack in this case...

 --Original Message--
 Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
 servers
 From: Kevin b erkevin-b...@starmen.net
 To: Half-Life dedicated Win32 server mailing list
 hlds@list.valvesoftware.com
 Date: Mon, Jan 25, 2010 4:11:01 PM -0600

 Not really FTW.

 The illegal actor is hiding behind proxy registrations.

 On Mon, Jan 25, 2010 at 3:56 PM, Michael Secordgizmokid2...@gmail.comwrote:


  
 http://centralops.net/co FTW :)

 Address lookup
 canonical name  st3gaming.com.
 aliases
 addresses   208.113.196.53
 Domain Whois record

 Queried whois.internic.net with dom st3gaming.com...

 Domain Name: ST3GAMING.COM
 Registrar: NEW DREAM NETWORK, LLC
 Whois Server: whois.dreamhost.com
 Referral URL: http://www.dreamhost.com
 Name Server: NS1.DREAMHOST.COM
 Name Server: NS2.DREAMHOST.COM
 Name Server: NS3.DREAMHOST.COM
 Status: ok
 Updated Date: 19-nov-2009
 Creation Date: 18-nov-2008
 Expiration Date: 18-nov-2010

 Last update of whois database: Mon, 25 Jan 2010 21:54:18 UTC

 Queried whois.dreamhost.com with st3gaming.com...

 Legal Stuff:

 The information in DreamHost's whois database is to be used for
 informational purposes only, and to obtain information on a
 domain name registration. DreamHost does not guarantee its
 accuracy.

 You are not authorized to query or access DreamHost's whois
 database using high-volume, automated means without written
 permission from DreamHost.

 You are not authorized to query or access DreamHost's whois
 database in order to facilitate illegal activities, or to
 facilitate the use of unsolicited bulk email, telephone, or
 facsimile communications.

 You are not authorized to collect, repackage, or redistribute the
 information in DreamHost's whois database.

 DreamHost may, at its sole discretion, restrict your access to
 the whois database at any time, with or without notice. DreamHost
 may modify these Terms of Service at any time, with or without
 notice.

 +++

 Domain Name: st3gaming.com

 Registrant Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Administrative Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Technical Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Billing Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Record created on 2008-11-18 20:08:30.
 Record expires on 2010-11-18 20:08:30.

 Domain servers in listed order:

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com
 DreamHost whois server terms of service:
 http://whois.dreamhost.com/terms.html

 Get a 14-day free trial of unlimited everything from DreamHost Web Hosting.
 Includes A FREE domain registration! http://www.dreamhost.com/
 Use promotional code WHOIS for an additional $50 off any plan!


 Network Whois record

 Queried whois.arin.net with 208.113.196.53...

 OrgName:New Dream Network, LLC
 OrgID:  NDN
 Address:417 Associated Rd.
 Address:PMB #257
 City:   Brea
 StateProv:  CA
 PostalCode: 92821
 Country:US

 NetRange:   208.113.128.0 - 208.113.255.255
 CIDR:   208.113.128.0/17
 NetName:DREAMHOST-BLK6
 NetHandle:  NET-208-113-128-0-1
 Parent: NET-208-0-0-0-0
 NetType:Direct Allocation
 NameServer: NS1.DREAMHOST.COM
 NameServer: NS2.DREAMHOST.COM
 NameServer: NS3.DREAMHOST.COM
 Comment:
 RegDate:2006-04-12
 Updated:2007-11-01

 OrgAbuseHandle: DAT5-ARIN
 OrgAbuseName:   DreamHost Abuse Team
 OrgAbusePhone:  +1-714-706-4182
 OrgAbuseEmail:  ab...@dreamhost.com

 OrgNOCHandle: ZD69-ARIN
 OrgNOCName:   Network Operations
 OrgNOCPhone:  +1-714-706-4182
 OrgNOCEmail:  net...@dreamhost.com

 OrgTechHandle: MNA53-ARIN
 OrgTechName:   Nagel, Mark
 OrgTechPhone:  +1-714-706-4182
 OrgTechEmail:  mna47-a...@dreamhost.com

 # ARIN WHOIS database, last updated 2010

Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread Allan Button
Reading comprehension is low on this list.

I wonder why people don't jump to help people anymore.


-Original Message-
From: hlds-boun...@list.valvesoftware.com 
[mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Nephyrin Zey
Sent: January 25, 2010 6:04 PM
To: Half-Life dedicated Win32 server mailing list
Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

Reading comprehension is low on this list. I'm emailing an abuse report 
to his host now. I also sent a update about my conversation with his 
host to this very thread. I *also also* mentioned his host was cet.com - 
he registered his domain through dreamhost, nothing more.

- Neph

On 01/25/2010 02:33 PM, Michael Secord wrote:
 It doesn't matter. You have the ISP's abuse contact info. That's who you
 want to have shut him down...domain name means jack in this case...

 --Original Message--
 Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
 servers
 From: Kevin b erkevin-b...@starmen.net
 To: Half-Life dedicated Win32 server mailing list
 hlds@list.valvesoftware.com
 Date: Mon, Jan 25, 2010 4:11:01 PM -0600

 Not really FTW.

 The illegal actor is hiding behind proxy registrations.

 On Mon, Jan 25, 2010 at 3:56 PM, Michael Secordgizmokid2...@gmail.comwrote:


  
 http://centralops.net/co FTW :)

 Address lookup
 canonical name  st3gaming.com.
 aliases
 addresses   208.113.196.53
 Domain Whois record

 Queried whois.internic.net with dom st3gaming.com...

 Domain Name: ST3GAMING.COM
 Registrar: NEW DREAM NETWORK, LLC
 Whois Server: whois.dreamhost.com
 Referral URL: http://www.dreamhost.com
 Name Server: NS1.DREAMHOST.COM
 Name Server: NS2.DREAMHOST.COM
 Name Server: NS3.DREAMHOST.COM
 Status: ok
 Updated Date: 19-nov-2009
 Creation Date: 18-nov-2008
 Expiration Date: 18-nov-2010

 Last update of whois database: Mon, 25 Jan 2010 21:54:18 UTC

 Queried whois.dreamhost.com with st3gaming.com...

 Legal Stuff:

 The information in DreamHost's whois database is to be used for
 informational purposes only, and to obtain information on a
 domain name registration. DreamHost does not guarantee its
 accuracy.

 You are not authorized to query or access DreamHost's whois
 database using high-volume, automated means without written
 permission from DreamHost.

 You are not authorized to query or access DreamHost's whois
 database in order to facilitate illegal activities, or to
 facilitate the use of unsolicited bulk email, telephone, or
 facsimile communications.

 You are not authorized to collect, repackage, or redistribute the
 information in DreamHost's whois database.

 DreamHost may, at its sole discretion, restrict your access to
 the whois database at any time, with or without notice. DreamHost
 may modify these Terms of Service at any time, with or without
 notice.

 +++

 Domain Name: st3gaming.com

 Registrant Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Administrative Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Technical Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Billing Contact:
st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
A Happy DreamHost Customer
417 Associated Rd #324
Brea, CA 92821
US
+1.2139471032

 Record created on 2008-11-18 20:08:30.
 Record expires on 2010-11-18 20:08:30.

 Domain servers in listed order:

ns1.dreamhost.com
ns2.dreamhost.com
ns3.dreamhost.com
 DreamHost whois server terms of service:
 http://whois.dreamhost.com/terms.html

 Get a 14-day free trial of unlimited everything from DreamHost Web Hosting.
 Includes A FREE domain registration! http://www.dreamhost.com/
 Use promotional code WHOIS for an additional $50 off any plan!


 Network Whois record

 Queried whois.arin.net with 208.113.196.53...

 OrgName:New Dream Network, LLC
 OrgID:  NDN
 Address:417 Associated Rd.
 Address:PMB #257
 City:   Brea
 StateProv:  CA
 PostalCode: 92821
 Country:US

 NetRange:   208.113.128.0 - 208.113.255.255
 CIDR:   208.113.128.0/17
 NetName:DREAMHOST-BLK6
 NetHandle:  NET-208-113-128-0-1
 Parent: NET-208-0-0-0-0
 NetType:Direct Allocation
 NameServer: NS1.DREAMHOST.COM
 NameServer: NS2.DREAMHOST.COM
 NameServer: NS3.DREAMHOST.COM
 Comment:
 RegDate:2006-04-12
 Updated:2007-11-01

 OrgAbuseHandle: DAT5-ARIN

Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-25 Thread Michael Secord
Neph - if you were referring to me, I read exactly what happened, at the 
start of this thread you'll see someone asked for the abuse/contact 
info, so I just provided it. As well as a tool to anyone else who may be 
hit by this. Information is power.

 Original Message  
Subject: Re: [hlds] ST3Gaming.com using100mbit connection toDoS rival 
servers
From: Allan Button abut...@netaccess.ca
To: Half-Life dedicated Win32 server mailing list 
hlds@list.valvesoftware.com
Date: 1/25/2010 6:34 PM

 Reading comprehension is low on this list.

 I wonder why people don't jump to help people anymore.


 -Original Message-
 From: hlds-boun...@list.valvesoftware.com 
 [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Nephyrin Zey
 Sent: January 25, 2010 6:04 PM
 To: Half-Life dedicated Win32 server mailing list
 Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

 Reading comprehension is low on this list. I'm emailing an abuse report
 to his host now. I also sent a update about my conversation with his
 host to this very thread. I *also also* mentioned his host was cet.com -
 he registered his domain through dreamhost, nothing more.

 - Neph

 On 01/25/2010 02:33 PM, Michael Secord wrote:
 It doesn't matter. You have the ISP's abuse contact info. That's who you
 want to have shut him down...domain name means jack in this case...

 --Original Message--
 Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
 servers
 From: Kevin b erkevin-b...@starmen.net
 To: Half-Life dedicated Win32 server mailing list
 hlds@list.valvesoftware.com
 Date: Mon, Jan 25, 2010 4:11:01 PM -0600

 Not really FTW.

 The illegal actor is hiding behind proxy registrations.

 On Mon, Jan 25, 2010 at 3:56 PM, Michael 
 Secordgizmokid2...@gmail.comwrote:



 http://centralops.net/co FTW :)

 Address lookup
 canonical name  st3gaming.com.
 aliases
 addresses   208.113.196.53
 Domain Whois record

 Queried whois.internic.net with dom st3gaming.com...

  Domain Name: ST3GAMING.COM
  Registrar: NEW DREAM NETWORK, LLC
  Whois Server: whois.dreamhost.com
  Referral URL: http://www.dreamhost.com
  Name Server: NS1.DREAMHOST.COM
  Name Server: NS2.DREAMHOST.COM
  Name Server: NS3.DREAMHOST.COM
  Status: ok
  Updated Date: 19-nov-2009
  Creation Date: 18-nov-2008
  Expiration Date: 18-nov-2010

   Last update of whois database: Mon, 25 Jan 2010 21:54:18 UTC

 Queried whois.dreamhost.com with st3gaming.com...

 Legal Stuff:

 The information in DreamHost's whois database is to be used for
 informational purposes only, and to obtain information on a
 domain name registration. DreamHost does not guarantee its
 accuracy.

 You are not authorized to query or access DreamHost's whois
 database using high-volume, automated means without written
 permission from DreamHost.

 You are not authorized to query or access DreamHost's whois
 database in order to facilitate illegal activities, or to
 facilitate the use of unsolicited bulk email, telephone, or
 facsimile communications.

 You are not authorized to collect, repackage, or redistribute the
 information in DreamHost's whois database.

 DreamHost may, at its sole discretion, restrict your access to
 the whois database at any time, with or without notice. DreamHost
 may modify these Terms of Service at any time, with or without
 notice.

 +++

  Domain Name: st3gaming.com

  Registrant Contact:
 st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
 A Happy DreamHost Customer
 417 Associated Rd #324
 Brea, CA 92821
 US
 +1.2139471032

  Administrative Contact:
 st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
 A Happy DreamHost Customer
 417 Associated Rd #324
 Brea, CA 92821
 US
 +1.2139471032

  Technical Contact:
 st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
 A Happy DreamHost Customer
 417 Associated Rd #324
 Brea, CA 92821
 US
 +1.2139471032

  Billing Contact:
 st3gaming.com Private Registrant
 st3gaming@proxy.dreamhost.com
 A Happy DreamHost Customer
 417 Associated Rd #324
 Brea, CA 92821
 US
 +1.2139471032

  Record created on 2008-11-18 20:08:30.
  Record expires on 2010-11-18 20:08:30.

  Domain servers in listed order:

 ns1.dreamhost.com
 ns2.dreamhost.com
 ns3.dreamhost.com
 DreamHost whois server terms of service:
 http://whois.dreamhost.com/terms.html

 Get a 14-day free trial of unlimited everything from DreamHost Web Hosting.
 Includes A FREE domain registration! http://www.dreamhost.com/
 Use promotional code WHOIS for an additional $50 off any plan!


 Network Whois record

 Queried whois.arin.net

Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival servers

2010-01-24 Thread Mike Stiehm
We just got hit by this guy..

-Original Message-
From: hlds-boun...@list.valvesoftware.com
[mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of John
Sent: Sunday, January 24, 2010 10:46 PM
To: Half-Life dedicated Win32 server mailing list
Subject: Re: [hlds] ST3Gaming.com using100mbit connection to DoS rival
servers

You mean an ACL.

Routing is destination-based. A null-route would send traffic _to_ that 
attacking IP to the null device, but it wouldn't prevent incoming traffic 
_from_ that IP from coming to him over the pipe.  He could ask for a 
null-route of his server IP to keep traffic off the circuit, but it doesn't 
sound like that's what he's looking for.

Some NSPs/ISPs won't apply ACLs, but will apply null-routes (to your IPs 
only). The better ones will do both.

You are right that he should talk to his provider about this, and hope that 
his provider will be willing to throw up an ACL. Blocking an attack that 
floods the circuit is entirely in their hands.

-John

--
From: DLinkOZ dlin...@fragonline.net
Sent: Sunday, January 24, 2010 5:49 PM
To: 'Half-Life dedicated Win32 server mailing list' 
hlds@list.valvesoftware.com
Subject: Re: [hlds] ST3Gaming.com using100mbit  connection  to  DoS
rivalservers Right, so call your provider, ask to put in the null route and
enjoy your
 weekend.  I honestly did not think I'd have to go into such obvious detail
 to make a simple statement.  If you aren't in a position to perform such a
 task, then you make a phone call.  I suppose I assumed that was obviously
 simple and didn't need explanation...



 -Original Message-
 From: hlds-boun...@list.valvesoftware.com
 [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Blood Letter
 Sent: Sunday, January 24, 2010 2:42 PM
 To: hlds@list.valvesoftware.com
 Subject: Re: [hlds] ST3Gaming.com using 100mbit connection to DoS rival
 servers


 Uh, null routing is simply a routing rule that indicates that packet 
 should
 be dropped without any further processing.

 The suggestion was to  just null route the source and enjoy the weekend.
 You can't do it at the ISP level unless you talk to your ISP.


 From: dlin...@fragonline.net
 To: hlds@list.valvesoftware.com
 Date: Sun, 24 Jan 2010 14:28:56 -0600
 Subject: Re: [hlds] ST3Gaming.com using 100mbit connection to DoS
 rival servers

 Seriously?  Do you not know what null routing is?  It's exactly what you
 said later in your email.  Your bandwidth provider routes that source
 straight to the nowhere.  Not sure why you think it's done on the server.




 -Original Message-
 From: hlds-boun...@list.valvesoftware.com
 [mailto:hlds-boun...@list.valvesoftware.com] On Behalf Of Blood Letter
 Sent: Sunday, January 24, 2010 2:08 PM
 To: hlds@list.valvesoftware.com
 Subject: Re: [hlds] ST3Gaming.com using 100mbit connection to DoS rival
 servers


 Uh, because the packets come over the wire and your NIC has to handle 
 them
 all regardless of HOW you handle them?

 You can NOT solve a DoS attack through ANY use of firewalling or routing
 at
 the target end.
 You MUST cut the attack off as close to the source as possible.

 An attack like the one described here is simple enough to fend off 
 because
 it's coming from a single source over a relatively low bandwidth pipe.
 Your ISP should be able to block it at their border routers and the
 constant
 knocking shouldn't put any load on their equipment.
 If it continues, and if they get around to it, they can then report the
 activity to their peering partners (other ISPs) to get them to block the
 traffic at their end.  If the behavior persists, this continues until
 eventually the source is cut off.

 A distributed attack is much harder to cut off, because it has many
 sources.
 A distributed attack can bring down major connections.



  From: dlin...@fragonline.net
  To: hlds@list.valvesoftware.com
  Date: Sun, 24 Jan 2010 13:43:57 -0600
  Subject: Re: [hlds] ST3Gaming.com using 100mbit connection to DoS
 rival servers
 
  Why not just null route the source and enjoy the weekend?

 _
 Hotmail: Powerful Free email with security by Microsoft.
 http://clk.atdmt.com/GBL/go/196390710/direct/01/
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds




 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http://list.valvesoftware.com/mailman/listinfo/hlds

 _
 Hotmail: Free, trusted and rich email service.
 http://clk.atdmt.com/GBL/go/196390708/direct/01/
 ___
 To unsubscribe, edit your list preferences, or view the list archives,
 please visit:
 http