Recent Abuse on JJ2

[Nimrod]

Some jazz'ers including Chiyu pointed me to some of the recent abuse on JJ2.

Although as a List Server Admin its not my job to police whats going on in servers, I did set up a server with some monitoring tools open to catch them in the act. (and used some Protection tools to protect myself from there attack)

Chiyu suggested that I annoyed people a tad in my server when they became threatening. One user with the nickname "Orbitz" came in and saying "Console sux" inregards to the UT announcer tool I was using on my server and I kicked him, he then came back and said "go ahead, ban me, your regret it" seeing the opportunity I did just that. About 3 minutes later Apprehend went mad with loads of joins, My anti-rename script went mad reporting tons of renaming attempts. It just kept going and going.

I then took some screenshots of the IP in the apprehend log showing the attack. Later that day Orbitz tried to join my server (and finding himself banned) and then launched another attack. This time I could see his IP and the IP of the attack next to eachother and it was an exact match.

Tons of attacks:
http://nimmy-online.com/jj2attack/Mass%20Attack.jpg

An attack, with his join request just above:
http://nimmy-online.com/jj2attack/Match.jpg

As you can see, this user is a threat to JJ2. I would suggest all users add him to there JJ2 Banlist. Also as added protection it might be in your best interest to add him to any IP Ban list you have on your Firewall/Router.

I will be in contact with other list server admins to see if we can do anything to help stop him, maybe by disallowing him access to the lists we can slow down his attacks (maybe).

If you wish to keep him banned from your servers from his current IP for good, you can download this "banlist" file and unzip the contents into your JJ2 folder:
http://nimmy-online.com/jj2attack/Banlist.zip

I will continue to try and find out if theres any other people actively doing this, abuse like this is just destroying the fun of playing jazz 2 online.

[snzspeed]

Cant you just ban him from serverlists?

[Nimrod]

Cant you just ban him from serverlists?

As much as I'd like to, when the ability for an admin to "ban" users from the lists was discussed, it was met by a large majority who didnt like an admin to have that much "power"

It was due to this, that the only banning feature in the list servers was the ability to ban someone from hosting.

I could maybe place the IP in the "Global Digiex Blacklist" which would block there IP from accessing any resource at Digiex (which includes my list). That wouldn't ban them from using any other list that actively mirrors mine (Contrabandent, Madskills etc). It would be a big effort for every list server admin to find a way to filter IP's and ban them.

Although that may not even be enough, they could just use proxies. change there IP, or use GIP Scripts to get past the ban. The best method is if people actually hosting games banned trouble makers. I've banned this guy from my games.

[Stickgo]

I got attacked by this person about 5 times yesterday when i was hosting. Even when I had a passworded server up, he still crashed it. :mad:

[minmay]

Weird. He's never done anything to me.

[Sonyk]

You left JJ2.

[White Rabbit]

I blame all this on a simple misunderstanding concerning the 'Console'. ;P

[Chiyu]

Hmm a global banlist with the IPs of trouble-making people would be nice Nimrod, if you give me the IPs of persistent trouble-makers, I'll surely trust you and add them to my banlist.

[minmay]

You left JJ2.
WHO CARES.

[FoxBlitzz]

Once Orbitz showed up in my server as a no-namer. I kicked him for that. I then banned him, and he started crashing my server whenever I put it up. It was rather annoying. I found him in another server and he threatened to "crash my server forever" if I banned him again. Obviously, when I hosted again, he didn't give me a chance and started crashing me over and over again. After I stopped hosting, he went on a frenzy crashing other people's servers too.

[Sonyk]

WHO CARES.
I DO

However, on a serious note, ever since this was posted, Adeel/Orbitz/Who-Knows-What has been constantly renaming and DoS attack any and all servers up (including private/passworded ones). As awful as it is to say it, there is no way he will learn. Something has to be done about it, or he will destroy the community. Even if stopping him is somehow banning him completely from the lists.

He also seems to be impersonating me and Black Ninja. Why? Go figure.

[snzspeed]

heh he cant learn .. just ban him from the lsit forever :) problem solved

[White Rabbit]

Black Ninja now has his own customized anti-Adeel server. :nod:

[Vegito]

Actually..
I was hosting a duel just 30 minuts ago..
then adeel came in.. and.. renamed me.
changed char, changed like about EVERYTHING..
Chiyu and Titan couldnt even take flag anymore.. :|

(It was a passworded server with player limit 3)

[Torkell]

Some info about that IP (24.114.132.155), gathered with Sam Spade:

### dns 24.114.132.155
nslookup 24.114.132.155
Canonical name: CPE0007e984b612-CM013349904352.cpe.net.cable.rogers.com
Addresses:
24.114.132.155

### IP block 24.114.132.155
Trying 24.114.132.155 at ARIN
Trying 24.114.132 at ARIN
Rogers Cable Inc. ROGERS-CAB-2 (NET-24-114-0-0-1)
24.114.0.0 - 24.114.255.255
Rogers Cable Inc. Ym ON-ROG-YM-29 (NET-24-114-128-0-1)
24.114.128.0 - 24.114.191.255

# ARIN WHOIS database, last updated 2005-07-14 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
Host wasn't responding to pings when I did the lookups. Looks like he's on a cable modem (possibly dynamic IP), and he uses Rogers as an ISP.

[EvilMike]

This guy is annoying, but try not to let it affect you too badly. People like him feed off of attention and people being angry about what he's doing. Just don't take him TOO seriously, and he'll probably get bored within 3 days.

[Black Ninja]

I've been having fun with my anti-Adeel server. It has nice bots and stuff that say polite things about him.

Anyawy, Mike's right. Just ignore him and maybe he'll go away.

[Sonyk]

That theory would be good if it hadn't been proven wrong before. We ignored him when he was Adeel. He kept at it and one day had a laser spree, which didn't last too long. Eventually he went away, but came back as Orbitz. Same thing seems to be happening here. Something in his head doesn't seem to click, and he doesn't learn.

[Xion]

Whoever this peron is, they're canadian.

If any canadian people want to go and beat them up, I've got their location

I think.

I got a lat and long of their computer, so we may be able to find this person.

[MSB3000]

what, may i ask, have you got against Canada?

[MaGoo]

Xion was just pointing something out. And I'll beat him up for you.

[Iam Canadian]

As my username may or may not suggest, I am Canadian. I can help you.
*Gets the brass knuckles*

[ThunderPX]

Perhaps it was him as well when I was duelling against Danyjel. He was suddenly renamed and turned into a seeker box.

[Mercurio]

Canadian? Hmmm I wonder...

[Anubis]

You forgot to mention he joins servers with player number 86!!!

[Birdie]

is there a place to get comprehend jj2?
now iam scared of haveing this happen to me

[FoxBlitzz]

I tried Apprehend JJ2 once but it crashed whenever I chose a connection type. Even when I had a game running. Is there something else I have to do to get it running? :-/

[Sonyk]

* ApprehendJJ2.exe requires the installation of the WinPCap driver. This is
available from http://winpcap.polito.it/install/default.htm
‏‏‏

[Lark]

The "leave him alone and he'll leave you alone" strategy is working for me so far.

[Tubz]

That guy has problems. :(

[Anubis]

That orbitz is getting annoying. He joins and leaves a server every second with name we all suck. Or join with 24 players all called 123456. He can also talk instead of other people. I was playing in a server and in the chatbox I saw Balrog[8D]: hi many times, I knew I didn't say this! He can rename other players too. He can crash servers. He can close your JJ2. Plz someone ban him! And btw, I have a plan of getting him a keylogger ;)

[ShadeJackrabbit]

If he's a hacker he won't stop. I saw like, 3 movies on that sort of thing, (an 11 year old crashed the Bank of Congresses computer), and I saw a documentary on hackers where a guy went under cover as a hacker. BEWARE!! They do not stop until you give them full control, kill your own honour, and begbegbeg until they stop. That is, unless he has a motive other than a feeling of power.

[Sonyk]

The thing is, those were movies. Not real.

However, he does often boast about the large amounts of cheating progs he has. He once said to some people in a server "Don't mess with me, I have 32 cheating programs." Quite frankly, I'd think the person who boasts about that is a mind bent on destruction.

[ShadeJackrabbit]

Uhmm... the movies were based on reality.

[Sonyk]

But this is a 10 year old kid we're talking about, with little to no knowledge on actual hacking, just a lot of cheating programs.

[Black Ninja]

Don't mistake this idiot for an actual hacker. He's just some stup with a renaming program. He probably does his "DoS attacks" by just renaming so rapidly JJ2 can't keep up with it.

Anyway, my point is that he's not really a threat unless he grows a brain large enough to learn to make his own programs/find his own packets. THEN we should worry.

[fiendmm++]

Some jazz'ers including Chiyu pointed me to some of the recent abuse on JJ2.

Although as a List Server Admin its not my job to police whats going on in servers, I did set up a server with some monitoring tools open to catch them in the act. (and used some Protection tools to protect myself from there attack)

Chiyu suggested that I annoyed people a tad in my server when they became threatening. One user with the nickname "Orbitz" came in and saying "Console sux" inregards to the UT announcer tool I was using on my server and I kicked him, he then came back and said "go ahead, ban me, your regret it" seeing the opportunity I did just that. About 3 minutes later Apprehend went mad with loads of joins, My anti-rename script went mad reporting tons of renaming attempts. It just kept going and going.

I then took some screenshots of the IP in the apprehend log showing the attack. Later that day Orbitz tried to join my server (and finding himself banned) and then launched another attack. This time I could see his IP and the IP of the attack next to eachother and it was an exact match.

Tons of attacks:
http://nimmy-online.com/jj2attack/Mass%20Attack.jpg

An attack, with his join request just above:
http://nimmy-online.com/jj2attack/Match.jpg

As you can see, this user is a threat to JJ2. I would suggest all users add him to there JJ2 Banlist. Also as added protection it might be in your best interest to add him to any IP Ban list you have on your Firewall/Router.

I will be in contact with other list server admins to see if we can do anything to help stop him, maybe by disallowing him access to the lists we can slow down his attacks (maybe).

If you wish to keep him banned from your servers from his current IP for good, you can download this "banlist" file and unzip the contents into your JJ2 folder:
http://nimmy-online.com/jj2attack/Banlist.zip

I will continue to try and find out if theres any other people actively doing this, abuse like this is just destroying the fun of playing jazz 2 online.
If only the J2HG didn't release that dos flood progie.... tsk tsk

[Black Ninja]

The J2HG? We released no such program.

[ShadeJackrabbit]

Wha? So there is still somebody in the J2HG? What happened to the website?

[Nimrod]

The J2HG? We released no such program.

Actually one of your members did.

I know the tool used, but wont speak much of it for obvious reasons.



In regards to the List Server Admins approach to this situation, there is an announcement at:
http://www.livejournal.com/community/jj2listservers/

[Newspaz]

Actually one of your members did.

I know the tool used, but wont speak much of it for obvious reasons.



In regards to the List Server Admins approach to this situation, there is an announcement at:
http://www.livejournal.com/community/jj2listservers/

We consider releasing something different than giving it to an individual for showing purposes. We can't help it if someone misuses our trust.

[ShadeJackrabbit]

Two people? Where is the website?!

[Black Ninja]

Actually, I think J2HG doesn't really have a website anymore. If it does, the members are jerks for not telling me (a fellow member) where it is. ;p

[Newspaz]

We lost it. Sadly.

[ShadeJackrabbit]

Is anybody gonna make a new one?

[R3ptile]

I added Adeel\Orbitz\Goku's IP to my banlist.lst but it didn't stop him. What shall I do now?? :confused: :confused:

[Leporidae]

once I was on a sever with this guy that made us guess his name or he will keep bothering us. He turn out to be Sonyk, then the person running the sever started players joining and leaving with names that insault Sonyk and the sever keeps stoping
and going again and again! it was really anoying! I don't remeber the name of the person running the sever, maby Sonyk knows.

[Sonyk]

Yes, I was doing that to see if I could bug him enough so he would stop using the colors that were essentially a copy of mine. The one hosting the server was Adeel/Goku/Orbitz/Whoknows.

[Nimrod]

You've all be glad to know I've made a method of protection from the attacks coming from Orbitz.

It is by use of packet monitoring and filtering. It looks out for the crash packet used by him, then drops it before it reaches your JJ2.

But ive spent this evening doing it, and its now 4am, I'm in need of some sleep. So i will prepare it for you all tomorrow morning and post it up say by the afternoon. Stay tuned.

[Fawriel]

*hugs* Awesome.

[Black Ninja]

Very rux, Nimrod. Take the rest of the week off. ;p

[Ragnarok!]

I hate these (-)s that think it is fun to laser servers, hah, they need to get a life. Maybe someone should laser their servers.

[Torkell]

You've all be glad to know I've made a method of protection from the attacks coming from Orbitz.

It is by use of packet monitoring and filtering. It looks out for the crash packet used by him, then drops it before it reaches your JJ2.

But ive spent this evening doing it, and its now 4am, I'm in need of some sleep. So i will prepare it for you all tomorrow morning and post it up say by the afternoon. Stay tuned.
Is it possible to make the JJ2 exe host a game on custom ports? But report a different port to the listserver?

[Nimrod]

JJ2 can report a different port to the list server, and the list will accept it.

But no idea how you go around telling JJ2 to host on a different port :\
Maybe hexediting 10052 to something else?

[Grytolle]

Just host unlisted...

[Nimrod]

Well, there you go. I've now finished the protection and made it public.

You can access it at for now:
http://nimmy-online.com/jj2networkfilter/
(maybe at a later date, it will be hosted elsewhere)

I intend to make regular updates with new filters by me, and other people including Overlord.

The idea of this project is to help protect the insecure jj2 from the abuse it suffers. By blocking popular methods of crashing/damaging a server.

Hopefully version 0.1 of the filter will help protect you from the crashing abuse going on, on jj2 at present.
I still recommend keeping trouble makers banned from your jj2 server using banlist, as banned users cannot do cheap tricks like renaming and mass join/quit flood. This filter, combined with a ban will stop the abuse. (A banned user can still use "ASD" to crash your server, as reported by Reptile, hence the use of the filter is also required)

[Orbitz]

That orbitz is getting annoying. He joins and leaves a server every second with name we all suck. Or join with 24 players all called 123456. He can also talk instead of other people. I was playing in a server and in the chatbox I saw Balrog[8D]: hi many times, I knew I didn't say this! He can rename other players too. He can crash servers. He can close your JJ2. Plz someone ban him! And btw, I have a plan of getting him a keylogger ;)

blah first of all i can talk through others cuz i was a no name =P
secound i rename and crash with ASD a program i think made by eagal this is all in trainer pack witch i got from songoku ok i won't do this pandamonium any more it has hurt the community i am sorry =( i won't do it again and nimrod plz disable the get list server option in ASD it is making me temtated to press it =( anyway what i am saying is there is no need for all this now i won't do it again
sorry for hurting the community.

[Nimrod]

anyway what i am saying is there is no need for all this now i won't do it again
sorry for hurting the community.

You said that like two weeks ago, then I found you were still doing it.

Then to top it off, about an hour or two ago, you were launching another attack on my server. But unluckily for you I was running my new ASD protection.


I'm sorry, but you've said your sorry and would stop so many times to so many people, I cant help but not believe you.

[Sonyk]

No, I don't think this sorry is going to get you far. After the constant lasers, DoS attacks, renamings, ASD crashes... What's more, you've tried the whole "I'm sorry, won't do it again" approach already. Most people forgave you once. After going through and doing it twice more, do you really think people are going to forgive you? And what's more, you keep on blaming your attacks on others. At least three times I've seen you blame me for doing things which I don't even have access to. In my personal opinion, you're acting extrememly immaturely, and people like you take this kind of thing for granted, as if you keep this behavior up you won't get far in life, AT ALL.

But moving away from that rant, I do not forgive you, nor will I ever. Personally, I'm rather upset there's little we can do to keep you from playing.

[D4shRed]

Can't we report him to his ISP, seeing as we have his IP?

[White Rabbit]

We have to first find out what his ISP is, and their policy. They may not kick out users who cheat in multiplayer.

Oh, and I don't think we should associate what Orbitz does here with what he could do in real life. This is the internet, and I think we should be mature enough to accept the kind of 'freedom' ppl enjoy on it.

[cooba]

anyway what i am saying is there is no need for all this now i won't do it againThe next day he floods my server.

[Trafton]

Orbitz, normally I support second chances, but the fact that you apologized and did it again immediately thereafter suggests your only function in this community is to cause harm. Punishment is not just to stop people from doing it again, but to punish them, as well.

You broke the law. If I was Nimrod, I would get your account disconnected.

[Bas]

Well, there you go. I've now finished the protection and made it public.

You can access it at for now:
http://nimmy-online.com/jj2networkfilter/
(maybe at a later date, it will be hosted elsewhere)

I intend to make regular updates with new filters by me, and other people including Overlord.

The idea of this project is to help protect the insecure jj2 from the abuse it suffers. By blocking popular methods of crashing/damaging a server.

Hopefully version 0.1 of the filter will help protect you from the crashing abuse going on, on jj2 at present.
I still recommend keeping trouble makers banned from your jj2 server using banlist, as banned users cannot do cheap tricks like renaming and mass join/quit flood. This filter, combined with a ban will stop the abuse. (A banned user can still use "ASD" to crash your server, as reported by Reptile, hence the use of the filter is also required)


Erm, WPESpy.dll in WPE is a Torjan Horse, according to Norton :lol:

[Anubis]

Good news: I think I got Orbitz a keylogger (password stealer)
Bad news: The hackers who made it only use it for RuneScape.

[Torkell]

Erm, WPESpy.dll in WPE is a Torjan Horse, according to Norton :lol:
I came across this too. It looks like WPESpy.dll itself is safe, but it's commonly used as part of keyloggers. Norton actually lists it as a "Hacktool".

[Nimrod]

Erm, WPESpy.dll in WPE is a Torjan Horse, according to Norton :lol:

I'd hardly call a "Hacktool" a Trojan Horse.

Making claims that a protection tool is a virus isnt exactly gonna help take up of it, meaning servers will be exposed. So Good job.

[Torkell]

I'd hardly call a "Hacktool" a Trojan Horse.

Making claims that a protection tool is a virus isnt exactly gonna help take up of it, meaning servers will be exposed. So Good job.

It looks like WPESpy.dll itself is safe, but it's commonly used as part of keyloggers.

Okay, technicallt it's part of packet sniffers and not keyloggers, but it still has similar capabilites and to be listed by Norton implies it was used as part of spyware or a trojan of some sort. It also appears to be recommended for cheating in network games.

[!Tman!]

Alright I know we are all getting attacked but I mean come on! Jazz is old!! people can hack it so easily now and plus to them thats just one step farther to take jazz just to keep them interested. Im like all u guyz I cant stand having my server crashed or renamers in it or crap like that. Just people arnt going to stop inless jazz is revised. Untill epic lets out the source code stuff we are basicly screwed....

[Sonyk]

Or, unless we use the filter Nimrod made. Which BLOCKS these attacks.

[White Rabbit]

I was hacked only yesterday, but it was kinda fun. The person only made me say a few lines, but apart from that, it was completely harmless. :lol:

[BattleSpaz]

this what i say:
http://www.kerrolisaa.com/kuvat/Bannia.JPG

[R3ptile]

.. I'm just sick of that guy.

[Puffie40]

I hate players that trash multiplayer games "For Fun" This is exactly what I was ranting about in this thread (http://www.jazz2online.com/jcf/showthread.php?t=12093)

I say we rise up against this orbitz/whoever and kick him the HELL out of the jj2 community!

[Jerrythabest]

If this is a place to post recent abuse, then ill tell ya this what happened almost 2 minutes ago:

Someone joined with the name LET ME IN, and then went out and in and out just like a flashing sign. The text was something like this:

LET ME IN
OR I WILL CRASH
I AM WARNING
I AM WARNING YOU
UNBAN ME NOW

But, I dont have anyone banned. After about 10 seconds, my JJ2 closed. Server crashed.

[Bjossi]

Have you guys given the law a thought? Is there any way you could have the right to get him arrested? I doubt so, but who knows?, the legal system isn´t perfect.

[Stijn]

Jerry, your JJ2 closed automatically? It didn't crash, but just suddenly closed without you touching it?

[Jerrythabest]

yea, I never have such things, but now, after someone said he crashes server, my JJ2 closed. There might be an error message, cuz I was chatting and might hit Return just when the error popped up... I think i might saw something flash, but I am not sure about that, but if I was right, that was the error message...