JJ2 Spambots
 

There's this stupid bot that might have been joining your server recently that sends 5-line announcements, and might lag a server if it has enough players on it.

For example:

-----NEWS ANNOUNCEMENT---
Mike, you n00b, Wark did not spam your server!
BUMGARDNER POWER! - 1-800-RYLHELP
Got some jj2 news? Email lastexyle@gmail.com!
-----(GlobalAnnounce v1.1)-----
To opt out add NN to the start of your server name

There are two ways of getting rid of this announcement system:

-by adding NN to the start of your server name
-by adding 70.84.143.196 to the banlist

If you too have experienced this, let me know.

And to whoever is doing this, please stop it.

I think it would be rather useful but only when it is called instead of being sent out randomly.
Plus is adding NN to your servername really that bad?

Yes, it is.

NN does not go with 'Rabbits are White'. ;P I prefer adding the IP to the banlist.

Banning the IP sounds like a nicer solution.

This is a really cool idea and stuff, but please post something more informative than "Mike, you n00b, Wark did not spam your server!". ;P

If no-one asked for it, it's by definition spam. It should not be an opt-out but an opt-in system.

I have recently designed a new WPE filter that will block those undesired announcements and I'll have to talk to Nimrod about updating his previous net filter. On a sub related subject: I have not yet tested this theory, but I believe that adding the IP to the jj2 banlist will not stop the announcements because of the bad way JJ2 handles packets. Some other programs (not telling the names) use this exploit as well to bypass IP bans.

The program being used is a program Ahat is creating for me.

Although I do not agree with his current use, the idea of it was to use it on Contrabandent when its online (which it hasnt been for days?) just a little one or two lines saying "Warning, your using a list server no longer on the network, please update at etc"

Ill try and speak with him and ask him to stop it.

How odd.

This 'announcement device' is no doubt the most stupid tool for JJ2 ever. I hate it and I dont care what it is supposed to be used for, just stop it. Thanks.

Stop this (-) man, it really sux and its very IERITATING

Just spam the gmail address, that's what it's for *shot*

No seriously, ahat is a prick if he keeps spamming people's servers.

Turns out its not ahat.... Someone needs to investigate.

Uhh oh. :|
We must counter this by giving everyone the program, so the "few" that have it will no longer have reason to abuse it. ;D

That really helped for other cheating tools did it not :P

That's not the only program out there.

Beware of ahat's chat hacker, which can bypass private games and manipulate the chat engines.

EDIT:

If you wish to block the online version of the chat hacker, add 71.210.6.252 to the banlist.

Adding it to the banlist doesn't quite work. Peerguardian should work, however (although I haven't tested it). This will also block ahat from joining your server, but as far as I'm concerned that's an added bonus.

This program is completely idiotic in the way it is being used. While I can see potential good uses for it, right now it's just a piece of annoying crap. I fully endorse putting a stop to it by any means possible.

Edit: Seems this guy has a dynamic IP. Perhaps just blocking the entire IP range for newfoundland (I believe that's where he lives) will suffice.

nl = Netherlands

I made a jj2 badip list for peerguardian which is an update to the original one on nimmy's website.

Write to file as follows:
The first one will block the online chat hacker.
The second one should block the current jj2 proxy in use.
The third one will block direct connections.

Please run this and tell me if it works.

NL can also stand for Newfoundland and Labrador, which is a province of canada. I am almost certain that ahat is a canadian.

NN means "NOMEN NESCIO"? Like you are telling the spammer not to remember the name of your sever and skip it? :eek:

FQuist: I don't see how this could be considered a cheatingtool, it doesn't give you an advantage in game. (Unless you are playing 1on2 and you wanna spam so much their teamchat is drowned, i.e...)

Maybe I should try and push it through the list server council to see if an ban can be enacted?

That would properly end up with a long winded public vote all over again......

Don't be so eager to ban... Just use the filter instead ;o I sort of like the announce-system, since it is now giving jj2 warez-links, which is good!

Lol Gry. ;D Excellent tactic. }>

Yeah, spamming the warez url to people who already have jj2 is very useful.

Grytolle: I was referring to how spreading cheat tools did not make them be used less, I did not say this was a cheating tool.

Everybody seems to be pointing to Ahat in regards to the spam, but is everyone sure it is him? He's the programs creator I think, but is he the one spamming? Nimrod says he's not.

Hehe, good one :) But, this way they can get all versions of JJ2, not to mention they can give the URL to friends... Not that I like warez all that much when it comes to other games... But jj2 could really use more players...

Ok, I admit... I deliberately misunderstood you. ;P However, you used the word "other (cheatingtools)" which sort of means you considered this program to be a cheating tool too.

Not that I see any reason to trust Nimmy's word... But I don't think ahat is necessarily the one doing this either. I mean, there are more people that could program a thing like this. Also, I bet ahat gave this to someone for testing or so, meaning someone else could aswell be using his tool for doing this. Blaming ahat would be like blaming er... Spazzyman(?-I heard someone telling me the name of the creator once) for what Orbitz does, just because he programmed that crasher-tool. :P

Here's a piece of pseudo-code for blocking this.

this code will not compile, as it isn't a real block of code.

What it will do (once coded propertly) will get the name, IP and version of that user. If a proxy is detected or a null name is sent, it will kill that person.

Actually, 6-5 months ago i saw a bot like this, cant really remember who made/did it.. but i think it was Eagle.

Actually it wouldn't work. I did some packet sniffing and the bot doesn't send a null name, it just doesn't send the join packet at all, normally the JJ2 client sends a connect request, gets a response from the server, and then the client sends the player info and then starts with normal game activity. If I'm not mistaken, the bot ONLY sends the connect packet and not the player info which is why you don't see a "so and so" joined the game. Either way, the bot creator would probably just add the player info if it got blocked, tere are already programs out there that do that.

Personally I'm all for this "spam" though, spreading JJ2 will certainly help the game.

This stupid bot doesnt spread JJ2. The JJ2 warez link is sent to people who already have JJ2. No spreading at all. Thats why it must stop. It hasnt a relevant function. Thanks for stopping it. Now stop it.

Well, it spreads JJ2 TSF to 1.23 players. ;P

I am waiting for a link to get Christmas Chronicles.

ED2k link, magnet link or ares hashlink? lol:P And I spoke Ahat today, he said he didnt do it. So shame to all of you.

the cracco clan link had Christmas chronicles I think. (Warez) Gotta love the free advertising :P

[Warez edit. Do not spread warez in any way on this forum. You get a subwarning. - FQuist]

Haha PWNED!
[IMG]http://www.teammelli.com/Gallery/pics/AsianGamesBusan/Ag-Japan-Yellow%20card-Kazemian.jpg[/IMG]

I have identified the person behind the random spamming attacks.

The culprit is known as Wark, aka Hatsumi, current IP range unknown, last seen bypassing server protection on my server.

If you do see the spambot, or Hatsumi on your servers, and are running ApprehendJJ2 or a packet capture program such as Ethereal (which is what I use for packet capturing on JJ2 servers), please report the IP to me ASAP.

Ah, I've seen Hatsumi. >O

he was in my server for at least 60 minutes. God(-) and Oh my (-) god that I didnt write down his IP!

The idiot strikes again.

[IMG]http://unknown.halleyscometsoftware.com/zomg/warksucks.JPG[/IMG]

As you can see, this "announcement system" does nothing good other than to flame certain users and advertise warez. Since the idiot who made it is refusing to stop, I HIGHLY reccomend people to BLOCK connections from the announcement system. If you don't have something to block connections, download and run this. (RAR decompressor required) Zip version coming soon. :-P

NOW FOR GOING COMPLETELY OFF TOPIC:

[12:13] * Monobot [accessing list server...] (jazz.nimrod-online.com)
[12:13] * Monobot *** Current JJ2 Online Games (5) ***
[12:13] * Monobot > Battle Game -- battle -- 8/32 players -- uptime: 3hrs 18mins 35secs
[12:14] * Monobot > Umba -- treasure -- 4/14 players -- uptime: 18mins 6secs
[12:14] * Monobot > Yaxish Server -- treasure -- 4/18 players -- uptime: 6mins 23secs
[12:14] * Monobot > Blacky hosts stuff -- capture -- 3/12 players -- uptime: 4mins 8secs
[12:14] * Monobot > Karazickle Races -- capture -- 1/32 players -- uptime: 0secs
[12:14] * Monobot *** End of list ***

JJ2 is back. :-)

Please remove my ip from your earlier post UNKOWN (142.162 etc)

Once apon a time, no.