Warcraft II Forum

Warcraft II => Server.War2.ru => Topic started by: {Lance} on December 21, 2020, 11:21:41 PM

Title: Chat bot spam
Post by: {Lance} on December 21, 2020, 11:21:41 PM
Why is Tupac still running amuck with his chatbots on the server.  U need tutoring on how to block shit like that?  Seriously Tupac,  wtf is wrong with you.  You've been doing this shit for 10+yrs and it's proven nothing.  The server is still here and it's not going anywhere anytime soon no matter how many decades you do this shit.  All it does is prove you're a moron.  If it didnt work 10yrs ago,  it sure as shit wont work now,  or ever.

(https://image.prntscr.com/image/cOFdUiAdQxG76rn9p8dgNA.png)
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 22, 2020, 02:14:29 AM
How do you block stuff like this?
Tupac bitter. He wants the community on his server.
Title: Re: Chat bot spam
Post by: {Lance} on December 22, 2020, 02:26:07 AM
This is a problem we've had to deal with before.  The last time we used iptables.  But I suspect that iL no longer has the rules I gave him that helped with it (it was many years ago).  iptables can rate limit certain types of traffic as well as do traffic shaping (prioritizing certain traffic over another).  So thats one way.  Another way is to simply disable user registrations all together and use a web based form with captcha to make new accounts.  But that wouldnt help with connection attempts/failures and could still result in traffic saturation.  So really, the best method is with a firewall,  iptables is on every linux machine so it would make sense to use that first.  If you use both of them (iptables and web based reg),  you could outright block registrations completely at the firewall so that even a failed attempt doesnt ever hit the pvpgn server and it wont saturate the server's network either.  Thats probably the best method although it's a pretty big sledgehammer ;)  I'd be willing to bet that just iptables rate limiting would make it take more time than it's worth to keep up this type of attack.
Title: Re: Chat bot spam
Post by: BHC-JesK on December 22, 2020, 01:53:16 PM
This is embarrassing. Is iL the only admin capable of doing anything about this?

@iL


(https://i.ibb.co/7Q9qTgb/wtf.png)
Title: Re: Chat bot spam
Post by: Nox on December 22, 2020, 01:56:29 PM
I think it's well deserve, when you force someone with a cancer to stay in a community after his family get blackmail, this is what we call karma.

Good luck dictators.

Title: Re: Chat bot spam
Post by: ~ToRa~ on December 22, 2020, 03:24:28 PM
I'll start banning them.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 22, 2020, 03:26:22 PM
scratch it there is no way for me to get rid of these lol. I moderated the chat now at least they can't spam messages.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 22, 2020, 04:04:45 PM
@Tupac The community won't follow you. Your wasting your time with this bot attack.
Title: Re: Chat bot spam
Post by: woofy on December 22, 2020, 04:08:17 PM
I'm away from home on holiday, and won't be back for a while so can't help.  Tupac has done this before, you need to individually remove the accounts.

Tupac must be mid-20s by now? Why is he acting like a 10y/o? Are there still people this attention starved in this day and age?

Get tiktok bro.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 22, 2020, 04:34:30 PM
There are over 800...Your saying I need to remove them all?
Title: Re: Chat bot spam
Post by: {Lance} on December 22, 2020, 10:23:52 PM
@~ToRa~ Remove them all if you must,  but yes, iL is really the only one that can do anything about this permanently because only he has SSH access to the server.  All I can do is advise what to do or what to use for rules.  We did this years ago but the servers have changed since then and I guess the IPTables rules got lost in the mix.  According to iL,  those 800 accounts were made over a long period of time but I'm not so sure about that.  It would only take 13-14hrs to make them again with a registration bot.  Probably longer than it would to remove them by hand.  If you have access to the MySQL backend,  you can get them all in 1 fellswoop because they are not very random.  There is a pattern to the naming convention he used and than can be used against him.  If you want the query to run just let me know :P
Title: Re: Chat bot spam
Post by: baRa on December 22, 2020, 11:16:02 PM
Gee Lance you sure know your stuff. Too bad you went over to the dark side there for awhile
Title: Re: Chat bot spam
Post by: {Lance} on December 23, 2020, 12:00:20 AM
I have never had any issues with iL.  It was Ldir and Burnt that I was never very fond of (they are listed as fav enemies in my bio along with picka).  If Ldir hadnt let iL take over,  there wouldnt be a war2.ru anything.  He was not the right person for the job.  I've helped iL through out the years with many different things.  I never did that with Ldir and probably never would.  His personality was just as bad as his IT skills (which were non-existent).  As long as iL is still maintaining things and burnt remains out of the picture,  I'll help support the RU side of wherever war2 goes in any way I can.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 12:44:07 AM
Yeah lance, I saw each name get made the day or so before. The name would login for a split second, write some script in the channel with password n such and then be gone. So fast, you never even saw the name. Didn't see anyone around to tell them.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 11:38:58 AM
I'll start banning them  :sob:
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 11:40:48 AM
Ok I'm in. This will literally take all day to ban all these...
Title: Re: Chat bot spam
Post by: Player on December 23, 2020, 11:47:16 AM
Still looks like its up.  I'm on and able to join games.  Can you grant temp access to ban?  I can help in the manual banning.
Title: Re: Chat bot spam
Post by: Player on December 23, 2020, 11:53:14 AM
Get some others to help and we'll knock it out in 30 mins.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 12:05:10 PM
I gave u8 access to my account cause I'm working and don't have time to ban them all. Are you free player? Maybe you can use TK's account.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 12:20:12 PM
Are you talking deleting 1 by 1? Or with some sort of  grouping? I could lend some assistance as well if deemed trustworthy.
Title: Re: Chat bot spam
Post by: Player on December 23, 2020, 12:22:54 PM
I'm free and can do some banning.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 12:23:32 PM
Yes looks like u8 just using /kill at the moment. Idk if he is banning them.
The bots are down to 300ish from 800 so lets wait and see if they go away for now. If not then yes maybe we can distribute a couple admin accounts to you and a couple other players.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 12:35:48 PM
10-4, GO U8!
Title: Re: Chat bot spam
Post by: PopuriAO29 on December 23, 2020, 12:43:42 PM
There are many spam account on War2BNE Channel. i seen war3, war3x, diablo 2 icon.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 12:52:23 PM
Need to actually ban the looks like. Harry do you know the commands? I’ll let u use my account. TK is ipbaning them now.
Title: Re: Chat bot spam
Post by: Nox on December 23, 2020, 12:59:26 PM
U8 took an hour to delete 800 and i took 5 minutes to add 300 mores  :sob: :sob: :sob:

(https://media.giphy.com/media/YQitE4YNQNahy/giphy.gif)
Title: Re: Chat bot spam
Post by: Nox on December 23, 2020, 01:18:11 PM
10 minutes, 500!

Maybe you could edit the MPQ u8, try to make a kind of hotkeys shortcut to delete them!

(https://media.giphy.com/media/1XL1heNzoMWSA/giphy.gif)
Title: Re: Chat bot spam
Post by: Player on December 23, 2020, 02:39:35 PM
Where are we at with the bans?  Didnt work out?
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 02:59:07 PM
@Player I sent you a message.

Anyone else want to try to ban them?
Title: Re: Chat bot spam
Post by: BHC-JesK on December 23, 2020, 03:20:16 PM
I can't log on atm.

I can help too but we need further actions as lance mentioned.
Title: Re: Chat bot spam
Post by: Player on December 23, 2020, 03:30:38 PM
I just started banning and now they're all gone.  I'll take all the credit.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 04:45:07 PM
I don't know the command. /kill name? Full name or IP? Feel free to msg me. Are we just running in circles though?
Title: Re: Chat bot spam
Post by: tk[as] on December 23, 2020, 04:54:46 PM
this is the best way i know how to do it... and i guarantee there is a better way if we can get someone with a script to write the script

Get on any account on a stealthbot. log onto the server with it
get on an admin account on the war2.ru client

have both accounts in windowed mode

on the sealthbot window right click the name "copy name to clipboard"
then in the war2 client under the admin name type:

/finger (username you just copied with ctrl+v)

once you do that it will give the user's ip address (123.45.67.89)

then type /ipban add 123.45.67.*

then type /kill (ctrl+v)                           .. (ctrl+v = the username previously copied)

that's the fastest way to manually do it that i can think of.

still takes a super long time with so many bots.
Title: Re: Chat bot spam
Post by: tk[as] on December 23, 2020, 04:56:45 PM
but there should be a script for the stealthbot that executes all commands at once.

/finger user + /ipban user's ip + / kill user

so u can just go down the line right click name + click ban/kill
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 05:13:05 PM
Yeah that would be easiest.

For now things seem to be ok. But going forward if this keeps happening I'll probably tap mousetopher, frostbitten, and a couple other inactive admin accounts to help ban the bots in the future.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 06:57:44 PM
We should probably be careful on what we say. Whomever is doing this is obviously reading it too. So, anything we figure out, will just give that person information to find ways around it.

IE: When we said all user names are patterned, which would make it easier or something, now they are not.

Can you not disable names being created?
Title: Re: Chat bot spam
Post by: tk[as] on December 23, 2020, 07:04:56 PM
spam bots are nothing new. there's no way around to get around a script that makes it possible to right click a users name and ipban/kill them.

i was able to stop an attack on the last tournament i hosted but i had to do it all manually.

they can generate new random ass names as soon as one name gets banned, then log back on.. but not if their ip is also banned.

just a numbers game.

the script probably exists.. i just dont have it.

but if we can get our hands on it, it's going to take less work for us to get rid of the bot attack than it is for them to actually set it up.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 07:15:05 PM
Any way to disable the function of creating new names? That would solve it.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 07:18:33 PM
Any way to disable the function of creating new names? That would solve it.

I am against this idea because that would prevent new players from joining the server.

With that being said I’m okay with doing it temporarily until things get under control.
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 07:20:31 PM
Player is using my name at the moment.

@Harrywangs do u want an admin account to assist and ban these bots?
Title: Re: Chat bot spam
Post by: ~ToRa~ on December 23, 2020, 07:22:52 PM
I do think it’s time to start giving out admin privileges to more players.
Title: Re: Chat bot spam
Post by: {Lance} on December 23, 2020, 07:22:59 PM
Dont worry about names being created right after you ban one.  It will take at least 1 min to create a new name because that's the current threshold for name creations.  1m is to low imo,  but it is what it is.  I think it should actually be 1hr (F all u smurfz out there lol) but iL has set it to 1 minute instead.  Maybe if enough users ask to have it increased,  he'll do that.  It would mean that it also affects smurf players or those that get banned from games and who like to exit and make new names to get back in (annoying but thats what happens).  At the same time,  it'll also make tupac's bot a pain to keep up with spamming because it'll just take to long to make enough names to make it worth while.  It's a quicker/easier fix than setting up IPTables and is a good solution for now until he has time to work with the IPTables rules.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 07:28:24 PM
I would stop it temporarily. Let's be honest, we get like 2 new users every 3 months if we are lucky. Though, I think Lance has a better idea. This way, we can still ban them, but 1 an hour, is an easy way to ban.

Does only iL have these rights? Is it worth it to keep banning right now? Are we gaining anything or is this a break even thing?

If we are actually gaining and this process is advantageous, I'd be happy to help out. I will help out and ban them. Just need to DL a stealthbot. http://www.stealthbot.net/forum/??? (http://www.stealthbot.net/forum/???)

Well, are any of these IPs the same? If they are not, there is no sense in putting a time limit on creating a name.
Title: Re: Chat bot spam
Post by: {Lance} on December 23, 2020, 07:34:43 PM
You dont need a bot to do banning,  the commands can be used from your war2 client if your account has access to them.  There is a hidden admin forum that has a list of the commands,  there's also a cheatsheet on the PVPGN site here:  https://github.com/pvpgn/pvpgn-server/wiki/PvPGN-commands  .  Only iL can set up the time limit since it's a config option for PVPGN and would require a server restart to take effect.

The IPs are not the same, however there is a limit to how many IPs you can get when using the different VPN/Proxy services.  Even TOR isnt an unlimited amount.  1hr would be enough to stop mass account creation even with the help of VPN IPs.  And getting a VPN to request a new IP isnt an instantaneous action either.  It takes time depending upon the service being used.  TOR for example,  takes about 5-15 seconds to get a new IP while some others can take 1-10 mins.  Some even have time limits on how often you can request a new IP.

Another option would simply be to not allow ANY vpn/proxy services to connect at all.  I dont know if there are even any legit players that use a VPN/Proxy to connect.  If there are, they can probably be counted on 1 hand.  Adding such a block is fairly easy but it requires IPTables rules.  This would not only stop spam bots,  it would also stop repeat offense hackers as well since most people will just connect via a VPN/Proxy if they get banned for hacking,  etc.  There really isnt any advantage to allowing these types of services.
Title: Re: Chat bot spam
Post by: Harrywangs on December 23, 2020, 07:54:06 PM
Well, are all these names under limited IPs or each name it it's own IP? If it's all different IPs, you're kinda sol and need to stop all name creations. If it's limited IPs (multiple names w/same IP), then you just IP ban and then kick? But that doesn't seem to be working, right? So, I assume that isn't the case.
Title: Re: Chat bot spam
Post by: Nox on December 23, 2020, 07:55:11 PM
All those programmars hackers use vpn to log on the country where the war2ru server is host, they have better latency when they connect from there, it mean Germany.

Title: Re: Chat bot spam
Post by: WillTheRealKoorbStandUp on December 23, 2020, 09:06:06 PM
Temporary work around, let everyone know join channel tournament when bots are flooding
Title: Re: Chat bot spam
Post by: Pokeyhontas on December 24, 2020, 01:28:26 AM
(https://imgur.com/r/gifs/HiANL)