Jump to content

Spoofed GUIDS


prophet

Recommended Posts

Someone threatened to spoof my guids yesterday and get me banned. I called him out on it and low and behold here I am, on a ban list. Though my regular name is 'prophet', I usually pub as Xmg a you will see in the screenshots and ban information below.

 

pbbans ban link: http://www.pbbans.com/mbi-viewban-ed1918e5-vb124831.html

 

It contains my pb guid alright, but the IP address is from some country in Europe (I am from Newfoundland, Canada) and it's from a server which I have never played on.

 

My ip: 142.162.86.118

 

Here are some screenshots I took yesterday of the guy threatening myself and some other players on the server:

 

http://img160.imageshack.us/my.php?image=guidspoof.jpg

http://img218.imageshack.us/img218/36/guidspoof2.jpg

 

The fact that I'm on a ban list worries me but not nearly as much as how is someone able to get my guid there with such ease?

 

Also discovered this:

 

http://www.pbbans.com/mbi-latest50-et-lfb2.html

 

Those are the latest bans for ET. As you will see, you have a lot of them of "supposed" North American players banned from the same overseas CYBERGAMES server. All of them have a *very* similar IP address and all say the players are all from VENEZUELA, which they are not.

 

190.201.161.233 - NEB!Dominator

190.201.161.172 - Cachucha

190.201.161.177 - Xmg (me)

190.201.182.7 - hello

190.201.173.201 - lelaw

 

There have been many more bans added for supposed North American players. All have a similar IP and come from the CYBERGAMES server:

 

 

MULTIHACK #70534 Zicario

190.201.169.147 [Venezuela] [CYBERGAMES]

84.247.226.3:27971 Apr 29, 2009

8:42 pm

 

MULTIHACK #70534 evilzombie

190.201.160.154 [Venezuela] [CYBERGAMES]

84.247.226.3:27971 Apr 29, 2009

8:38 pm

 

MULTIHACK #70534 .fa.Corey

190.201.166.243 [Venezuela] [CYBERGAMES]

84.247.226.3:27971 Apr 29, 2009

8:31 pm

 

MULTIHACK #70534 Bliss

190.201.165.121 [Venezuela] [CYBERGAMES]

84.247.226.3:27971 Apr 29, 2009

8:27 pm

 

MULTIHACK #70534 NuMLocK

190.201.169.170 [Venezuela] [CYBERGAMES]

84.247.226.3:27971 Apr 29, 2009

8:22 pm

 

All I had to do to get around it was simply delete my guid. I'd appreciate it if you removed my guid from the list. I have had it for many years and do not want my name/guid connected to a ban list in anyway, shape or form. Here is the info regarding my banned guid:

 

Violation information from PBBans.com:

Ban Date: Apr 29, 2009 at 1:41:52 pm EDT

PBBans BanID: 124831

PBBans Ban Link: http://www.pbbans.com/mbi-viewban-ed1918e5-vb124831.html

Game: Enemy Territory

Violation: VIOLATION (MULTIHACK) 70682

 

I know there is a proper appeal process but a lot of this information came into light after I had already submitted the appeal. As well, I figured I'd bring it to everyone's attention in case you were not already aware of it.

Link to comment
Share on other sites

Well, it is actually weird that all the IPs on MPI are from Canada, and that ban is from Venezuela... but if I am right it's quite impossible to spoof a PB Guid unless you know the CDkey...

If your GUID really got spoofed, anyway, you've found by yourself the solution to this matter:

All I had to do to get around it was simply delete my guid.
Link to comment
Share on other sites

Well, it is actually weird that all the IPs on MPI are from Canada, and that ban is from Venezuela... but if I am right it's quite impossible to spoof a PB Guid unless you know the CDkey...

If your GUID really got spoofed, anyway, you've found by yourself the solution to this matter:

 

There are no CD keys in enemy-territory

Link to comment
Share on other sites

Ok you got me. LOL. What I meant was no key to manually type in like a paid game.

 

XD! Well I've been playing ET for many years, so I know enough about it :P

Anyway yes, what you are saying it's correct... there is no CD-Key (like for BF etc) to type manually :P

Link to comment
Share on other sites

Well, it is actually weird that all the IPs on MPI are from Canada, and that ban is from Venezuela... but if I am right it's quite impossible to spoof a PB Guid unless you know the CDkey...

If your GUID really got spoofed, anyway, you've found by yourself the solution to this matter:

 

Good night, im from Venezuela and i used to play ET, my IP got banned in pb but I DONT HACK....please, if someone can help me, i would be gratefull...

 

Bye.

Link to comment
Share on other sites

We added a subnet mask on a spoofing player late last night while I coded the changes to suspend ET banning.

 

I have removed the ban masks and you should be able to play again.

Link to comment
Share on other sites

We added a subnet mask on a spoofing player late last night while I coded the changes to suspend ET banning.

 

I have removed the ban masks and you should be able to play again.

 

Good Morning, i tryed to connect today, and i couldnt.....

 

For other server says: "Server disconnected for unknown reason" or the counter of "Awaiting Chalenge" never ends...(like 1,2,3,4,5,6,7....)

 

My punkbuster is active and working perfectly...can you do something?

 

Thanks in advance for your attention.

Link to comment
Share on other sites

Good Morning, i tryed to connect today, and i couldnt.....

 

For other server says: "Server disconnected for unknown reason" or the counter of "Awaiting Chalenge" never ends...(like 1,2,3,4,5,6,7....)

 

My punkbuster is active and working perfectly...can you do something?

 

Thanks in advance for your attention.

 

This sounds more like you or the server is having connection issues. Are you getting this with every server? Are you sure your game isn't being blocked by your antivirus or firewall?

Link to comment
Share on other sites

This sounds more like you or the server is having connection issues. Are you getting this with every server? Are you sure your game isn't being blocked by your antivirus or firewall?

 

Well the server that i used to play is prefect, all the players are playing fine...no connection issues...

 

And my game isnt being blocked by an firewall, all the restrictions for the game are fine.

 

Make sure that etmaster.idsoftware.com is reachable from your machine.

 

How i can verify that?

Link to comment
Share on other sites

We added a subnet mask on a spoofing player late last night while I coded the changes to suspend ET banning.

 

I have removed the ban masks and you should be able to play again.

 

 

I had to remove the ban masks on 190, so one of my regulars could join. Which was no big deal. But that could be what the problem is for some not being able to join.

Link to comment
Share on other sites

yes you do have to remove the ban from your pbbans.dat file

 

PB has not developed a command to lift a banmask and when the bans started coming through from that ip we issued a ban mask while maydax finished the coding. The only way to remove the ban is to open up the pbbans.dat file and removed the line, then upload to your server and issue a

/rcon pb_sv_restart command

Link to comment
Share on other sites

Since this is a public forum could I please have my full 32 character guid removed from the original post please. Thank You.

 

Also thanks for clearing this issue up & removing the spoofed bans :)

Link to comment
Share on other sites

Since this is a public forum could I please have my full 32 character guid removed from the original post please. Thank You.

 

Also thanks for clearing this issue up & removing the spoofed bans :)

 

Removed all of the GUIDs from the original post. :)

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.