Bmx

[[ZG] BubblesDevere]

Lately we have been receiving a lot of messages via the web chat which you might have noticed - mostly threats. One of these messages were:
[ZG WEB] Ready for a Ddos Bubble

This is a very serious threat.

This is the data I gathered from our web provider. Where the WEB CHAT is hosted: I hid the IP address there for privacy reasons.
HIDDEN FOR PRIVACY - - [15/Jul/2020:02:20:41 +0200] "GET /handler.php HTTP/1.1" 200 194 "http://www.zgeist.eu/chatty.php"

I then looked into our logs and found this:
D:\1224\DDU Logs\l0711000.log (1 hit)
Line 170: L 07/11/2020 - 00:06:18: "Bmx<4><[U:1:35940029]><>" connected, address "HIDDEN FOR PRIVACY"
D:\1224\DDU Logs\l0712014.log (1 hit)
Line 12979: L 07/13/2020 - 00:40:08: "Bmx<65><[U:1:35940029]><>" connected, address "HIDDEN FOR PRIVACY"
D:\1224\DDU Logs\l0713033.log (1 hit)
Line 5019: L 07/13/2020 - 20:05:03: "Bmx<31><[U:1:35940029]><>" connected, address "HIDDEN FOR PRIVACY"
D:\1224\DDU Logs\l0714413.log (1 hit)
Line 34872: L 07/15/2020 - 01:17:37: "Bmx<137><[U:1:35940029]><>" connected, address "HIDDEN FOR PRIVACY"

I hid the addresses for privacy, but they are identical, so the guy who irritated us for the past days via web chat has been found. It is a relief but also a sad fact.
I did confront Bmx about it and he said that he is using a vpn and talked about his address changing all the time, this cannot be true for 3 reasons.

1. If he was using a VPN, there would most likely be more logs on the IP Abuse database.
2. His VPN provider would Probably not be in the same city than he is.
3. His IP address would NOT be the same on different days.

It is therefore clear that he lied even after having done all of this. It is Quite a shame because I though he was a very friendly guy. Heck he even gave us input on the match server.
If he had come clean about this I would have considered to try and understand the reason for all this hate. He was quite nasty in his chat as well to me, (talk about an admission of guilt), i'm not going to paste what he said on here, because... meh.
In anycase, with such serious threats like DDOS, I have no choice but to completely ban him from out serer, if only just for our protection.

[[ZG] BubblesDevere]

Makonnen also found some stuff he said on ZG

bmxchat.JPG (135.63 KiB) Viewed 6730 times

[[ZG] BubblesDevere]

Today some more:

[ZG WEB] Tu crois pouvoir me niquer comme sa
[ZG WEB] Tu veux jouer bubble
[ZG WEB] Alors on vas jouer
[ZG WEB] Je te menace pas je t’en préviens

Mobile IP , so can be shown :
37.120.158.12

[Henk717]

I am glad you managed to find out who it was, given BMX dropped our server name i'd like to publicly state the obvious.
BMX did not inform me about this behavior, neither did we have similar threats from him in the past ourselves, neither did we ever ask of anyone to harm any other server.

Because i take this very seriously i have compared the information provided by Bubbles with my own records and was able to confirm the IP and SteamID of BMX on our side matched the data provided.
All previous IP's we have on record have been given to Bubbles so they can be monitored or banned at ZG's discretion, exposing the pattern of his internet provider for future reference. This will not put BMX at further risk since the IP's are no longer used by him, but will provide ZG more insight.

No server owner tolerates this and we will keep working together to warn and inform each other if threats like this emerge.

[MakonneN]

damn, that's so much evidence
the boy felt with impunity
good that everything has already cleared up, good job.

[[ZG] BubblesDevere]

More has happened today 16 July 2020

New steam account with faked identity - he pretended to be a new player for about 2 hours then requested to be friended on steam:
Bernard debute GBR
STEAM_0:0:550815554 IP HIDDEN

Message received was the following:

Bernard debute:
Bon je sais que tu vas me ban quand tu vas voir sa , sache que je tenais a m'escuser pour ce que j'ai dis ou fais , Je ne pencer pas a mal , c'etais partie d'une vulgaire blague d'ailler je ne sais meme pas DDOS quelque chose lol , je te prie de bien vouloir m'escuser , je pence que sa prend des proportion enorme pour une connerie pas mechant de base ,juste une blague debile ... j'ai reussi a aller voir sur le forum avant de venir , par contre Le mec qui t'as ecris sur le Web ce coup la ce n'est pas moi lol , donc voila prend le comme tu veux meme si a mon avis mes escuse seront pas recevable , sache que j'apprecier votre serveur , j'ai demander a l'autre Sani unmatch sur vg car , la vitesse qu'il y a sur ton match jy arrive pas donc voila desoler pour le tord causer j'espere que tu comprendra et me pardonnera
tu vois j'en suis meme venue a faire un smurf pour pouvoir te parler...
Bubble?
et un conseil avant que tu me reban peut etre encore
pour les afk en spawn protect
fait en sorte que on puisse passer a travers
sinon sa bloque

This Account is also being reported to Steam today.

[[ZG] BubblesDevere]

Another instance ... Player was banned

L 07/16/2020 - 18:10:06: "Stev<16><[U:1:40840021]><>" connected, address "IP HIDDEN"
L 07/16/2020 - 18:10:07: "Stev<16><[U:1:40840021]><>" STEAM USERID validated
L 07/16/2020 - 18:10:52: "Stev<16><[U:1:40840021]><>" entered the game
L 07/16/2020 - 18:11:04: "Stev<16><[U:1:40840021]><Unassigned>" say "Salut mec"
L 07/16/2020 - 18:11:07: "Stev<16><[U:1:40840021]><Unassigned>" say "t'es là ?"
L 07/16/2020 - 18:11:26: "Stev<16><[U:1:40840021]><Unassigned>" say "vous avez banni bmx et arno"
L 07/16/2020 - 18:11:29: "Stev<16><[U:1:40840021]><Unassigned>" say "grave erreur"
L 07/16/2020 - 18:11:34: "Stev<16><[U:1:40840021]><Unassigned>" say "je vous préviens direct"
L 07/16/2020 - 18:11:46: "Stev<16><[U:1:40840021]><Unassigned>" say "il y aura des conséquences..."

[[ZG] BubblesDevere]

[ZG WEB] alors bubble a tu reflechis =)

This came from the same IP as the first one, presumably the non-VPN one

[[ZG] BubblesDevere]

Stev<57><[U:1:40840021]><>" connected
"Stev<58><[U:1:40840021]><Unassigned>" say "bonjour, juste pour vous signalez que je suis allé porter plainte à la police suite aux menaces de mort reçues "
L 07/29/2020 - 20:03:12: "Stev<58><[U:1:40840021]><Unassigned>" say "Signée "ZG""
L 07/29/2020 - 20:03:24: "Stev<58><[U:1:40840021]><Unassigned>" say "J'ai signalé votre site internet"
L 07/29/2020 - 20:03:31: "Stev<58><[U:1:40840021]><Unassigned>" say "je ne lacherai pas l'affaire"
L 07/29/2020 - 20:04:01: "Stev<58><[U:1:40840021]><Unassigned>" say "ce genre de chose ne me fait pas plaisir... et je vous encourage fortement d'arrêter tout de suite"
L 07/29/2020 - 20:04:15: "Stev<58><[U:1:40840021]><Unassigned>" say "a+"


I have banned this steam id from even joining now.