Luigi Auriemma

I've been seeing a new fake player flooder for Soldat that is far more effective than soldatfp. I was wondering if it was done with tcpfp or a modified version of soldatfp.

The fake players constantly cycle, usually resulting in lag for all the players. It occasionally crashes servers as well, and attempting to rejoin the server while the flooding is still ongoing gives you an "Unknown server error".

Here's a log example.

H'??????? joining game (195.*.*.*:12158)
restart cipher 1
H'??????? has joined spectators.
????a??o??} joining game (195.*.*.*:12158)
restart cipher 1
????a??o??} has joined spectators.
H'??????? could not respond
W????$1 joining game (195.*.*.*:12158)
restart cipher 1
W????$1 has joined spectators.
????a??o??} could not respond
??????QzK???? joining game (195.*.*.*:12171)
restart cipher 1
??????QzK???? has joined spectators.
W????$1 could not respond
u?????????????? joining game (195.*.*.*:14442)
restart cipher 1
u?????????????? has joined spectators.
??????QzK???? could not respond

it looks exactly like the fake players attack, obviously an updated one because when battleye is activated the soldat server performs a blowfish decryption on the join packet, an encryption which was not available in my "jurassik" soldatfp tool because at that time (soldat 1.2.0 or 1.4.1) it didn't exist.

note that I have not performed additional tests or research on this because I'm totally uninterested