List of IP addresses conquer.exe queries on start

04/20/2007 01:38 section six#1
First post, i usually just read....but:

I've noticed that Conquer.exe queries at least dozens of different IP addresses on startup--but only one each start. I'd like to find the list in the conquer folder, but so far no luck. Any ideas? I searched the forums but didn''t see any topics other than discussions of server IP addresses. I experimented by opening and closing conquer about 20 times on 2 different computers, and got a list of 12 different IP addresses. I looked them all up and they seem random, other than about %40 of them being owned by Google.

Help appreciated.
04/20/2007 01:43 KatsuAkimoto#2
I noticed that CO sends info to two different servers when you make actions. But that's all I found out a while ago. I'd help you, but I don't have CO right now. But good luck to you on continuing with this!
04/20/2007 01:50 kkaosbudbud#3
lol owned by Google conquer>TQ>Google
04/20/2007 02:29 DM2000#4
Hi,

I guess there are 4 servers involved.

1. Account server
2. Update server (patches)
3. Game server (where same as your server.dat)
4. Console server (I guess)

You could packet sniffering it.
DM
04/20/2007 07:05 KatsuAkimoto#5
Yea, I sniffed around, and during the game there are two. So I guess that would be your "Game Server" and "Console Server", Since I don't think that the account server and Update server get info as you play. But maybe though. I have yet to find those 2 other addresses though, but then again, I have not sniffed whilst logging in.
04/20/2007 07:14 DM2000#6
Hi,

Yes, you may only found 2 during the game.

There was an incident of account server broken down.
No one could login but game as usual for those had got in.

There was an incident on patch server, where Ester quest was postponed (^^).

DM
04/20/2007 07:15 KatsuAkimoto#7
Ah, was wondering what the fuss about Easter quest was:) Thanks for clearing that up:P
04/20/2007 15:10 section six#8
hallo...

the update server is contacted by autopatch.exe, and that's the first thing that happens when you open conquer.exe. update server so far has always been 61.131.96.29. the next thing that happens is a contact to one of those other IP addresses. this is before login, before anything.

My curiosity was piqued because of the discussion regarding the newer versions of SV, where the program was seen to be contacting Gmail, supposedly to give 9net9 passwords so they could hack people's accounts who tried to use SV without paying for it.....or so the theory went.

Now i'm not entirely certain that's the case. It seems conquer.exe itself contacts gmail at times. I tested a few things out on my old computer: I executed a newer copy of SV, uncracked, to see what IP it tried to contact, and it was definitely a Gmail IP. However, the conquer running on my clean system also contacts google IP's and every once in awhile an IP connected to Gmail.

The test system still contacts several Google IP's on startup (only once each start, not several), even without SV running. So now i'm curious about two things: the IP list that conquer keeps for what to contact on startup, and the behaviour of the uncracked SV.

Someone with experience looking at the code for SV please tell me, are it's attempts simplified to contacting home thru it's own .exe/.dll? or could it/does it get more complicated and modify or hook the conquer.exe for contacting home?

thanks for the input so far.

-s6
04/20/2007 23:59 darksonic#9
ips connected to post login/autopatch (ie during gameplay)

Group: FairyTales
Server5=BeautyandBeast
Ip5=216.93.174.65
Port5=9958

208.67.222.222 =account.conqueronline.com
Code:
208.67.216.0 - 208.67.223.255
Freedom Networks LLC
50 Freemont St.
16 Floor
San Francisco, CA
US
	Patterson, George B
[email][Only registered and activated users can see links. Click Here To Register...][/email]
+1-415-344-3139
216.93.174.65=mostly from this ip
Code:
ns1.effexsoft.com (216.93.174.65)
	216.93.160.0 - 216.93.191.255
ServePath, LLC
360 Spear Street.
Suite 200
San Francisco, CA
US
	NOC, ServePath, ServePath
[email][Only registered and activated users can see links. Click Here To Register...][/email]
+1-415-252-3600
216.93.170.133
Code:
samples.americanas.com (216.93.170.133)
	216.93.160.0 - 216.93.191.255
ServePath, LLC
360 Spear Street.
Suite 200
San Francisco, CA
US
	NOC, ServePath, ServePath
[email][Only registered and activated users can see links. Click Here To Register...][/email]
+1-415-252-3600
208.96.17.12
Code:
customer-reverse-entry.208.96.17.12 (208.96.17.12)
	208.96.0.0 - 208.96.63.255
ServePath, LLC
360 Spear Street.
Suite 200
San Francisco, CA
US
	NOC, ServePath, ServePath
[email][Only registered and activated users can see links. Click Here To Register...][/email]
+1-415-252-3600
just for reference...,.website:
Code:
[url]www.conqueronline.com[/url] (69.59.149.193)
	69.59.128.0 - 69.59.191.255
ServePath, LLC
360 Spear Street.
Suite 200
San Francisco, CA
US
	NOC, ServePath, ServePath
[email][Only registered and activated users can see links. Click Here To Register...][/email]
+1-415-252-3600
hope this helps.
04/21/2007 01:23 section six#10
thanks sonic. just to clarify i'm talking about the ip address conquer.exe contacts right after the autopatch.exe does it's thing. even before login and gameplay.
04/21/2007 03:12 darksonic#11
packet cap. before clicking play.exe and untill the log screen


61.131.96.29=autopatch

Code:
61.131.96.29
	61.131.96.0 - 61.131.96.127
FUZHOU-HONGYU-COM
	ming dai
[email][Only registered and activated users can see links. Click Here To Register...].fj.cn[/email]
no.7,dongjie road,fuzhou,fujian,china
+86-591-3333169-293
+86-591-3371954
208.67.222.222 (ref to post above previous post)
216.93.170.133 (ref to post above previous post)

208.67.220.220=dns
Code:
resolver2.opendns.com (208.67.220.220)
	208.67.216.0 - 208.67.223.255
Freedom Networks LLC
50 Freemont St.
16 Floor
San Francisco, CA
US
	Patterson, George B
[email][Only registered and activated users can see links. Click Here To Register...][/email]
+1-415-344-3139
tell me the exact steps to get to connect to those two ips cause i've ran the game several times and i only get th above ips.
04/21/2007 21:14 section six#12
if you close the game and reopen it several times within a short time period, it will always try to connect to the same IP as the first time you opened it. if you wait awhile or try again another day you'll see a different IP.

--s6
04/21/2007 22:12 darksonic#13
maybe its the dns ip then? cause u don't need to update the dns every sec but rather it takes a long time and the company usually have several of those dns ips, im not really sure. Can u give us an example ip?
04/22/2007 00:25 bone-you#14
Stupid question I know but I must ask, did you have gmail open in a browser? :P
06/08/2007 17:51 section six#15
not a stupid question, but i must be a bit ignorant regarding this because i didnt notice or think to check it before....but... it only queries the google/gmail IPs when a gmail window is open. and im positive it is the conquer process, not the gmail window. but the conquer process only queries the gmail/google ip when a gmail window is open.