Nintendo Attempts to Drown Hacked 3DSs with Banwave

On 5/25/2017 at 5:26 PM, Holla! said:

What I'm scared of now though is that I installed A9LH for my cousin's O3DS back in February and I don't know if she'll be banned considering she's still on an older Luma version. Should I still tell her to go online even though she hasn't had the time to play it for the past weeks?

Update: She texted me and said she can connect to the internet. 

Also, I have every option on the latest Luma to off and Clock+L2 on my N3DS. I also did the same for hers but without the Clock+L2 option if that helps, if anyone wants to share their CFW configurations.

I haven't used my 3DS for a while now, so I'm not sure if I'm already banned or not. I hope not...

If I format my system will there be any traces left from installed CIAs/Homebrew/other stuff? Like in the title database or somewhere? Or can I expect a formatted NAND to be fully clean?

I'll probably block all their servers though...

EDIT: Are we sure d0k3's list of server addresses is complete? There have been many updates since then which could have introduced new addresses.

My 3DS hasn't been turned on for a long while now, and I know it doesn't have custom firmware on it along with having the wireless disabled most of the time.

So, it's unlikely for my 3DS to be banned from going online.

- Soldjermon

I honestly question people who claimed that they've never tampered their 3DS and got a ban.

I also feel like a PGL banwave is around the corner, too.

What CFW settings do you guys have enabled in Luma/whatever you use? And were you banned?

18 hours ago, BlackShark said:

I haven't used my 3DS for a while now, so I'm not sure if I'm already banned or not. I hope not...

If I format my system will there be any traces left from installed CIAs/Homebrew/other stuff? Like in the title database or somewhere? Or can I expect a formatted NAND to be fully clean?

I'll probably block all their servers though...

EDIT: Are we sure d0k3's list of server addresses is complete? There have been many updates since then which could have introduced new addresses.

If you format it, I'm almost certain that there'll be no traces of installed CIAs and homebrew left in the 3DS, but if the information already has been sent over to Nintendo's servers, there's no way for you to delete what they have.

It seems there is a lot of speculation around this. Most obviously it is players gaming on-line with the same software all around the world. Thousands of copies of cloned data from a single source going back and forth from local systems to N's servers shall definitively raise a flag.

How is it going by now?

15 minutes ago, Hide said:

It seems there is a lot of speculation around this. Most obviously it is players gaming on-line with the same software all around the world. Thousands of copies of cloned data from a single source going back and forth from local systems to N's servers shall definitively raise a flag.

How is it going by now?

Don't think its that, tho.
If I'm not mistaken, many of freeshop games are tickets that were bundled with a console on launch,
and I think those games tickets were the same across those consoles.

Right now, it appears that Nintendo captures what you're playing now and what you last played if your 3DS was connected to the network,
so if you had a homebrew title being captured as either of those, they log your console details down, then ban as a wave.

There hasn't been newer ban reports after users take measures to avoid that type of scenario,
but it could also be because wave is over and will come later..

Well, what you said simply confirms what I Just told.

I don't see why would home-brew communicate to the official provider by its own. As far as I know, booting home-brew lets you work "on the fly"... It is like booting Linux from the USB.

Most probably, those banned played "restricted software" trough home-brew and connected with such software to the provider; the provider just did the standard thing: Checking their physical addresses, and telling whether or not this software was standard-compliant. They could have bricked the devices, but they did not...

Copies from "the other marketplace" and their accessories (i.e. tickets), are often tagged in the wrong way. So, home-brew stuff should have been running a fail-safe to protect your system. That's basic, and a must for auditing. Surely that's going to be "the solution" for this situation; some kind of way to renew and cover your "console's ID".

Has anybody tried replacing the console's network adapter? It is one of the cheapest ways to flag a device (that's what other companies did in the past, with other components from their consoles).

I finally got around to checking if I was banned or not, I appear to have got lucky so far *touch wood*

If its of help to anyone i've posted as much info as i can provide below:

What I did / didn't do on my 3DS:

All I really do on my 3DS is play Pokemon, it was always at the back of my mind to be careful not use use Homebrew or apps like SaveDataFiler with WiFi enabled, although I know I have done that by accident once or twice in the past. If I had used Homebrew or something like SaveDataFiler offline I would always load a game before going online so the Homebrew app wasn't my most recently played title.

The majority of content installed on my console is from legit CIA's, I had never used FreeShop. Instead of dumping my own gamecarts and converting them to CIA's I simply installed the legit CIA's created from pre-installed games found on certain consoles. Any legit CIA's I've installed I also own a game cartridge of, which I have used to play online at some point.

Their is a difference between legit CIA's and user created CIA's. If you were to remove CFW installed legit CIA's would still work as normal, where as user created CIA's, or installed content from FreeShop would not.

I've had Homebrew CIA's installed and an out of region Pokemon Green that i dumped from my JPN 2DS console, I was never online when playing out of region games, although have been online and loaded homebrew apps by accident (not recently though). I also imported Pokemon from my JPN Pokemon Green though Pokebank on a PAL console, which obviously is not possible to do on a non hacked 3DS.

Sending of info via SpotPass and automatic downloads had been disabled since I got the 3DS.

What did i do with CFW on my 3DS?

All I use my 3DS for is Pokemon, I used CFW to backup my Pokemon saves, inject my Pokemon saves from an actual GameBoy in to the VC re-releases of Pokemon Red, Blue and Yellow, along with injecting wondercards in to GEN 6 games. In addition I have used Homebrew apps / emulators installed as CIA files and form the Homebrew launcher.

What have I done before going online again?

As per theSlayers original post I have cleaned up and locked down my 3DS up as much as possible.

The only thing i didn't do was "Use GodMode9 to clear my Activity Log" its been mentioned on other forums the local activity log is not sent to Nintendo and Nintendo is actually keeping their own logs about what you are doing online.

My router is now blocking all the Nintendo hosts I previously posted except conntest.nintendowifi.net, which breaks online functionality when blocked. (That's actually a good way to verify your blocked hostnames rules are working or not)

Everything on my 3DS homescreen is now legit. Anything that wasn't is deleted with the tickets cleaned up and the icon / home menu caches cleared. If i need to use the Homebrew launcher I plan to inject it in to the health and safety app when offline, use it, then return the health and safety app back to stock before going online again. I have pre-created files ready on my SD card to inject and remove from the Health and Safety app on the go.

I've also deleted the Luma payload from my NAND as i figured Nintendo is more likely to look for something that could have only got there with hacks, rather than the SD card which is very easy to copy files to / from.

End result:

My 3DS boots to the Sysnand via the Luma 7.0.5 CFW (I will update to boot9strap in the future to use newer Luma versions) however the Sysnand doesn't have anything on that is not legit. If I get banned now it's likely i'm already flagged or Nintendo can actually detect CFW.

I don't really plan on going online unless I really need to though. I'm currently working on finishing my GEN 7 living Pokedex of which I have most the Pokemon I need, it's just a case of breeding / leveling them up now.

For anyone who blocked all the hostnames posted previously, to use Pokebank with Pokemon Moon (and i presume Sun) you need to unblock:

• npdl.cdn.nintendowifi.net
• eou.cdn.nintendowifi.net
• cp3s.cdn.nintendowifi.net

You can use Pokebank with GEN 6 games with all the hostnames in my previous post blocked, you can also use the GTS on GEN 7 games with all the above hostnames blocked.

Pokebank seems to require the above hostnames unblocking for Moon and Sun though.

Figured out by unblocking the additional hostname until I was able to connect, then re blocking them until I narrowed it down to the above three.