Urban Terror Forums: Rcon Flood - Urban Terror Forums

Jump to content

 Login | Register 
Advertisement
Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

Rcon Flood Rate Topic: -----

#1 User is offline   Runamuk Icon

  • Account: runamuk
  • Joined: 28-February 10
  • Posts: 238

Posted 30 May 2010 - 05:00 AM

Here is the latest ratard to attack a URT server:

cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Hit: 11 10 2 14: Puss-N-Boots hit UnAnnouced in the Torso
] Kill: 10 11 28: Puss-N-Boots killed UnAnnouced by UT_MOD_SR8
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] say: 11 UnAnnouced: damn
] UnAnnouced^3: damn
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] say: 10 Puss-N-Boots: :D n1
] Puss-N-Boots^3: :D n1
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Item: 10 ut_weapon_deagle
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Item: 10 ut_weapon_sr8
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Hit: 12 10 3 3: Puss-N-Boots hit Me in the Kevlar
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:


May want to go ahead and ban that ip...

#2 User is offline   pab Icon

  •   verified donator   
  • Account: pab
  • Main tag: |RO|
  • Country:
  • Joined: 28-February 10
  • Posts: 222

Posted 30 May 2010 - 09:09 AM

this is a new hack?
i have problem with rcon stel hack but i update some files
if is a dynamic ip how to ban hi,m

#3 User is offline   Runamuk Icon

  • Account: runamuk
  • Joined: 28-February 10
  • Posts: 238

Posted 30 May 2010 - 04:04 PM

It's nothing new. Flood the server with bad rcon so the admins can't ban you while you hack. I got that ip from the server console window and banned that ip. The actual hacker was either using mass proxies or had an ip switching program because his ip's rotated in seconds and were very different when they did.

#4 User is offline   MaJ Icon

  •   verified user   
  • Account: maj
  • Country:
  • Joined: 07-May 09
  • Posts: 189

Posted 31 May 2010 - 02:42 AM

This has been around for a while. I made a patch to fix it in the server binary a while back.

Here is a thread about it: http://forums.urbant...post__p__193795

Here is the most up-to-date codebase with the fix included: http://forums.urbant...-exploit-fixes/

I'd recommend you either build, or get a pre-built binary from that codebase to prevent this issue (along with some others) from happening to you in the future. :rolleyes:


#5 User is offline   Pussnboots Icon

  • Account: pussnboots
  • Joined: 01-March 10
  • Posts: 556

Posted 31 May 2010 - 04:13 PM

WTH!?? Why is my name in there!!???

EDIT: Ok.. I remember playing with both of those players recently too! But, 1, that's not my IP. 2, does that IP link to that username?

I remember seeing a botter on WC with a name changer yesterday I think it was. Matter of fact, I grabbed an admin. So is this the name changing bot guy or some other douche taking my name?

This post has been edited by Pussnboots: 31 May 2010 - 04:18 PM


#6 User is offline   V00d00 Icon

  •   verified user   
  • Account: v00d00
  • Main tag: uJ|
  • Country:
  • Joined: 11-November 08
  • Posts: 516

Posted 31 May 2010 - 06:36 PM

View PostPussnboots, on 31 May 2010 - 04:13 PM, said:

WTH!?? Why is my name in there!!???

EDIT: Ok.. I remember playing with both of those players recently too! But, 1, that's not my IP. 2, does that IP link to that username?

I remember seeing a botter on WC with a name changer yesterday I think it was. Matter of fact, I grabbed an admin. So is this the name changing bot guy or some other douche taking my name?


LoL. Its a portion of a log. The reason you are in it is because you were playing on the server. The IP info is for the guy who was flooding rcon, not you. :P

#7 User is offline   Pussnboots Icon

  • Account: pussnboots
  • Joined: 01-March 10
  • Posts: 556

Posted 01 June 2010 - 12:52 AM

It appears that the log was concatenated incorrectly. (Even though it may not be.) Strange. I don't recall seeing logs like that.meh... quirky lol

Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users

Advertisement


Copyright © 1999-2019 Frozensand Games Limited  |  All rights reserved  |  Urban Terror™ and FrozenSand™ are trademarks of Frozensand Games Limited

Frozensand Games is a Limited company registered in England and Wales. Company Reg No: 10343942