Here is the latest ratard to attack a URT server:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Hit: 11 10 2 14: Puss-N-Boots hit UnAnnouced in the Torso
] Kill: 10 11 28: Puss-N-Boots killed UnAnnouced by UT_MOD_SR8
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] say: 11 UnAnnouced: damn
] UnAnnouced^3: damn
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] say: 10 Puss-N-Boots: :D n1
] Puss-N-Boots^3: :D n1
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Item: 10 ut_weapon_deagle
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Item: 10 ut_weapon_sr8
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Hit: 12 10 3 3: Puss-N-Boots hit Me in the Kevlar
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
cvarlist
] Bad rcon from 81.84.52.12:1825:
May want to go ahead and ban that ip...
Advertisement
Page 1 of 1
Rcon Flood
#2
Posted 30 May 2010 - 09:09 AM
this is a new hack?
i have problem with rcon stel hack but i update some files
if is a dynamic ip how to ban hi,m
i have problem with rcon stel hack but i update some files
if is a dynamic ip how to ban hi,m
#3
Posted 30 May 2010 - 04:04 PM
It's nothing new. Flood the server with bad rcon so the admins can't ban you while you hack. I got that ip from the server console window and banned that ip. The actual hacker was either using mass proxies or had an ip switching program because his ip's rotated in seconds and were very different when they did.
#4
Posted 31 May 2010 - 02:42 AM
This has been around for a while. I made a patch to fix it in the server binary a while back.
Here is a thread about it: http://forums.urbant...post__p__193795
Here is the most up-to-date codebase with the fix included: http://forums.urbant...-exploit-fixes/
I'd recommend you either build, or get a pre-built binary from that codebase to prevent this issue (along with some others) from happening to you in the future.
Here is a thread about it: http://forums.urbant...post__p__193795
Here is the most up-to-date codebase with the fix included: http://forums.urbant...-exploit-fixes/
I'd recommend you either build, or get a pre-built binary from that codebase to prevent this issue (along with some others) from happening to you in the future.
#5
Posted 31 May 2010 - 04:13 PM
WTH!?? Why is my name in there!!???
EDIT: Ok.. I remember playing with both of those players recently too! But, 1, that's not my IP. 2, does that IP link to that username?
I remember seeing a botter on WC with a name changer yesterday I think it was. Matter of fact, I grabbed an admin. So is this the name changing bot guy or some other douche taking my name?
EDIT: Ok.. I remember playing with both of those players recently too! But, 1, that's not my IP. 2, does that IP link to that username?
I remember seeing a botter on WC with a name changer yesterday I think it was. Matter of fact, I grabbed an admin. So is this the name changing bot guy or some other douche taking my name?
This post has been edited by Pussnboots: 31 May 2010 - 04:18 PM
Advertisement
#6
Posted 31 May 2010 - 06:36 PM
Pussnboots, on 31 May 2010 - 04:13 PM, said:
WTH!?? Why is my name in there!!???
EDIT: Ok.. I remember playing with both of those players recently too! But, 1, that's not my IP. 2, does that IP link to that username?
I remember seeing a botter on WC with a name changer yesterday I think it was. Matter of fact, I grabbed an admin. So is this the name changing bot guy or some other douche taking my name?
EDIT: Ok.. I remember playing with both of those players recently too! But, 1, that's not my IP. 2, does that IP link to that username?
I remember seeing a botter on WC with a name changer yesterday I think it was. Matter of fact, I grabbed an admin. So is this the name changing bot guy or some other douche taking my name?
LoL. Its a portion of a log. The reason you are in it is because you were playing on the server. The IP info is for the guy who was flooding rcon, not you. :P
#7
Posted 01 June 2010 - 12:52 AM
It appears that the log was concatenated incorrectly. (Even though it may not be.) Strange. I don't recall seeing logs like that.meh... quirky lol
Page 1 of 1
1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users
Advertisement