Hack Attempt !!!

32 replies [Last post]
cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:

I was watching server console on live, and in one moment i saw that message in background:

HackAttempt: 5 84.42.254.136

and few seconds later server was disconnected...
Is there it any possibility to hack a server and make it disconnect just like that Thinking:

RENA * BBSQUAD
Renatalis's picture
Offline
Joined: Nov 2005
Posts:
Re: weird server problem :/

Quote:
"The Camels Clan"I was watching server console on live, and in one moment i saw that message in background:

HackAttempt: 5 84.42.254.136

and few seconds later server was disconnected...
Is there it any possibility to hack a server and make it disconnect just like that Thinking:

Arrow Trace his address on www.ripe.net and that address is from Czech Republic and belong the hacker. Do you have last point release installed on server 1.32 C Thinking: If not, then install.
Regards

BBSQUAD CLAN
- All those moments will be lost in time, like tears in rain. Time to die...

cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:
Hack Attempt !!!

can someone point me to latest 1.32c version for linux system Thinking:

cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:
Hack Attempt !!!

btw, from the czech on the server in that strange moment was ktm*ungaro Confused

cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:
Hack Attempt !!!

I was talked with ungaro and he sauying that he dont know about it nothing...

RENA * BBSQUAD
Renatalis's picture
Offline
Joined: Nov 2005
Posts:
Hack Attempt !!!

Quote:
"The Camels Clan"btw, from the czech on the server in that strange moment was ktm*ungaro Confused

Arrow lol Laughing
Hacker will not be so stuppid to play q3 on your server and try to hack your server. Happy Somone who wanna hack your server he is not connected as player. Winking This is link for upgrade on 1.32 C. And if is that true address of hacker which have 5 attempts to hack server should be banned on all Q3 servers :!:
Best regards

BBSQUAD CLAN
- All those moments will be lost in time, like tears in rain. Time to die...

cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:
Hack Attempt !!!

btw, this ip address belong to ktm*ungaro at 100%, i talked with him, and he know i post that problem here, and why he don't defending himself here Thinking:

madbringer
Madbringer's picture
Offline
Joined: Jan 2006
Posts:
Hack Attempt !!!

Lol, it's like Johnny Mnemonic Laughing

Do you have a screenie Camel? Or maybe a piece of server log proving what you say? Those are some heavy accusations, here.

kraster
kraster's picture
Offline
Joined: Dec 2005
Posts:
Hack Attempt !!!

Quote:
ktm*ungaro at 100%,

Call him one day on a server and see his ip . And if its the same ok i think its good proof . Btw he will not change ip ... and if he didnt defend till now its because maybe he didnt visit the forum these days ... Its like i say about someone X cheats i dont see him posting . Holy macoroni he is certainly a cheater ... Patience my friend Winking

cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:
Hack Attempt !!!

[code:1]broadcast: print "^4BLUE ^7hit the fraglimit.\n"
Exit: Fraglimit hit.
red:57 blue:105
score: 69 ping: 98 client: 6 ^7.ëôí*őîçáňď.
score: 26 ping: 57 client: 2 ^7*^1ôă^7*ĺ^1X^7ăĺěXăĺě
Weapon_Stats: 2 Shotgun:2:0:0:0 G.Launcher:29:7:0:0 R.Launcher:55:4:0:0 Railgun:157:18:0:0 BFG:186:18:0:0 Given:21674 Recvd:63015 Armor:20 Health:732 TeamDmg:0
Weapon_Stats: 6 Gauntlet:1:1:0:0 Machinegun:27:3:0:0 Shotgun:8:4:0:0 G.Launcher:54:12:0:0 R.Launcher:161:9:0:0 Lightning:74:24:0:0 Railgun:163:48:0:0 Plasmagun:60:6:0:0 BFG:230:24:0:0 Given:56875 Recvd:23904 Armor:25 Health:1002 TeamDmg:0
HackAttempt: 6 84.42.254.136

-----------------------------

broadcast: print "^4BLUE ^7hit the fraglimit.\n"
Exit: Fraglimit hit.
red:33 blue:50
score: 51 ping: 101 client: 5 ^7.ëôí*őîçáňď.
score: 26 ping: 106 client: 6 ^7‚ďíéîáôď
Weapon_Stats: 5 Gauntlet:1:1:0:0 Machinegun:156:32:0:0 Shotgun:8:4:0:0 G.Launcher:60:5:0:0 R.Launcher:96:3:0:0 Lightning:69:16:0:0 Railgun:164:42:0:0 Plasmagun:18:1:0:0 BFG:90:6:0:0 Given:45817 Recvd:26924 Armor:840 Health:721 TeamDmg:0
Weapon_Stats: 6 Machinegun:200:20:0:0 Shotgun:24:9:0:0 G.Launcher:22:1:0:0 R.Launcher:15:0:0:0 Lightning:74:2:0:0 Railgun:105:21:0:0 BFG:49:5:0:0 Given:21646 Recvd:36362 Armor:275 Health:483 TeamDmg:0
HackAttempt: 5 84.42.254.136
[/code:1]

[code:1]3 : ^7.KTM*UNGARO. ^7 84.42.254.136 96CC7997EA3C38736688D9CB00CB16CF[/code:1]

This just a cut from a logfile two times was attempt that message about hacking and two times was same person, second once after hack server was disconnected, I do not know anything about similar cases, but this is very strange and irritating.
And btw Kraster, I was catched him on same server when i run him again and talked with him about that, i checked his IP same as on log, check also name from log in qname.

cml
Forum moderator Rank moderator LIVING LEGEND
camel-xp's picture
Offline
Joined: Mar 2006
Posts:
Hack Attempt !!!

I think that ungaro wants to change a map with rcon, he hack a server but when this failed he just use callvote command, here is the little cut from log file:

[code:1]HackAttempt: 6 84.42.254.136
say: ^7*^1ôă^7*ĺ^1X^7ăĺěXăĺě: ^1-- ^7+b#+x#+x#+x#! ^1-- 2
say: ^7*^1ôă^7*ĺ^1X^7ăĺěXăĺě: ^1-- ^7+b#+x#+x#+x#! ^1-- 2
say: ^7*^1ôă^7*ĺ^1X^7ăĺěXăĺě: not my map 2
Callvote: 6 MAP_RESTART broadcast: print "^xA4A4A4^x4AA5FF.ë^x3E9EFF^x3E9EFF^x969696ô^x2F97FF^
x2F97FF^x909090í*^x1188FF^x1188FF^x818181ő^x007DFB
^x007DFB^x707070î^x006CD9^x006CD9^x5D5D5Dç^x0062C4
^x0062C4^x616161á^x0057AE^x0057AE^x585858ň^x004A95
^x004A95^x535353ď.^s called a vote^1.^7 (MAP_RESTART )\n"
broadcast: print "Vote failed^1.\n"
say: ^7*^1ôă^7*ĺ^1X^7ăĺěXăĺě: ^1-- ^7+o#+p# ^1-- 2
say: ^7.ëôí*őîçáňď.: OK 6
say: ^7.ëôí*őîçáňď.: SORRY 6
say: ^7*^1ôă^7*ĺ^1X^7ăĺěXăĺě: not my map 2
say: ^7.ëôí*őîçáňď.: OK 6[/code:1]

Strange?
I dont think so, that things dont happened a lot, this is a Try to Hack rcon password, two times attempted.
Admins of all servers can open their log files and search for 'HackAttempt' string, maybe they find some of that strange attempts.
Just let me know if someone have simillar problems.