GMod Server under attack
24 replies
Jul 17, 2010, 12:04 PM#1
Today, about 5 mins ago from this post, a number of users were banned by someone. I belive it's a virus or somthing. I have a feeling it's this guy
The server needs closing down.
НИК<STEAM_0:0:11622100> spawned model models/props_canal/canal_bridge03b.mdl
НИК<STEAM_0:0:11622100> spawned model models/props_canal/canal_bridge03b.mdl
Command "ulx ban", argument #2: invalid number "0'GAY" specified
Dorkslayz: BOOM! Headshot
Command "ulx ban", argument #2: invalid number "0'GAY" specified
(ADMIN) RoY4lZ (-AD-): Whos forcing commands?
Dorkslayz: Not me
(ADMIN) RoY4lZ (-AD-): Well, faking them
(VIP) Mesprite.: ?
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
Mesprite. left the game (GAY)
Mesprite.'s props have been cleaned up
Dorkslayz: LOL
YoUrMuM ^^<STEAM_0:0:20298755> spawned model models/props_phx/construct/metal_plate1x2.mdl
YoUrMuM ^^ left the game (GAY)
Dorkslayz<STEAM_0:0:24388264> spawned model models/hunter/plates/plate8x8.mdl
YoUrMuM ^^'s props have been cleaned up
Dorkslayz: Uh oh
(ADMIN) RoY4lZ (-AD-): WTF
Dorkslayz: 3 People left
(ADMIN) RoY4lZ (-AD-): FFUUU
(ADMIN) RoY4lZ (-AD-): IT'S THAT GUY
Dorkslayz: I fink yo console is having a tantrum
(ADMIN) RoY4lZ (-AD-): IT'S THAT HNK GUY
Dorkslayz: which one?
Dorkslayz left the game (MY CONSOLE IS GAY)
Dorkslayz's props have been cleaned up
The server needs closing down.
Jul 17, 2010, 12:08 PM#2
Also, it said it added someone to group "superadmin" . I couldn't find anything in the console about it though.
At first, it seemed like someone was faking commands with the @@ thing. @@ Makes red writing in the chat with noones name.
At first, it seemed like someone was faking commands with the @@ thing. @@ Makes red writing in the chat with noones name.
Jul 17, 2010, 12:10 PM#3
As a precaution, I have shut the server down until Karl can trace the source of the incident.
The server is currently OFFLINE to prevent any more damage being done.
From what I can gather, it appears someone has used an exploit on the server and has gone on a Banning spree and added themselves to the super admin group so they should be easy to find.
The server is currently OFFLINE to prevent any more damage being done.
From what I can gather, it appears someone has used an exploit on the server and has gone on a Banning spree and added themselves to the super admin group so they should be easy to find.
Jul 17, 2010, 12:13 PM#4
Anyone banned in this attack please post either on this post, Or post a Unban request in the Server Bans. Name the topic :
"YOUR NAME" - Banned during attack.
"YOUR NAME" - Banned during attack.
Jul 17, 2010, 12:16 PM#5
Well, we know mesprite, dorkslayz, and yourmum were..
(Yeah I am captain obvious xD)
(Yeah I am captain obvious xD)
Jul 17, 2010, 12:17 PM#6
I posted it because I can't memorise peoples ID's, Deth ;3
Jul 17, 2010, 12:19 PM#7
Whatever is quicker, Karl's Profile Link > ID thing, or them posting about it.
Jul 17, 2010, 12:35 PM#8
I'm unable to fix this fully yet, I can't look at much of the files since UKGame's FTP is down(???? -____________-).
Though, I found these profiles that weren't supposed to be there:
http://steamcommunity.com/profiles/76561197983509928
Though, I found these profiles that weren't supposed to be there:
http://steamcommunity.com/profiles/76561197983509928
Jul 17, 2010, 12:45 PM#9
I think that this guy, asS
http://steamcommunity.com/profiles/76561198004558663
May of told HNK to mess up the server. I banned asS earlier on for being a mingebag, Proppushing and trapping.
asS is on HNK's freinds list.
We can add asS to the list.
http://steamcommunity.com/profiles/76561198004558663
May of told HNK to mess up the server. I banned asS earlier on for being a mingebag, Proppushing and trapping.
asS is on HNK's freinds list.
We can add asS to the list.
Jul 17, 2010, 01:00 PM#10
From Mesprite
(ADMIN) RoY4lZ (-AD-): Whos forcing commands?
Dorkslayz: Not me
(ADMIN) RoY4lZ (-AD-): Well, faking them
(VIP) Mesprite.: ?
wire_expression2 undone
Disconnect: GAY.
Disconnect: GAY.
Connecting to sandbox.aprilon.net...
You have been banned from this server.
Connecting to sandbox.aprilon.net...
You have been banned from this server.
.: 13:00 - Dorkslayz: Disconnect: MY CONSOLE IS GAY.
Disconnect: MY CONSOLE IS GAY.
Connecting to 195.90.98.23:27015...
You have been banned from this server.
Connecting to 195.90.98.23:27015...
You have been banned from this server
Jul 17, 2010, 06:57 PM#11
at 7:40 PM on 17/07/2010 the server came under attack yet again and this time the map materials were been targeted here i have some pictures that i took of this event
happening
happening
Jul 17, 2010, 06:59 PM#12
at 7:40 PM on 17/07/2010 the server came under attack yet again and this time the map materials were been targeted here i have some piture that i took of this event
happening
EDIT: IM AM SORRY BUT I CANNOT FIGURE OUT THIS UPLOAD SYSTEM SO I HAVE SENT ALL OF THE EVIDENCE TO (ADMIN)"ROY4lZ(-AD-) he will
upload the file shortly
happening
EDIT: IM AM SORRY BUT I CANNOT FIGURE OUT THIS UPLOAD SYSTEM SO I HAVE SENT ALL OF THE EVIDENCE TO (ADMIN)"ROY4lZ(-AD-) he will
upload the file shortly
Jul 17, 2010, 07:01 PM#13
I belive this guy might be responsible for somthing
http://steamcommunity.com/id/imnotmm/
He was messing about with the map, and crashed the server with a click of his mouse. Litterally.
He also added me. He was talking about a script enforcer or somthing
If anyone has proof of what he was doing to the map earlier, Please Upload is ASAP.
Any proof will help, thanks.
Also, SAS your picture didn't upload.
http://steamcommunity.com/id/imnotmm/
He was messing about with the map, and crashed the server with a click of his mouse. Litterally.
He also added me. He was talking about a script enforcer or somthing
RoY4lZ (-AD-): Sir
Im Not Meow Meow: Just tell owner to put script enforcer.
Im Not Meow Meow: This will fix nearly all problems.
RoY4lZ (-AD-): Can't
Im Not Meow Meow: Why?
RoY4lZ (-AD-): Owner isn't online
Im Not Meow Meow: Crap
RoY4lZ (-AD-): Hence why I cant ask him if he put the server online
Im Not Meow Meow: Come to me i show you something..
RoY4lZ (-AD-): If he didn't
RoY4lZ (-AD-): I'll be putting it offline without a warning
Im Not Meow Meow: BAD
Im Not Meow Meow: VERY BAD
Im Not Meow Meow: :[
RoY4lZ (-AD-): ffs
RoY4lZ (-AD-): what did you do.
Im Not Meow Meow: didnt mean to do that..
RoY4lZ (-AD-): ugh.
RoY4lZ (-AD-): great
Im Not Meow Meow: But it seems i crashed your server in 1 click
If anyone has proof of what he was doing to the map earlier, Please Upload is ASAP.
Any proof will help, thanks.
Also, SAS your picture didn't upload.
Jul 17, 2010, 07:11 PM#14
Some pictures from SAS
http://img340.imageshack.us/g/gmflatgrass0018.jpg/
http://img340.imageshack.us/g/gmflatgrass0018.jpg/
Jul 18, 2010, 12:08 AM#15
That material thing happened when me and Ocfos were on, nothing happened when I told ocfos so idk if that is the same person or not. What person did it? It might ring a bell..
Also SAS the problem with that is its a system directory, not an internet directory. You needed to upload that image to a file hoster and get the link there.
Difference is,
System Directory:
Computer/C:/Program Files (x86)/Steam/Awesomeface.png
Internet Directory:
http://c2.api.ning.com/files/9-YFtblDTT ... wesome.png
Also SAS the problem with that is its a system directory, not an internet directory. You needed to upload that image to a file hoster and get the link there.
Difference is,
System Directory:
Computer/C:/Program Files (x86)/Steam/Awesomeface.png
Internet Directory:
http://c2.api.ning.com/files/9-YFtblDTT ... wesome.png
Jul 18, 2010, 11:58 AM#16
http://steamcommunity.com/id/araptor024 seems to be the real culprit. http://steamcommunity.com/profiles/76561197983509928 only received the superadmin.
I think this should be patched now.
I think this should be patched now.
Jul 18, 2010, 02:39 PM#17
That material thing happened when me and Ocfos were on
erm, can you elaborate? i can't remember me seeing something as absurd as that materials thing, when was it it happened?

and cheers Karl. hopefully we'll have no problems with this in the future
Jul 18, 2010, 02:58 PM#18
Ocfos, I think it happened when we were working on that secret room on my city duplication. We sorta stopped working on it and then someone colored the spawnblock and grass, just like shown in that picture(Maybe not the same colors..).
Jul 18, 2010, 03:57 PM#19
still can't remember seeing any material changes there, but it doesn't matter much anyway, we can just hope this issue won't reappear in the future 
Jul 18, 2010, 07:22 PM#20
The server is back online now.