GMod Server under attack

17 Jul 2010, 13:04

Post #1

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

Today, about 5 mins ago from this post, a number of users were banned by someone. I belive it's a virus or somthing. I have a feeling it's this guy

Quote:

НИК<STEAM_0:0:11622100> spawned model models/props_canal/canal_bridge03b.mdl
НИК<STEAM_0:0:11622100> spawned model models/props_canal/canal_bridge03b.mdl

Quote:

Command "ulx ban", argument #2: invalid number "0'GAY" specified
Dorkslayz: BOOM! Headshot
Command "ulx ban", argument #2: invalid number "0'GAY" specified
(ADMIN) RoY4lZ (-AD-): Whos forcing commands?
Dorkslayz: Not me
(ADMIN) RoY4lZ (-AD-): Well, faking them
(VIP) Mesprite.: ?
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
Mesprite. left the game (GAY)
Mesprite.'s props have been cleaned up
Dorkslayz: LOL
YoUrMuM ^^<STEAM_0:0:20298755> spawned model models/props_phx/construct/metal_plate1x2.mdl
YoUrMuM ^^ left the game (GAY)
Dorkslayz<STEAM_0:0:24388264> spawned model models/hunter/plates/plate8x8.mdl
YoUrMuM ^^'s props have been cleaned up
Dorkslayz: Uh oh
(ADMIN) RoY4lZ (-AD-): WTF
Dorkslayz: 3 People left
(ADMIN) RoY4lZ (-AD-): FFUUU
(ADMIN) RoY4lZ (-AD-): IT'S THAT GUY
Dorkslayz: I fink yo console is having a tantrum
(ADMIN) RoY4lZ (-AD-): IT'S THAT HNK GUY
Dorkslayz: which one?
Dorkslayz left the game (MY CONSOLE IS GAY)
Dorkslayz's props have been cleaned up

The server needs closing down.

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 13:08

Post #2

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

Also, it said it added someone to group "superadmin" . I couldn't find anything in the console about it though.

At first, it seemed like someone was faking commands with the @@ thing. @@ Makes red writing in the chat with noones name.

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 13:10

Post #3

Jamza

Server Admin

11 Aug 2009, 20:12
1264 Posts

As a precaution, I have shut the server down until Karl can trace the source of the incident.

The server is currently OFFLINE to prevent any more damage being done.

From what I can gather, it appears someone has used an exploit on the server and has gone on a Banning spree and added themselves to the super admin group so they should be easy to find.

17 Jul 2010, 13:13

Post #4

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

Anyone banned in this attack please post either on this post, Or post a Unban request in the Server Bans. Name the topic :
"YOUR NAME" - Banned during attack.

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 13:16

Post #5

Dethbyelf

30 Nov 2009, 22:56
559 Posts

Well, we know mesprite, dorkslayz, and yourmum were..
(Yeah I am captain obvious xD)

_________________
WHERES MY FUCKING COOKIE!?
http://cristgaming.com/pirate.swf

17 Jul 2010, 13:17

Post #6

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

I posted it because I can't memorise peoples ID's, Deth ;3

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 13:19

Post #7

Dethbyelf

30 Nov 2009, 22:56
559 Posts

Whatever is quicker, Karl's Profile Link > ID thing, or them posting about it.

_________________
WHERES MY FUCKING COOKIE!?
http://cristgaming.com/pirate.swf

17 Jul 2010, 13:35

Post #8

Karl

i play dota ok

11 Sep 2001, 19:41
1994 Posts

I'm unable to fix this fully yet, I can't look at much of the files since UKGame's FTP is down(???? -____________-).

Though, I found these profiles that weren't supposed to be there:
http://steamcommunity.com/profiles/76561197983509928

_________________
E-mail karl@aprilon.org

17 Jul 2010, 13:45

Post #9

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

I think that this guy, asS
http://steamcommunity.com/profiles/76561198004558663
May of told HNK to mess up the server. I banned asS earlier on for being a mingebag, Proppushing and trapping.
asS is on HNK's freinds list.

We can add asS to the list.

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 14:00

Post #10

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

From Mesprite

Quote:

(ADMIN) RoY4lZ (-AD-): Whos forcing commands?
Dorkslayz: Not me
(ADMIN) RoY4lZ (-AD-): Well, faking them
(VIP) Mesprite.: ?
wire_expression2 undone
Disconnect: GAY.
Disconnect: GAY.

Connecting to sandbox.aprilon.net...
You have been banned from this server.

Connecting to sandbox.aprilon.net...
You have been banned from this server.

Quote:

.: 13:00 - Dorkslayz: Disconnect: MY CONSOLE IS GAY.
Disconnect: MY CONSOLE IS GAY.

Connecting to 195.90.98.23:27015...
You have been banned from this server.

Connecting to 195.90.98.23:27015...
You have been banned from this server

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 19:57

Post #11

sas-delta-5

VIP

16 Jun 2010, 07:40
3 Posts

at 7:40 PM on 17/07/2010 the server came under attack yet again and this time the map materials were been targeted here i have some pictures that i took of this event
happening [img]C:\Program%20Files\Steam\steamapps\qwadboy\garrysmod\garrysmod\screenshots[/img]

17 Jul 2010, 19:59

Post #12

sas-delta-5

VIP

16 Jun 2010, 07:40
3 Posts

[quote="sas-delta-5"]at 7:40 PM on 17/07/2010 the server came under attack yet again and this time the map materials were been targeted here i have some piture that i took of this event
happening

EDIT: IM AM SORRY BUT I CANNOT FIGURE OUT THIS UPLOAD SYSTEM SO I HAVE SENT ALL OF THE EVIDENCE TO (ADMIN)"ROY4lZ(-AD-) he will
upload the file shortly

17 Jul 2010, 20:01

Post #13

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

I belive this guy might be responsible for somthing
http://steamcommunity.com/id/imnotmm/
He was messing about with the map, and crashed the server with a click of his mouse. Litterally.
He also added me. He was talking about a script enforcer or somthing

Quote:

RoY4lZ (-AD-): Sir
Im Not Meow Meow: Just tell owner to put script enforcer.
Im Not Meow Meow: This will fix nearly all problems.
RoY4lZ (-AD-): Can't
Im Not Meow Meow: Why?
RoY4lZ (-AD-): Owner isn't online
Im Not Meow Meow: Crap
RoY4lZ (-AD-): Hence why I cant ask him if he put the server online
Im Not Meow Meow: Come to me i show you something..
RoY4lZ (-AD-): If he didn't
RoY4lZ (-AD-): I'll be putting it offline without a warning
Im Not Meow Meow: BAD
Im Not Meow Meow: VERY BAD
Im Not Meow Meow: :[
RoY4lZ (-AD-): ffs
RoY4lZ (-AD-): what did you do.
Im Not Meow Meow: didnt mean to do that..
RoY4lZ (-AD-): ugh.
RoY4lZ (-AD-): great
Im Not Meow Meow: But it seems i crashed your server in 1 click

If anyone has proof of what he was doing to the map earlier, Please Upload is ASAP.
Any proof will help, thanks.

Also, SAS your picture didn't upload.

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

17 Jul 2010, 20:11

Post #14

RoY4lZ

Server Admin

27 Dec 2009, 10:09
618 Posts

Some pictures from SAS
http://img340.imageshack.us/g/gmflatgrass0018.jpg/

_________________
Known as RoY4lZ on Steam and Minecraft
Known as Ponystroker69 on Origin.

18 Jul 2010, 01:08

Post #15

Dethbyelf

30 Nov 2009, 22:56
559 Posts

That material thing happened when me and Ocfos were on, nothing happened when I told ocfos so idk if that is the same person or not. What person did it? It might ring a bell..
Also SAS the problem with that is its a system directory, not an internet directory. You needed to upload that image to a file hoster and get the link there.
Difference is,
System Directory:
Computer/C:/Program Files (x86)/Steam/Awesomeface.png
Internet Directory:
http://c2.api.ning.com/files/9-YFtblDTT ... wesome.png

_________________
WHERES MY FUCKING COOKIE!?
http://cristgaming.com/pirate.swf