GMod Server under attack

[RoY4lZ]

Today, about 5 mins ago from this post, a number of users were banned by someone. I belive it's a virus or somthing. I have a feeling it's this guy

НИК<STEAM_0:0:11622100> spawned model models/props_canal/canal_bridge03b.mdl
НИК<STEAM_0:0:11622100> spawned model models/props_canal/canal_bridge03b.mdl

Command "ulx ban", argument #2: invalid number "0'GAY" specified
Dorkslayz: BOOM! Headshot
Command "ulx ban", argument #2: invalid number "0'GAY" specified
(ADMIN) RoY4lZ (-AD-): Whos forcing commands?
Dorkslayz: Not me
(ADMIN) RoY4lZ (-AD-): Well, faking them
(VIP) Mesprite.: ?
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
wire_expression2 undone
Mesprite. left the game (GAY)
Mesprite.'s props have been cleaned up
Dorkslayz: LOL
YoUrMuM ^^<STEAM_0:0:20298755> spawned model models/props_phx/construct/metal_plate1x2.mdl
YoUrMuM ^^ left the game (GAY)
Dorkslayz<STEAM_0:0:24388264> spawned model models/hunter/plates/plate8x8.mdl
YoUrMuM ^^'s props have been cleaned up
Dorkslayz: Uh oh
(ADMIN) RoY4lZ (-AD-): WTF
Dorkslayz: 3 People left
(ADMIN) RoY4lZ (-AD-): FFUUU
(ADMIN) RoY4lZ (-AD-): IT'S THAT GUY
Dorkslayz: I fink yo console is having a tantrum
(ADMIN) RoY4lZ (-AD-): IT'S THAT HNK GUY
Dorkslayz: which one?
Dorkslayz left the game (MY CONSOLE IS GAY)
Dorkslayz's props have been cleaned up

The server needs closing down.

Last edited by RoY4lZ on 17 Jul 2010, 13:20, edited 2 times in total.

[RoY4lZ]

Also, it said it added someone to group "superadmin" . I couldn't find anything in the console about it though.

At first, it seemed like someone was faking commands with the @@ thing. @@ Makes red writing in the chat with noones name.

[Jamza]

As a precaution, I have shut the server down until Karl can trace the source of the incident.

The server is currently OFFLINE to prevent any more damage being done.

From what I can gather, it appears someone has used an exploit on the server and has gone on a Banning spree and added themselves to the super admin group so they should be easy to find.

Last edited by Jamza on 17 Jul 2010, 13:14, edited 1 time in total.

[RoY4lZ]

Anyone banned in this attack please post either on this post, Or post a Unban request in the Server Bans. Name the topic :
"YOUR NAME" - Banned during attack.

[Dethbyelf]

Well, we know mesprite, dorkslayz, and yourmum were..
(Yeah I am captain obvious xD)

[RoY4lZ]

I posted it because I can't memorise peoples ID's, Deth ;3

[Dethbyelf]

Whatever is quicker, Karl's Profile Link > ID thing, or them posting about it.

[Karl]

I'm unable to fix this fully yet, I can't look at much of the files since UKGame's FTP is down(???? -____________-).

Though, I found these profiles that weren't supposed to be there:
http://steamcommunity.com/profiles/76561197983509928

[RoY4lZ]

I think that this guy, asS
http://steamcommunity.com/profiles/76561198004558663
May of told HNK to mess up the server. I banned asS earlier on for being a mingebag, Proppushing and trapping.
asS is on HNK's freinds list.

We can add asS to the list.

[RoY4lZ]

From Mesprite

(ADMIN) RoY4lZ (-AD-): Whos forcing commands?
Dorkslayz: Not me
(ADMIN) RoY4lZ (-AD-): Well, faking them
(VIP) Mesprite.: ?
wire_expression2 undone
Disconnect: GAY.
Disconnect: GAY.

Connecting to sandbox.aprilon.net...
You have been banned from this server.

Connecting to sandbox.aprilon.net...
You have been banned from this server.

.: 13:00 - Dorkslayz: Disconnect: MY CONSOLE IS GAY.
Disconnect: MY CONSOLE IS GAY.

Connecting to 195.90.98.23:27015...
You have been banned from this server.

Connecting to 195.90.98.23:27015...
You have been banned from this server

[sas-delta-5]

at 7:40 PM on 17/07/2010 the server came under attack yet again and this time the map materials were been targeted here i have some pictures that i took of this event
happening [img]C:\Program%20Files\Steam\steamapps\qwadboy\garrysmod\garrysmod\screenshots[/img]

Last edited by sas-delta-5 on 17 Jul 2010, 20:11, edited 1 time in total.

[sas-delta-5]

[quote="sas-delta-5"]at 7:40 PM on 17/07/2010 the server came under attack yet again and this time the map materials were been targeted here i have some piture that i took of this event
happening

EDIT: IM AM SORRY BUT I CANNOT FIGURE OUT THIS UPLOAD SYSTEM SO I HAVE SENT ALL OF THE EVIDENCE TO (ADMIN)"ROY4lZ(-AD-) he will
upload the file shortly

Last edited by sas-delta-5 on 17 Jul 2010, 20:08, edited 1 time in total.

[RoY4lZ]

I belive this guy might be responsible for somthing
http://steamcommunity.com/id/imnotmm/
He was messing about with the map, and crashed the server with a click of his mouse. Litterally.
He also added me. He was talking about a script enforcer or somthing

RoY4lZ (-AD-): Sir
Im Not Meow Meow: Just tell owner to put script enforcer.
Im Not Meow Meow: This will fix nearly all problems.
RoY4lZ (-AD-): Can't
Im Not Meow Meow: Why?
RoY4lZ (-AD-): Owner isn't online
Im Not Meow Meow: Crap
RoY4lZ (-AD-): Hence why I cant ask him if he put the server online
Im Not Meow Meow: Come to me i show you something..
RoY4lZ (-AD-): If he didn't
RoY4lZ (-AD-): I'll be putting it offline without a warning
Im Not Meow Meow: BAD
Im Not Meow Meow: VERY BAD
Im Not Meow Meow: :[
RoY4lZ (-AD-): ffs
RoY4lZ (-AD-): what did you do.
Im Not Meow Meow: didnt mean to do that..
RoY4lZ (-AD-): ugh.
RoY4lZ (-AD-): great
Im Not Meow Meow: But it seems i crashed your server in 1 click

If anyone has proof of what he was doing to the map earlier, Please Upload is ASAP.
Any proof will help, thanks.

Also, SAS your picture didn't upload.

Last edited by RoY4lZ on 17 Jul 2010, 20:14, edited 1 time in total.

[RoY4lZ]

Some pictures from SAS
http://img340.imageshack.us/g/gmflatgrass0018.jpg/

[Dethbyelf]

That material thing happened when me and Ocfos were on, nothing happened when I told ocfos so idk if that is the same person or not. What person did it? It might ring a bell..
Also SAS the problem with that is its a system directory, not an internet directory. You needed to upload that image to a file hoster and get the link there.
Difference is,
System Directory:
Computer/C:/Program Files (x86)/Steam/Awesomeface.png
Internet Directory:
http://c2.api.ning.com/files/9-YFtblDTT ... wesome.png