unreb Posted February 10, 2004 Share Posted February 10, 2004 Happily playing along, has happened twice so far tongiht in 1 hr both times on uk servers.... “: OWNED “ has left the game. s has joined the game. s: OWNED s has left the game. × has joined the game. ×: OWNED × has left the game. $ has joined the game. $: OWNED $ has left the game. @ has joined the game. @: OWNED @ has left the game. _ has joined the game. _: OWNED _ has left the game. ( has joined the game. (: OWNED ( has left the game. 7 has joined the game. 7: OWNED 7 has left the game. has joined the game. : OWNED has left the game. Þ has joined the game. Þ: OWNED and this goes on and on....1st time the mta client crashed, 2nd time i left b4 it did. Any thoughts?? --Unreb Link to comment
b0b0 Posted February 10, 2004 Share Posted February 10, 2004 No, the admin was testing a script that kicks players with only one character in their names. Link to comment
unreb Posted February 10, 2004 Author Share Posted February 10, 2004 There seems to be alot of admins testing scipts tonight then.....the TmM, HH, ankh servers are all emptying. Most servers are emtpy with one or two full ones according to the eye. And the script is kicking everyone.... --Unreb Link to comment
eAi Posted February 10, 2004 Share Posted February 10, 2004 This could be an exploit. I know the exploit exists, but I'v yet to see or hear of it being used on real servers... eAi Link to comment
unreb Posted February 10, 2004 Author Share Posted February 10, 2004 From a server i managed to get on briefly.... [411]mr.x: back..TmM_MaDMiKe: asshole has done it 3 times now to my server [FMJ] Oli: who the hacker? 420 joejoe: hey mad mike i just got a nasty invite to your server. was it flooding and crashing as well? VCES>Smog: who ever it is, they port scan me one more time i'll fuck em all over the wotld wide web unreb: i know it is fucking annoying i have been kicked off about 5 svrs now Bio213: hacker? TmM_MaDMiKe: ya [FMJ]MACK: yeah Here the flood would come and go, occasional bursts kicking 3 - 7 ppl VCES>Smog posted the ip the flood was (apparently) coming from [81.209.148.112]...the flood then changed from OWNED to ... @: You really think thats my IP, Smog? @ has left the game. N has joined the game. N has left the game. s has joined the game. s has left the game. has joined the game. has left the game. y has joined the game. y: You really think thats my IP, Smog? y has left the game. ˆ has joined the game. ˆ has left the game. Ì has joined the game. Ì: You really think thats my IP, Smog? Ì has left the game. has joined the game. has left the game. p has joined the game. p has left the game. ¥ has joined the game. ¥: You really think thats my IP, Smog? ¥ has left the game. , has joined the game. ,: You really think thats my IP, Smog? , has left the game. everyone was kicked then --Unreb Reporting live ..... Link to comment
Kent747 Posted February 10, 2004 Share Posted February 10, 2004 we are aware and are currently working on a fix. Link to comment
Guest Posted February 11, 2004 Share Posted February 11, 2004 The really ip from the Hacker/Flooder is >>> 217.8.144.176 and the another ip is a tarn ip he has a root-server from a hoster and have start a script what connect to the MTa Server's logged in and logged out in sek. and that make the Server or People to crash we have send a e-mail with descr. ect. on the hoster and have say , she have stop the script from the flooder !! i Hope this working now !!!! The scrip is write in php under the folder /poll/index.php Link to comment
Harry Posted February 13, 2004 Share Posted February 13, 2004 I recorded some more ip's from wich my got attacked. Twice from one, once from the second. Luckily there is iptables DROP Link to comment
Guest Posted February 15, 2004 Share Posted February 15, 2004 i got an idea why dont we tell rockstar or take2 they will sort it oh wait this is MTA not GTA oh well we could give it a try OR we could put passwords on the servers but i dont know Link to comment
Dgtadude Posted February 15, 2004 Share Posted February 15, 2004 i have a felling that this person is using a proxy server in some of these ip's cause some of them i recgonize Link to comment
Recommended Posts