I warn all server owners and players about this kid, he/she/it and he/she/it's friends can defend it all they want to, you can make up your own mind based on what I will show below.
Quick background - Secret|KO has been being crashed for past 2 days heavily (prior to that was another exploit, windows exploit to be specific) -- but due to the way I had things set up I was unable to debug the crashes properly -- fastforward today, and look what we find.
The character has all basic starter items in the exact same place they are when you start a character, until a few minutes ago when he logged in, leveled up to 83 (on worms) and put on a few items possibly to make the character look legit. Since it was registered, up until I accused him of crashing it, the character was naked minus the start items, the 3,000,000 starting noah still there. No clan, nothing, the character was made only to crash the server.
Last error includes "HotBloodedKillah"'s name in the server, a quick search of that character and it's account revealed the following IP address -
124.168.83.65
Quick whois -
Australia, just like our friend SilentDJ. I had ended up banning him/her/it and their IP, then by recommendation of a friend unbanned him/her/it to allow them to crash it again to try to narrow things down and figure out what the cause of the problem could have been -- server went up, and low and behold a shiny new IP appears on that account/character, this one a proxy account from California. How do we know it's a proxy? Well it's from anchorfree, lol.Code:% [whois.apnic.net node-2] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 124.168.0.0 - 124.168.255.255 netname: IINET-AU descr: iiNet Limited country: AU admin-c: NO20-AP tech-c: NO20-AP status: ALLOCATED PORTABLE mnt-by: APNIC-HM mnt-lower: MAINT-AU-IINET remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ remarks: This object can only be updated by APNIC hostmasters. remarks: To update this object, please contact APNIC remarks: hostmasters and include your organisation's account remarks: name in the subject line. remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+ changed: [email protected] 20060320 source: APNIC person: Network Operations nic-hdl: NO20-AP e-mail: [email protected] address: iiNet Limited address: Level 6, Durack Centre address: 263 Adelaide Terrace address: Perth WA 6000 phone: +61 8 9214 2222 fax-no: +61 8 9214 2211 country: AU changed: [email protected] 20110328 mnt-by: MAINT-AU-IINET source: APNIC
IP: 74.115.6.21
Now I know this isn't much proof, which is why I decided to attach these logs which show him selecting his character (after editing his info with a memory editor). If you notice the time of him doing that and the time the next selection takes place, they are minutes apart, this is due to the DOWNTIME (the server crashed after he did what he did), the gap is how long it took me to put it back up, each time.Code:NetRange: 74.115.0.0 - 74.115.7.255 CIDR: 74.115.0.0/21 OriginAS: AS26642 NetName: AFNETWORK-1 NetHandle: NET-74-115-0-0-1 Parent: NET-74-0-0-0-0 NetType: Direct Allocation Comment: http://www.anchorfree.com RegDate: 2009-06-18 Updated: 2009-06-18 Ref: http://whois.arin.net/rest/net/NET-74-115-0-0-1 OrgName: AnchorFree Inc. OrgId: ANCHO-7 Address: 450 National Ave City: Mountain View StateProv: CA PostalCode: 94043 Country: US RegDate: 2007-09-05 Updated: 2010-12-20 Comment: http://www.anchorfree.com Ref: http://whois.arin.net/rest/org/ANCHO-7 OrgAbuseHandle: ABUSE2350-ARIN OrgAbuseName: ABUSE OrgAbusePhone: +1-408-744-1002 OrgAbuseEmail: [email protected] OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE2350-ARIN OrgTechHandle: TECHN603-ARIN OrgTechName: Technical OrgTechPhone: +1-408-744-1002 OrgTechEmail: [email protected] OrgTechRef: http://whois.arin.net/rest/poc/TECHN603-ARIN RTechHandle: TECHN603-ARIN RTechName: Technical RTechPhone: +1-408-744-1002 RTechEmail: [email protected] RTechRef: http://whois.arin.net/rest/poc/TECHN603-ARIN
(I have replaced a few characters in certain names to protect the privacy of our players)
and againCode:1:6-17 : [SelCharToAgent : 1:6:17] - acname=ba***, name=S******ster, count=48, TH: 3384, Rear : 508 1:6-17 : [banana : Som******nster uid : 71 SelectCharacter : 1:6:17] result : 1 bInit : 1 1:9-37 : [SelCharToAgent : 1:9:37] - acname=b**ur, name=Di**seL, count=49, TH: 1424, Rear : 518 1:9-38 : [barbour : D**eL uid : 72 SelectCharacter : 1:9:38] result : 1 bInit : 1 1:12-26 : [SelCharToAgent : 1:12:26] - acname=hotbloodedkillah, name=HotBloodedKilla, count=50, TH: 1424, Rear : 533 1:12-27 : [hotbloodedkillah : HotBloodedKilla uid : 73 SelectCharacter : 1:12:27] result : 1 bInit : 1 2:46-23 : [SelCharToAgent : 2:46:23] - acname=ih***ds, name=Rin**n, count=0, TH: 3528, Rear : 4 2:46-23 : [ih***ids : Rin**n uid : 0 SelectCharacter : 2:46:23] result : 1 bInit : 1
Theres plenty more but theres no point in posting it all, everyone will make their own judgement.Code:23:8-52 : [SelCharToAgent : 23:8:52] - acname=al***an92, name=IGe**edI, count=95, TH: 1044, Rear : 901 23:8-52 : [alleman92 : IGe***dI uid : 106 SelectCharacter : 23:8:52] result : 1 bInit : 1 23:9-47 : [SelCharToAgent : 23:9:47] - acname=hotbloodedkillah, name=HotBloodedKilla, count=96, TH: 1044, Rear : 907 23:9-47 : [hotbloodedkillah : HotBloodedKilla uid : 107 SelectCharacter : 23:9:47] result : 1 bInit : 1 23:16-17 : [SelCharToAgent : 23:16:17] - acname=ble***990, name=Dre***, count=0, TH: 5116, Rear : 8 23:16-18 : [ble***990 : Drea*** uid : 6 SelectCharacter : 23:16:18] result : 1 bInit : 1 23:16-20 : [SelCharToAgent : 23:16:20] - acname=st**jr, name=iCom**ack, count=1, TH: 5116, Rear : 12 23:16-20 : [st***jr : iCom***ack uid : 8 SelectCharacter : 23:16:20] result : 1 bInit : 1 23:16-22 : [SelCharToAgent : 23:16:22] - acname=r0c***qq, name=Sa***ick, count=2, TH: 5116, Rear : 14
This kid SilentDJ is the type to flame server owners when their clan doesn't get it their way, and crash servers when they get angry.
Well what ever, people will be people, I still do not like you though.
People, you've been warned,
peace
P.S: SUCK MY DICK
Bookmarks