Raised This Month: $51 Target: $400
 12% 

Solve this Exploit Allied Modders


Post New Thread Reply   
AlliedModders Forum Index > SourceMod > Plugins > High-Traffic Plugins > SourceMod Anti-Cheat
Page 2 of 6 1 2 34 Last »
 
Thread Tools Display Modes
GoD-Tony
Veteran Member
GoD-Tony's Avatar
Join Date: Jul 2005
Old 11-12-2011 , 14:01   Re: Solve this Exploit Allied Modders
Reply With Quote #11
Quote:
Originally Posted by Fearts View Post
Yea I have since then. I don't see what is different about this guys issue though (except for the fact player steamids don't show, which could be a server side issue).
They do seem identical, but I'm not sure why his server is crashing because of it and others aren't.
__________________
GoD-Tony is offline
deadlyruler
Member
Join Date: Dec 2008
Old 11-12-2011 , 14:32   Re: Solve this Exploit Allied Modders
Reply With Quote #12
Here you go Tony, http://pastebin.com/xkJAhj8w
Your plugins are currently active and do not stop this attack.
Last edited by deadlyruler; 11-12-2011 at 14:37.
deadlyruler is offline
deadlyruler
Member
Join Date: Dec 2008
Old 11-12-2011 , 14:35   Re: Solve this Exploit Allied Modders
Reply With Quote #13
Also the attack i'm receiving, in the console log the steamid's do not show up (on the random generated characters). I'm not sure how these bots are connecting to the server.
deadlyruler is offline
deadlyruler
Member
Join Date: Dec 2008
Old 11-12-2011 , 14:49   Re: Solve this Exploit Allied Modders
Reply With Quote #14
Quote:
Originally Posted by Fearts View Post
Don't bother banning IP because in my logs they keep changing every so often. But the SteamIDs stay the same.

Code:
@@X]G{մ"<3451><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "L3fϒlUcT*lc
5f!̶<3452><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "L3fϒlUcT*lc
5f!̶<3452><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "!-SQsjbfĈEfiipj,<3453><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "!-SQsjbfĈEfiipj,<3453><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "ytIʌxGzF˙A#vֱG<3454><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "ytIʌxGzF˙A#vֱG<3454><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: ":O8ݢj:U\'a4+9͡<3455><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: ":O8ݢj:U\'a4+9͡<3455><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "r@?nwКO쿟rVNc\ma<3456><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "r@?nwКO쿟rVNc\ma<3456><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "knl(eAݮty<3457><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "knl(eAݮty<3457><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "BSdY&9dl[dI4bwL<3458><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "BSdY&9dl[dI4bwL<3458><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "*:u/r»i}S9|hatt<3459><STEAM_0:1:41719390><>" connected, address "60.197.109.24:24373"
L 11/03/2011 - 15:24:56: "*:u/r»i}S9|hatt<3459><STEAM_0:1:41719390><>" disconnected (reason "Connection closing")
L 11/03/2011 - 15:24:56: "@
^here what I got don't know if same person but that's his steamid


EDIT:

Code:
L 11/10/2011 - 21:12:24: "uj|$q2ϧP(3!_<917><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "c.p.lݜlT"    G<918><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "c.p.lݜlT"    G<918><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "*o4=x9yx5*Ԍ!<919><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "*o4=x9yx5*Ԍ!<919><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "2*ʰ۷gB촿c]ZXC4`Pob<920><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "2*ʰ۷gB촿c]ZXC4`Pob<920><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "!cZ44|c)8#<921><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "!cZ44|c)8#<921><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "=@B*8i?*&'a|O+z<922><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "=@B*8i?*&'a|O+z<922><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "(\k“6pcR>ದ'y0,-<923><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "(\k“6pcR>ದ'y0,-<923><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
L 11/10/2011 - 21:12:24: "c\<O3wC";!;qC-E}$<924><STEAM_0:1:11902529><>" connected, address "109.165.130.143:6939"
L 11/10/2011 - 21:12:24: "c\<O3wC";!;qC-E}$<924><STEAM_0:1:11902529><>" disconnected (reason "Connection closing")
Here's another from my other server

EDIT2:

And another:

Code:
L 11/01/2011 - 14:28:08: "|*ɋ8Ղ Aag:mbln<6214><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "|*ɋ8Ղ Aag:mbln<6214><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "Iu}<b֜|}wVN <6215><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "Iu}<b֜|}wVN <6215><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "DLO;OR05Yi8<6216><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "DLO;OR05Yi8<6216><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "zNlByv5=\a<6217><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "zNlByv5=\a<6217><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "BVIR    O^f<6218><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "BVIR    O^f<6218><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "#ʻ]K:,ʘix23/uX<6219><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "#ʻ]K:,ʘix23/uX<6219><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "[A3jW4P4V^竺?iX<6220><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "[A3jW4P4V^竺?iX<6220><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
L 11/01/2011 - 14:28:08: "ǶD0 <#8'| * 
<6221><STEAM_0:1:21620883><>" connected, address "88.2.225.59:27005"
L 11/01/2011 - 14:28:08: "ǶD0 <#8'| * 
<6221><STEAM_0:1:21620883><>" disconnected (reason "Connection closing")
Also these are a little old from 11/3/11 and up. I am not sure if I had anti connection spam loaded or if it even crashed the server at all.

Anyone who want to ban them type this into console:

Code:
sm_rcon banid 0 STEAM_0:1:21620883; sm_rcon banid 0 STEAM_0:1:11902529; sm_rcon banid 0 STEAM_0:1:41719390; sm_rcon writeid
Its quite funny because those id are on my banlist already. They are still able to attack my server.
deadlyruler is offline
deadlyruler
Member
Join Date: Dec 2008
Old 11-12-2011 , 14:51   Re: Solve this Exploit Allied Modders
Reply With Quote #15
Apparently this exploit works for ventrilo servers. They are now attacking my ventrilo server and I took a log of that. http://pastebin.com/TT2MVtPN
deadlyruler is offline
GoD-Tony
Veteran Member
GoD-Tony's Avatar
Join Date: Jul 2005
Old 11-12-2011 , 14:56   Re: Solve this Exploit Allied Modders
Reply With Quote #16
I'll have a fix for this issue coming out soon. Stay tuned!
__________________
GoD-Tony is offline
deadlyruler
Member
Join Date: Dec 2008
Old 11-12-2011 , 15:06   Re: Solve this Exploit Allied Modders
Reply With Quote #17
Quote:
Originally Posted by GoD-Tony View Post
I'll have a fix for this issue coming out soon. Stay tuned!
Thank you so much, ill be the first you test it for you!
deadlyruler is offline
GoD-Tony
Veteran Member
GoD-Tony's Avatar
Join Date: Jul 2005
Old 11-13-2011 , 01:13   Re: Solve this Exploit Allied Modders
Reply With Quote #18
Quote:
Originally Posted by deadlyruler View Post
Your plugins are currently active and do not stop this attack.
Try this version and see if it helps. Install Connect and grab the latest gamedata. Then install the plugin.

Plugin: smac_client.smx
Source: smac_client.sp

Next time your server is attacked I'd be interested to see your SMAC.log file. Thanks to asherkin for the idea!
Attached Files
File Type: smx smac_client.smx (7.9 KB, 108 views)
__________________
Last edited by GoD-Tony; 11-13-2011 at 04:19.
GoD-Tony is offline
blue zebra
BANNED
Join Date: Jun 2010
Old 11-13-2011 , 02:18   Re: Solve this Exploit Allied Modders
Reply With Quote #19
Or simple use this, with this .cfg:

http://forums.alliedmods.net/showthread.php?t=79872
Attached Files
File Type: cfg plugin.antireconnect.cfg (729 Bytes, 73 views)
Last edited by blue zebra; 11-13-2011 at 02:19.
blue zebra is offline
GoD-Tony
Veteran Member
GoD-Tony's Avatar
Join Date: Jul 2005
Old 11-13-2011 , 02:26   Re: Solve this Exploit Allied Modders
Reply With Quote #20
Quote:
Originally Posted by blue zebra View Post
Or simple use this, with this .cfg
That plugin will not help in this situation.
__________________
GoD-Tony is offline
Reply
AlliedModders Forum Index > SourceMod > Plugins > High-Traffic Plugins > SourceMod Anti-Cheat
Page 2 of 6 1 2 34 Last »

« Previous Thread | Next Thread »


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 11:08.

DMCA - Archive - Top

Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode