I just experienced an attack from "94.113.20.11", this address is from Czech Republic, I had wireshark open during the attack and confirmed the packet said "Hi".
I dove through my player database and didn't have an exact IP match, but Czech players on my server are quite rare and there was a player that connected 1 time and played for a total of 1 minute, 40 seconds with the IP address of "94.113.13.240", both of these being the same ISP. The SteamID that is tied with the 94.113.13.240 IP is "STEAM_0:0:22769399" (76561198005804526) Just a heads up. <3 player database. - voogru. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of 1nsane Sent: Thursday, July 09, 2009 9:08 PM To: Half-Life dedicated Win32 server mailing list Subject: Re: [hlds] New crash exploit I had this. Also I'm getting complaints of some "lag exploit" on one of my servers. I know it's not caused by a plugin since I disabled the plugins and it's not caused by the network issues as 3 other servers on that box are fine. Here's a graph from HLSW while it happens: http://img199.imageshack.us/img199/5528/lags.png Fun. On Thu, Jul 9, 2009 at 8:43 PM, Arg! <[email protected]> wrote: > ive been having my server get 'stuck', process not exiting but no longer > accepting connections. Is possibly related? > > On Fri, Jul 10, 2009 at 10:16 AM, Joel R. <[email protected]> wrote: > > > This is going on in alot of the more popular servers. > > > > On Thu, Jul 9, 2009 at 2:37 PM, Nightbox <[email protected] > > >wrote: > > > > > can we submit this to steambans? > > > > > > 2009/7/9 Tony Paloma <[email protected]> > > > > > > > > > > > The second guy you mention was already banned on my servers for some > > kind > > > > of exploit that freezed one of my servers. > > > > > > > > > http://www.sourceop.com/modules.php?name=SOPBans&o=id_details&id=2133 > > > > > > > > ---------------------------------------- > > > > > Date: Thu, 9 Jul 2009 12:06:31 -0700 > > > > > From: [email protected] > > > > > To: [email protected] > > > > > Subject: [hlds] New crash exploit > > > > > > > > > > Sometime early this morning this fellow: > > > > > http://steamcommunity.com/profiles/76561198005902725 > > > > > crashed one of my servers and bragged about it, since his buddy: > > > > > http://steamcommunity.com/profiles/76561197995252712 > > > > > was banned for speedhacking. He rejoined, presumably to crash the > > > server > > > > > again, and was instantly banned for connecting as 'unconnected'. > > > > > > > > > > Log files just end, no crash dump. I was asleep, so i didn't get a > > > > > chance to check the console. I've turned on much more logging and > > > > > console dumping, so if it happens again i'll track it down. If > anyone > > > > > knows of this exploit, send me a email and i can work on a block > > > plugin. > > > > > > > > > > It was not the rcon exploit, i have a block in place for that. > > > > > > > > > > - Neph > > > > > > > > > > _______________________________________________ > > > > > To unsubscribe, edit your list preferences, or view the list > > archives, > > > > please visit: > > > > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > _________________________________________________________________ > > > > Windows LiveT: Keep your life in sync. > > > > > > http://windowslive.com/explore?ocid=TXT_TAGLM_WL_BR_life_in_synch_062009 > > > > _______________________________________________ > > > > To unsubscribe, edit your list preferences, or view the list > archives, > > > > please visit: > > > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > > > > _______________________________________________ > > > To unsubscribe, edit your list preferences, or view the list archives, > > > please visit: > > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds
