Why hasn't whoever it was used my handle to log on? Just curious.
|
:
I found it strange when "Oldnile" logged in - pretty sure his username is "OldNile", and the game's always good with name formatting. That makes me think it's name duplication that's going on here. |
So we're just going to sit here until Havoc comes?
|
Let see if Ridge rears his ugly head.
|
:
It is indeed OldNile. I still have no idea what's going on here. Apparently, some people found their way to the server, and they have usernames similar to ours. Now, has anyone actually seen these "doubles"? In person, per se. Their appearance is what I'm interested in. Do they have the generic MC skin? Did they take our skins (not sure how they would do that, but it wouldn't surprise me much anymore)? Or do they have some sort of disfigured mirror-image sort of appearance resembling ours? Some part of me still believes it plausible that this whole disturbance is actually a cunning introduction to a plot. The question is, how are these people able to gain access to the server? Of course, it would be easy to find out who's on the whitelist, but... well, I'm kinda banned. A bit. DH, if you're still relentlessly defending the server, could you check the whitelist? I think it's "/whitelist list" or something similar. |
Is there no way you guys can check the IP addresses of where people are logging in? I don't know if that would help but it would tell you if it's from inside OWF or not. (I doubt it is but I don't know.)
Alternatively, you could make a new server and start afresh but I know that all your work would be lost. =( |
Can you use the whitelist to limit users to certain IPs?
|
Guys, I've spoken to the hacker - He compromised names off the whitelist and used them to fool minecraft into thinking that he's who the names are, but he's caused no lasting damage he says. Apparently he's managed to get inside the OWF server too.
He has promised to lay off the attack though and said he was honourable enough to not do any damage. I sort of believe him having spoken to him but I'm kind of clueless... I'll unban everyone for now I guess. But if I were you I'd get the server IP off the forums and change it, and also up your security here in case the next hacker isn't so friendly. |
Who was he? And did he explain his motive to you?
|
I'd already removed the Minecraft server IP from Havoc's posts.
:
EDIT: You know you shouldn't actually have listened to Ridg3 and banned me... |
Okay, everyone is unbanned. And I hope it's the right thing to do.
Hacker dude, I know you're reading this 'cause I can see you in the guests in the "Currently active" feature, but thanks again for being honourable and open with me despite being in a position of power - Even if getting into that position wasn't very honourable to start with. I appreciate it. Again, sorry for being pissed off and stuff at the beginning but that's understandable. Good luck with whatever you do. :
|
We should make a statue in honour of Darkhoodness, or perhaps a medal.
|
Wow, things I miss when playing LotRO...
Yeah, DH deserves a statue for this (or at least posrep). Well done defending us! So are things back to normal? Should I change my Minecraft password (since I wasn't on at the time and evidently wasn't targeted)? |
Well I just checked out the server, got Creeper'd right when I spawned in, and haven't a clue where anything is, specifically the apartments. I'm gonna be logging out a lot at nighttime so people can sleep, I can see.
|
This guy even posed as Notch breifly, so he steals names rather than accounts I think - Minecraft thinks that he is who he's posing as though so gives him whatever skin is assigned to that name.
I'd change your password to be safe but I don't think he has them - He didn't need them to imitate people. But thanks for the appreciation - Although all I did was happen to be in the right place at the right time and use what the situation gave me to my advantage. I was deliberately given mod powers by the hacker so used that to stop him. It's also fortunate that he was a nice guy, all things considered. |
I think that all of the above has been a scheme by DarkHoodness in order to grab more power for himself. Evil sod.
|
:
|
:
It's not like I'll do much with it though. Game isn't fun when you cheat. |
:
|
:
Stirring up a situation and lying to people about it would be totally pointless, and I wish this never happened. What I've posted here makes me look suspicious after all, and I never wanted that. |
can someone please pm me the details?
|
:
|
Just thinking out loud, but is there any way to check the IPs of people who've connected to the server? Would be interesting to see if the guy was using the same IP every time.
e: I can't connect to the server. Is it still up/on the same IP? nvm |
Ok, I've been offline since yesterday due to some issues with my GF, so I haven't been on MC or checked the forums. Nice timing, huh? I've taken the server offline for now to backup the game world and read up on everything that happened and maybe make some sense of it. As far as anyone knows there was no damage to structures done, so that's good. I'll see about adding extra security. I'll keep you all updated. Edit 1: From what I can piece together from the logs, this is what happened. I got the IP the hacker used from the logs. Scraby was the first one to log in under this IP and proceeded to ask if anyone was online. When he got no answer he logged off again and a few minutes later OldNile (Dripik) logs in with the same IP. Then the IP is used to log in as me, then Dark, then Dripik again, then Scraby again and then Dripik again. Then Herobrine tries to log in for the first time but is disconnected because he's not whitelisted. Seconds later, Dripik logs on and adds Herobrine to the whitelist. Scraby pops up for a second, screaming a quick "?!" before the server kicks him again. A few minutes later Herobrine logs in: 2011-06-24 06:00:55 [INFO] And later: 2011-06-24 06:39:00 [INFO] At this point the log fills with warnings about the server being overloaded, which is probably some brute force attack to retreive account names or something. Then Scraby and Max find the signs: 2011-06-24 09:34:15 [INFO] 2011-06-24 09:34:20 [INFO] 2011-06-24 09:34:28 [INFO] 2011-06-24 09:34:44 [INFO] 2011-06-24 09:35:04 [INFO] 2011-06-24 09:35:17 [INFO] 2011-06-24 09:36:02 [INFO] 2011-06-24 09:36:15 [INFO] 2011-06-24 09:36:20 [INFO] 2011-06-24 09:36:41 [INFO] 2011-06-24 09:36:47 [INFO] 2011-06-24 09:36:53 [INFO] 2011-06-24 09:36:57 [INFO] 2011-06-24 09:36:58 [INFO] 2011-06-24 09:37:01 [INFO] 2011-06-24 09:37:05 [INFO] 2011-06-24 09:37:47 [INFO] 2011-06-24 09:38:22 [INFO] 2011-06-24 09:38:35 [INFO] 2011-06-24 09:38:49 [INFO] 2011-06-24 09:38:49 [INFO] 2011-06-24 09:39:11 [INFO] 2011-06-24 09:39:26 [INFO] 2011-06-24 09:39:44 [INFO] 2011-06-24 09:40:02 [INFO] 2011-06-24 09:40:06 [INFO] 2011-06-24 09:40:45 [INFO] 2011-06-24 09:41:06 [INFO] 2011-06-24 09:41:14 [INFO] 2011-06-24 09:41:20 [INFO] 2011-06-24 09:41:28 [INFO] 2011-06-24 09:41:34 [INFO] 2011-06-24 09:42:31 [INFO] 2011-06-24 09:42:57 [INFO] 2011-06-24 09:43:00 [INFO] 2011-06-24 09:43:02 [INFO] 2011-06-24 09:43:18 [INFO] 2011-06-24 09:44:31 [INFO] 2011-06-24 09:44:42 [INFO] 2011-06-24 09:44:43 [INFO] 2011-06-24 09:44:55 [INFO] 2011-06-24 09:45:07 [INFO] 2011-06-24 09:45:12 [INFO] 2011-06-24 09:45:50 [INFO] 2011-06-24 09:46:03 [INFO] This is just something that had me chuckle as I went over the logs: 2011-06-24 10:27:21 [INFO] 2011-06-24 10:27:34 [INFO] Then things get interesting. Herobrine logs in with Scraby's IP, which he has been using since he joined the server. But Scraby is online with the exact same IP, but a different port. 2011-06-24 12:20:53 [INFO] Scraby [/89.201.182.219:11890] logged in 2011-06-24 12:21:29 [INFO] Herobrine [/89.201.182.219:11891] This is where people start getting set on fire. After this Scraby logs out, Oldnile logs in with Scraby's IP and removes Herobrine from the whitelist. 2011-06-24 12:33:03 [INFO] Oldnile [/89.201.182.219:12032] logged in 2011-06-24 12:33:16 [INFO] Oldnile: Removed herobrine from white-list 2011-06-24 12:33:19 [INFO] Connection reset 2011-06-24 12:33:19 [INFO] Oldnile lost connection: disconnect.quitting Then Scraby logs back in using the first IP Herobrine logged in with. 2011-06-24 12:54:10 [INFO] Scraby [/93.137.57.239:64997] logged in Dripik logs in and bans Herobrine. Almost an hour later Scraby logs out and almost immediatly Dark logs in with Scraby's IP. At this point there are 2 Dark's online, one with a capital D and one with a small d. Dripik also logs in using Herobrine's IP. Dark goes on and off at this point, different IP each time (either his own or Herobrine's). Eventually they both get on at the same time and start discussing the weird stuff that goes on. 2011-06-24 13:54:24 [INFO] darkhoodness [/84.13.144.129:11033] logged in with entity id 20647172 at (-12.8125, 58.0, -177.4375) 2011-06-24 13:54:38 [INFO] Darkhoodness [/93.137.57.239:52575] logged in with entity id 20647303 at (-12.681003500361374, 58.0, -177.30000001192093) 2011-06-24 13:54:46 [INFO] darkhoodness [/84.13.144.129:11035] logged in with entity id 20647305 at (-12.681003500361374, 58.0, -177.30000001192093) 2011-06-24 13:55:22 [INFO] darkhoodness lost connection: disconnect.quitting 2011-06-24 13:55:22 [INFO] Connection reset 2011-06-24 13:55:24 [INFO] Disconnecting Herobrine [/93.137.57.239:52633]: You are banned from this server! 2011-06-24 13:55:42 [INFO] darkhoodness [/84.13.144.129:11080] logged in with entity id 20647308 at (-11.48798234906215, 58.0, -177.30000001192093) 2011-06-24 13:56:57 [INFO] Connection reset 2011-06-24 13:56:57 [INFO] darkhoodness lost connection: disconnect.quitting 2011-06-24 13:58:12 [INFO] darkhoodness [/84.13.144.129:11180] logged in with entity id 20649104 at (-106.9571785013635, 64.0, -84.09907146679569) 2011-06-24 13:58:43 [INFO] Darkhoodness [/93.137.57.239:52923] logged in with entity id 20649286 at (-106.96875, 64.0, -84.125) 2011-06-24 13:58:53 [INFO] Darkhoodness lost connection: disconnect.quitting 2011-06-24 13:58:53 [INFO] Connection reset 2011-06-24 13:59:07 [INFO] Scraby [/93.137.57.239:52943] logged in with entity id 20649375 at (144.6875, 81.0, 388.375) 2011-06-24 13:59:17 [INFO] 2011-06-24 13:59:29 [INFO] darkhoodness [/84.13.144.129:11196] logged in with entity id 20650174 at (-106.96875, 64.0, -84.125) 2011-06-24 13:59:29 [INFO] 2011-06-24 13:59:32 [INFO] This happens again a little later, Dark goes on and off with constant differing IP's. Then Dripik signs in again with Herobrine's IP. At this point Scraby claims his IP is being 'used'. 2011-06-24 14:15:40 [INFO] 2011-06-24 14:15:48 [INFO] 2011-06-24 14:16:03 [INFO] 2011-06-24 14:16:09 [INFO] 2011-06-24 14:16:13 [INFO] 2011-06-24 14:16:22 [INFO] Then Hula comes up with a plan to confirm ID's while fake Dripik is on. Shortly after Hula becomes the victim. 2011-06-24 14:25:03 [INFO] Oldnile [/93.137.57.239:54621] logged in with entity id 20726205 at (-355.65625, 9.0, 62.71875) 2011-06-24 14:25:12 [INFO] 2011-06-24 14:25:14 [INFO] 2011-06-24 14:25:18 [INFO] 2011-06-24 14:25:26 [INFO] 2011-06-24 14:25:33 [INFO] 2011-06-24 14:25:37 [INFO] Oldnile lost connection: disconnect.quitting 2011-06-24 14:25:37 [INFO] Connection reset 2011-06-24 14:25:46 [INFO] 2011-06-24 14:25:55 [INFO] 2011-06-24 14:26:00 [INFO] 2011-06-24 14:26:11 [INFO] Hulaabeo [/93.137.57.239:54709] logged in with entity id 20729795 at (183.36057728109233, 68.92159999847412, -10.437672099659954) 2011-06-24 14:26:15 [INFO] Hulaabeo [/70.27.44.132:61353] logged in with entity id 20729831 at (182.88974081106971, 68.0, -9.732320660071629) 2011-06-24 14:26:20 [INFO] Hulaabeo [/93.137.57.239:54712] logged in with entity id 20729928 at (182.88974081106971, 68.0, -9.732320660071629) 2011-06-24 14:26:23 [INFO] Hulaabeo [/70.27.44.132:61354] logged in with entity id 20730019 at (182.88974081106971, 68.0, -9.732320660071629) Fake Dripik then starts teleporting people all over the place. Dark is made op for some reason and starts containing damage by kicking everyone :p. Now Ridg and me log on with Herobrine's IP. Both quickly banned by Dark. Another struggle for Dark's account starts after he banned pretty much everyone. Then MinetheBacon logs on and this happens: 2011-06-24 15:41:27 [INFO] 2011-06-24 15:41:30 [INFO] 2011-06-24 15:41:44 [INFO] 2011-06-24 15:42:06 [INFO] 2011-06-24 15:42:10 [INFO] 2011-06-24 15:42:22 [INFO] 2011-06-24 15:42:26 [INFO] 2011-06-24 15:42:29 [INFO] 2011-06-24 15:42:31 [INFO] 2011-06-24 15:42:45 [INFO] 2011-06-24 15:42:57 [INFO] 2011-06-24 15:43:14 [INFO] 2011-06-24 15:43:14 [WARNING] Can't keep up! Did the system time change, or is the server overloaded? 2011-06-24 15:43:14 [INFO] 2011-06-24 15:43:16 [INFO] 2011-06-24 15:43:30 [INFO] 2011-06-24 15:43:31 [INFO] 2011-06-24 15:43:42 [INFO] 2011-06-24 15:43:43 [INFO] 2011-06-24 15:43:58 [INFO] 2011-06-24 15:44:06 [INFO] 2011-06-24 15:44:14 [INFO] 2011-06-24 15:44:24 [INFO] 2011-06-24 15:44:28 [INFO] 2011-06-24 15:44:37 [INFO] 2011-06-24 15:44:46 [INFO] 2011-06-24 15:44:50 [INFO] 2011-06-24 15:44:53 [INFO] 2011-06-24 15:44:54 [INFO] 2011-06-24 15:45:04 [INFO] 2011-06-24 15:45:10 [INFO] 2011-06-24 15:45:15 [INFO] 2011-06-24 15:45:35 [INFO] 2011-06-24 15:45:35 [INFO] 2011-06-24 15:45:49 [INFO] 2011-06-24 15:46:04 [INFO] 2011-06-24 15:46:13 [INFO] 2011-06-24 15:46:19 [INFO] 2011-06-24 15:46:26 [INFO] 2011-06-24 15:46:59 [INFO] 2011-06-24 15:47:07 [INFO] 2011-06-24 15:47:10 [INFO] 2011-06-24 15:47:15 [INFO] 2011-06-24 15:47:24 [INFO] 2011-06-24 15:47:40 [INFO] 2011-06-24 15:47:51 [INFO] 2011-06-24 15:48:20 [INFO] 2011-06-24 15:48:23 [INFO] 2011-06-24 15:48:31 [INFO] 2011-06-24 15:48:40 [INFO] 2011-06-24 15:48:56 [INFO] 2011-06-24 15:48:59 [INFO] 2011-06-24 15:49:04 [INFO] 2011-06-24 15:49:08 [INFO] 2011-06-24 15:49:08 [INFO] 2011-06-24 15:49:29 [INFO] 2011-06-24 15:49:55 [INFO] 2011-06-24 15:49:58 [INFO] 2011-06-24 15:50:09 [INFO] 2011-06-24 15:50:18 [INFO] 2011-06-24 15:50:33 [INFO] 2011-06-24 15:50:41 [INFO] 2011-06-24 15:50:44 [INFO] 2011-06-24 15:51:00 [INFO] Minethebacon lost connection: disconnect.quitting 2011-06-24 15:51:00 [INFO] Connection reset 2011-06-24 15:56:21 [INFO] Disconnecting Hulaabeo [/70.27.44.132:60443]: You are banned from this server! 2011-06-24 16:00:23 [INFO] Minethebacon [/93.137.57.239:59943] logged in with entity id 20886773 at (-45.0625, 63.0, 69.5625) 2011-06-24 16:00:32 [INFO] 2011-06-24 16:01:02 [INFO] Minethebacon lost connection: disconnect.quitting 2011-06-24 16:01:02 [SEVERE] java.net.SocketException: Socket closed 2011-06-24 16:01:02 [INFO] Connection reset 2011-06-24 16:01:02 [SEVERE] at java.net.SocketOutputStream.socketWrite(Unknown Source) 2011-06-24 16:01:02 [SEVERE] at java.net.SocketOutputStream.write(Unknown Source) 2011-06-24 16:01:02 [SEVERE] at java.io.BufferedOutputStream.flushBuffer(Unknown Source) 2011-06-24 16:01:02 [SEVERE] at java.io.BufferedOutputStream.flush(Unknown Source) 2011-06-24 16:01:02 [SEVERE] at java.io.DataOutputStream.flush(Unknown Source) 2011-06-24 16:01:02 [SEVERE] at net.minecraft.server.NetworkWriterThread.run(SourceFile:116) 2011-06-24 16:03:16 [INFO] 2011-06-24 16:03:19 [INFO] 2011-06-24 16:14:13 [INFO] Minethebacon [/93.137.57.239:60584] logged in with entity id 20888678 at (-45.0625, 63.0, 69.5625) 2011-06-24 16:14:19 [INFO] 2011-06-24 16:14:19 [INFO] 2011-06-24 16:14:22 [INFO] 2011-06-24 16:14:28 [INFO] 2011-06-24 16:14:32 [INFO] 2011-06-24 16:14:47 [INFO] 2011-06-24 16:15:22 [INFO] 2011-06-24 16:15:37 [INFO] 2011-06-24 16:15:41 [INFO] 2011-06-24 16:16:01 [INFO] 2011-06-24 16:16:06 [INFO] 2011-06-24 16:16:12 [INFO] 2011-06-24 16:16:14 [INFO] 2011-06-24 16:16:19 [INFO] 2011-06-24 16:16:26 [INFO] 2011-06-24 16:16:50 [INFO] 2011-06-24 16:17:06 [INFO] 2011-06-24 16:17:39 [INFO] 2011-06-24 16:17:48 [INFO] 2011-06-24 16:17:59 [INFO] 2011-06-24 16:18:04 [INFO] 2011-06-24 16:18:14 [INFO] 2011-06-24 16:18:25 [INFO] 2011-06-24 16:18:40 [INFO] 2011-06-24 16:19:07 [INFO] 2011-06-24 16:19:30 [INFO] 2011-06-24 16:19:49 [INFO] 2011-06-24 16:19:52 [INFO] 2011-06-24 16:20:06 [INFO] 2011-06-24 16:20:26 [INFO] 2011-06-24 16:20:33 [INFO] 2011-06-24 16:20:57 [INFO] 2011-06-24 16:21:08 [INFO] 2011-06-24 16:21:36 [INFO] 2011-06-24 16:21:52 [INFO] 2011-06-24 16:21:52 [INFO] 2011-06-24 16:22:14 [INFO] 2011-06-24 16:22:31 [INFO] 2011-06-24 16:22:41 [INFO] 2011-06-24 16:22:45 [INFO] 2011-06-24 16:22:49 [INFO] 2011-06-24 16:23:04 [INFO] 2011-06-24 16:23:37 [INFO] 2011-06-24 16:23:43 [INFO] 2011-06-24 16:23:48 [INFO] 2011-06-24 16:23:50 [INFO] 2011-06-24 16:24:03 [INFO] 2011-06-24 16:24:14 [INFO] 2011-06-24 16:24:27 [INFO] 2011-06-24 16:24:49 [INFO] 2011-06-24 16:24:54 [INFO] 2011-06-24 16:25:00 [INFO] 2011-06-24 16:25:06 [INFO] 2011-06-24 16:25:36 [INFO] 2011-06-24 16:25:44 [INFO] 2011-06-24 16:25:46 [INFO] 2011-06-24 16:25:55 [INFO] 2011-06-24 16:26:05 [INFO] 2011-06-24 16:26:08 [INFO] 2011-06-24 16:26:09 [INFO] 2011-06-24 16:26:16 [INFO] 2011-06-24 16:26:37 [INFO] 2011-06-24 16:26:59 [INFO] 2011-06-24 16:27:44 [INFO] 2011-06-24 16:27:53 [INFO] 2011-06-24 16:28:04 [INFO] 2011-06-24 16:28:12 [INFO] 2011-06-24 16:28:12 [INFO] 2011-06-24 16:28:15 [INFO] 2011-06-24 16:28:21 [INFO] 2011-06-24 16:28:34 [INFO] 2011-06-24 16:28:59 [INFO] 2011-06-24 16:29:05 [INFO] 2011-06-24 16:29:11 [INFO] 2011-06-24 16:29:22 [INFO] 2011-06-24 16:29:24 [INFO] 2011-06-24 16:29:27 [INFO] 2011-06-24 16:29:29 [INFO] 2011-06-24 16:29:53 [INFO] 2011-06-24 16:30:19 [INFO] 2011-06-24 16:30:22 [INFO] 2011-06-24 16:30:30 [INFO] 2011-06-24 16:30:38 [INFO] 2011-06-24 16:30:50 [INFO] 2011-06-24 16:30:58 [INFO] 2011-06-24 16:31:02 [INFO] 2011-06-24 16:31:12 [INFO] 2011-06-24 16:31:15 [INFO] 2011-06-24 16:31:22 [INFO] 2011-06-24 16:31:32 [INFO] 2011-06-24 16:31:47 [INFO] 2011-06-24 16:31:51 [INFO] 2011-06-24 16:31:53 [INFO] 2011-06-24 16:31:58 [INFO] 2011-06-24 16:32:16 [INFO] 2011-06-24 16:32:22 [INFO] 2011-06-24 16:32:28 [INFO] 2011-06-24 16:32:40 [INFO] 2011-06-24 16:33:04 [INFO] 2011-06-24 16:33:11 [INFO] 2011-06-24 16:33:23 [INFO] 2011-06-24 16:33:27 [INFO] 2011-06-24 16:33:42 [INFO] 2011-06-24 16:33:55 [INFO] 2011-06-24 16:34:09 [INFO] 2011-06-24 16:34:29 [INFO] 2011-06-24 16:34:34 [INFO] 2011-06-24 16:34:39 [INFO] 2011-06-24 16:34:41 [INFO] 2011-06-24 16:34:56 [INFO] 2011-06-24 16:35:01 [INFO] 2011-06-24 16:35:07 [INFO] 2011-06-24 16:35:25 [INFO] 2011-06-24 16:35:41 [INFO] 2011-06-24 16:35:47 [INFO] 2011-06-24 16:35:51 [INFO] 2011-06-24 16:36:10 [INFO] 2011-06-24 16:36:27 [INFO] 2011-06-24 16:36:55 [INFO] 2011-06-24 16:37:00 [INFO] |