Hall of Shame

Here are some hacker detections that I felt were worth remembering either for lolz or because they showcase some of the bot's defenses.

New player joined
2017-04-09T10:52:50 22909.089 INF Player connected entityid=880101 name=Amyn steamid=76561198099878201 steamOwner=76561198099878201 ip=::ffff:147.30.36.178
Player 76561198099878201 Amyn detected noclipping -305 49 4152
base protection triggered for base1 of Fronti 76561197965416927 against Amyn 76561198099878201
Player 76561198099878201 Amyn detected noclipping -321 50 4172
Player 76561198099878201 Amyn detected noclipping -357 25 4184
Amyn has been sent to exile, detected near Fronti with a non-zero hacker score.
2017-04-09T11:05:05 Player 880101 76561198099878201 name: Amyn detected teleporting to -409 180 6201 distance 7447
[BANNED] Player 76561198099878201 Amyn has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances


Day 719, 16:56 76561198191946651 Mr. Bean connected
### New player joined Mr. Bean steam: 76561198191946651 owner: 76561198191946651 id: 153655 ###
Day 719, 16:56 Smegz0r: hi there! I'm editing our server manager atm so commands aren't working temporarily
2016-06-29T01:09:04 Player 153655 name: Mr. Bean detected teleporting to -124 180 339 distance 844.9906626703
Player Mr. Bean banned. Detected proxy DCSMANAGE.COM
[BANNED] Player 76561198191946651 Mr. Bean has been banned for 10 years Banned proxy
Day 719, 17:20 76561198191946651 Mr. Bean disconnected
[TIMEOUT] Player 76561198191946651 Mr. Bean has been sent to timeout for excessive inventory for a new player 762mmBullet(500)
Day 719, 17:44 Server: Sending player Mr. Bean to timeout for excessive inventory for a new player 762mmBullet(500)
Day 719, 17:44 76561198191946651 Mr. Bean disconnected
Day 719, 17:44 Smegz0r: heh hacker


New player joined
2016-08-07T17:56:50 237987.722 INF Player connected entityid=207337 name=zlul steamid=76561198159583989 steamOwner=76561198159583989 ip=166.175.57.21
2016-08-07T17:59:49 Player 207337 name: zlul detected teleporting to -2305 180 6381 distance 4433.5008841772
2016-08-07T18:06:12 Player 207337 name: zlul detected teleporting to -1592 106 1980 distance 4515.0417163078
[BANNED] Player 76561198159583989 zlul has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances.
***** DarthmanZan at position -2197 62 6441 said: possible hacker destroyed all our chests and forges
***** Silentwolfe at position -2198 63 6437 said: i just witnessed a possible hacker destory all of mine and my firend's chests. person had to have been invisable aswell
[BANNED] Player 76561198159583989 zlul has been banned for 10 years blacklisted


New player joined
2016-08-04T18:54:02 754171.162 INF Player connected entityid=198206 name=King Inioch steamid=76561198149242780 steamOwner=76561198149242780 ip=208.96.112.54
[TIMEOUT] Player 76561198149242780 King Inioch has been sent to timeout for excessive inventory for a new player 762mmBullet(500)
Moving player 76561198149242780 King Inioch to exile for excessive inventory for a new player rocket(100).
Player 76561198149242780 King Inioch detected flying (1) -6682 180 6641
2016-08-04T23:33:56 Player 198206 name: King Inioch detected teleporting to -2209 60 6444 distance 4883.2662030653
[BANNED] Player 76561198149242780 King Inioch has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances.

 

Here is a more unusual one taken from 2 of the bot's IRC channels.  In this instance the bot was new to an established server with a bad hacker problem.  This player isn't necessarily one of the hackers but he is a Chinese player using a proxy to appear as another country.

The main IRC channel:
Day 168, 22:29 76561198368104599 Babcock connected
Player Babcock's new player status has been removed because their level is 25
Chinese IP detected. Babcock 80.239.207.21
Chinese player Babcock banned.
[BANNED] Player 76561198368104599 Babcock has been banned for 10 years blacklisted
Added new Chinese IP range  80.239.207.0 - 80.239.207.31 to blacklist
Day 168, 22:55 76561198368104599 Babcock disconnected

The alerts IRC channel:
Possible proxy detected! Country changed! 76561198368104599 Babcock 80.239.207.21 old country EU new CN
Chinese IP detected. Babcock 80.239.207.21
Chinese player Babcock banned.
[BANNED] Player 76561198368104599 Babcock has been banned for 10 years blacklisted

 

The bot's new global ban list has banned its first hacker..
[BANNED] Player 76561198026088898 JMK9718 has been banned for 10 years On global ban list

 

Here is an example of a companion ban.  If several players share the same IP and one of them hacks, all in-game players with that IP are banned.  Also if a player is using a family key and gets banned, the master key is banned too.

Player connected entityid=131362 name=langlang steamid=76561198193701694 steamOwner=76561198193701694 ip=::ffff:107.6.38.67
Player 131362 76561198193701694 name: langlang detected teleporting to 1579 0 495 distance 1046
[BANNED] Player 76561198193701694 langlang has been banned for 1 week We detected unusual teleporting from you and are investigating the circumstances.
[BANNED] Player 76561198225068096 Friget has been banned for 1 week same IP as banned player


This one is too funny not to share xD (he's getting added to the bot's global ban list)

2018-03-12T16:23:27; Server; 76561198433000620 pixle_gaming connected
2018-03-12T16:27:08; [name removed]; Day 1245, 02:13 [name removed]: you still here
2018-03-12T16:27:14; pixle_gaming; Day 1245, 02:13 pixle_gaming: yep
2018-03-12T16:27:20; [name removed]; Day 1245, 02:20 [name removed]: l;ol
2018-03-12T16:27:20; [name removed]; Day 1245, 02:20 [name removed]: where
2018-03-12T16:27:26; pixle_gaming; Day 1245, 02:20 pixle_gaming: same place
2018-03-12T16:27:35; pixle_gaming; Day 1245, 02:27 pixle_gaming: made you a ladder from bot to top
2018-03-12T16:27:41; pixle_gaming; Day 1245, 02:27 pixle_gaming: wanna team now?
2018-03-12T16:27:44; [name removed]; Day 1245, 02:34 [name removed]: how u did that
2018-03-12T16:28:29; [name removed]; Day 1245, 02:55 [name removed]: lol]
2018-03-12T16:29:05; [name removed]; Day 1245, 03:10 [name removed]: how u do taht
2018-03-12T16:29:14; pixle_gaming; Day 1245, 03:10 pixle_gaming: im developer
2018-03-12T16:29:23; [name removed]; Day 1245, 03:17 [name removed]: lol\
2018-03-12T16:29:35; [name removed]; Day 1245, 03:24 [name removed]: you admin for this server
2018-03-12T16:36:18; [name removed]; Day 1245, 06:33 [name removed]: lol
2018-03-12T16:39:15; pixle_gaming; Day 1245, 07:49 pixle_gaming: lol
2018-03-12T16:39:21; pixle_gaming; Day 1245, 07:56 pixle_gaming: [CENSORED].com
2018-03-12T16:39:39; pixle_gaming; Day 1245, 08:03 pixle_gaming: all developer priveledges
2018-03-12T16:40:49; Server; Day 1245, 08:39 Server: Temp banning pixle_gaming 1 week for unexplained teleporting. An admin will investigate the circumstances.
2018-03-12T16:40:50; Server; 76561198433000620 pixle_gaming disconnected