Hall of Shame

Here are some hacker detections that I felt were worth remembering either for lolz or because they showcase some of the bot's defenses.

New player joined
2017-04-09T10:52:50 22909.089 INF Player connected entityid=880101 name=Amyn steamid=76561198099878201 steamOwner=76561198099878201 ip=::ffff:147.30.36.178
Player 76561198099878201 Amyn detected noclipping -305 49 4152
base protection triggered for base1 of Fronti 76561197965416927 against Amyn 76561198099878201
Player 76561198099878201 Amyn detected noclipping -321 50 4172
Player 76561198099878201 Amyn detected noclipping -357 25 4184
Amyn has been sent to exile, detected near Fronti with a non-zero hacker score.
2017-04-09T11:05:05 Player 880101 76561198099878201 name: Amyn detected teleporting to -409 180 6201 distance 7447
[BANNED] Player 76561198099878201 Amyn has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances


Day 719, 16:56 76561198191946651 Mr. Bean connected
### New player joined Mr. Bean steam: 76561198191946651 owner: 76561198191946651 id: 153655 ###
Day 719, 16:56 Smegz0r: hi there! I'm editing our server manager atm so commands aren't working temporarily
2016-06-29T01:09:04 Player 153655 name: Mr. Bean detected teleporting to -124 180 339 distance 844.9906626703
Player Mr. Bean banned. Detected proxy DCSMANAGE.COM
[BANNED] Player 76561198191946651 Mr. Bean has been banned for 10 years Banned proxy
Day 719, 17:20 76561198191946651 Mr. Bean disconnected
[TIMEOUT] Player 76561198191946651 Mr. Bean has been sent to timeout for excessive inventory for a new player 762mmBullet(500)
Day 719, 17:44 Server: Sending player Mr. Bean to timeout for excessive inventory for a new player 762mmBullet(500)
Day 719, 17:44 76561198191946651 Mr. Bean disconnected
Day 719, 17:44 Smegz0r: heh hacker


New player joined
2016-08-07T17:56:50 237987.722 INF Player connected entityid=207337 name=zlul steamid=76561198159583989 steamOwner=76561198159583989 ip=166.175.57.21
2016-08-07T17:59:49 Player 207337 name: zlul detected teleporting to -2305 180 6381 distance 4433.5008841772
2016-08-07T18:06:12 Player 207337 name: zlul detected teleporting to -1592 106 1980 distance 4515.0417163078
[BANNED] Player 76561198159583989 zlul has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstances.
***** DarthmanZan at position -2197 62 6441 said: possible hacker destroyed all our chests and forges
***** Silentwolfe at position -2198 63 6437 said: i just witnessed a possible hacker destory all of mine and my firend's chests. person had to have been invisable aswell
[BANNED] Player 76561198159583989 zlul has been banned for 10 years blacklisted


New player joined
2016-08-04T18:54:02 754171.162 INF Player connected entityid=198206 name=King Inioch steamid=76561198149242780 steamOwner=76561198149242780 ip=208.96.112.54
[TIMEOUT] Player 76561198149242780 King Inioch has been sent to timeout for excessive inventory for a new player 762mmBullet(500)
Moving player 76561198149242780 King Inioch to exile for excessive inventory for a new player rocket(100).
Player 76561198149242780 King Inioch detected flying (1) -6682 180 6641
2016-08-04T23:33:56 Player 198206 name: King Inioch detected teleporting to -2209 60 6444 distance 4883.2662030653
[BANNED] Player 76561198149242780 King Inioch has been banned for 1 day We detected unusual teleporting from you and are investigating the circumstance

 

Here is a more unusual one taken from 2 of the bot's IRC channels.  In this instance the bot was new to an established server with a bad hacker problem.  This player isn't necessarily one of the hackers but he is a Chinese player using a proxy to appear as another country.

The main IRC channel:
Day 168, 22:29 76561198368104599 Babcock connected
Player Babcock's new player status has been removed because their level is 25
Chinese IP detected. Babcock 80.239.207.21
Chinese player Babcock banned.
[BANNED] Player 76561198368104599 Babcock has been banned for 10 years blacklisted
Added new Chinese IP range  80.239.207.0 - 80.239.207.31 to blacklist
Day 168, 22:55 76561198368104599 Babcock disconnected

The alerts IRC channel:
Possible proxy detected! Country changed! 76561198368104599 Babcock 80.239.207.21 old country EU new CN
Chinese IP detected. Babcock 80.239.207.21
Chinese player Babcock banned.
[BANNED] Player 76561198368104599 Babcock has been banned for 10 years blacklisted

 

The bot's new global ban list has banned its first hacker..
[BANNED] Player 76561198026088898 JMK9718 has been banned for 10 years On global ban list

 

Here is an example of a companion ban.  If several players share the same IP and one of them hacks, all in-game players with that IP are banned.  Also if a player is using a family key and gets banned, the master key is banned too.

Player connected entityid=131362 name=langlang steamid=76561198193701694 steamOwner=76561198193701694 ip=::ffff:107.6.38.67
Player 131362 76561198193701694 name: langlang detected teleporting to 1579 0 495 distance 1046
[BANNED] Player 76561198193701694 langlang has been banned for 1 week We detected unusual teleporting from you and are investigating the circumstances.
[BANNED] Player 76561198225068096 Friget has been banned for 1 week same IP as banned player