I am running a very new server, as some of you know from my recent posts.

I have recently had users telling me their passwords are being stolen. I tend to believe them after checking the logs. Aside from changing the port and admin passwords, is there ANY way possible someone is hacking the game and getting these passwords? Or are they just good guessers of bad passwords?

Any help would be great. Have any of you had this problem? I am close to adding the IP of the offender on here and asking everyone blocks it from their server.

Thanks much,
-Kevin

I have been playing on your server as "Habbit"
i dont know of anyone stealing passwords,
are these passwords the ones for the game or there pass for there personal accounts? and yes if you have logs and proof
yes it would be a good thing to pass that info to other servers
to try and stop it, unless you think its me? lol
i also wanted to chat at you about your game edits
and some things i would like to see.

GodZilla "Habbit"

Well, check the IP logs, if a different IP logs into an account, something to check.

As to password theft, if people often use a same password.....

Jhereg

more than likely you are not being hacked. if you DO have *proof* of someone from the same IP under 2 diff names in the same game. go ahead and post it, even if he isn't guessing other's passwords, he is atleast duping, which most people look down upon anyway.

Slim

I have looked through the logs, and have decided looking through logs is stupid. It is terrible that some moron does this. Too bad I wanted to start a tradewars game for people to try. I am bannig the IPs: 69.172.87.196 and 66.242.241.62 they belong to a player named Kirtiz. He had about 3 - 4 other accounts, plus the ones he stole. He also made numerous attempts to break into the SysOp (my) account. I would reccomend you all band him as well. Or if you are friends with him ask him what his problem is. Cause I would like to know.

As far as my server, I don't know if I will continue to run it. I will try to speak with the folks in the games to figure where it should go from here. There doesn't seem like there's much of apoint when everyone makes 3 traders and wants to cheat. I am going to include a couple pieces of the logs for you all to read so you know I am not making false accusations.

I have greatly reduced the log size, and pulled out only the interesting info.

12/03/2004 18:32:07 - TRACE: Node 3 IP: 66.242.241.62 Login
12/03/2004 18:32:11 - TRACE: Node 3 IP: 66.242.241.62 Name kirtiz
12/03/2004 18:32:13 - TRACE: Node 3 IP: 66.242.241.62 Enter Game B
12/03/2004 18:34:18 - TRACE: Node 3 IP: 66.242.241.62 Exit Game B
12/03/2004 18:34:18 - TRACE: Node 3 IP: 66.242.241.62 Logout

12/03/2004 19:05:10 - TRACE: Node 1 IP: 66.242.241.62 Login
12/03/2004 19:05:18 - TRACE: Node 1 IP: 66.242.241.62 Name Trade Warrior
12/03/2004 19:05:19 - TRACE: Node 1 IP: 66.242.241.62 Enter Game B
12/03/2004 19:32:51 - TRACE: Node 1 IP: 66.242.241.62 Exit Game B
12/03/2004 19:32:51 - TRACE: Node 1 IP: 66.242.241.62 Logout

12/03/2004 19:32:56 - TRACE: Node 1 IP: 66.242.241.62 Login
12/03/2004 19:33:02 - TRACE: Node 1 IP: 66.242.241.62 Name Captain Planet
12/03/2004 19:33:03 - TRACE: Node 1 IP: 66.242.241.62 Enter Game B
12/03/2004 19:33:34 - TRACE: Node 1 IP: 66.242.241.62 Exit Game B
12/03/2004 19:33:34 - TRACE: Node 1 IP: 66.242.241.62 Logout

12/03/2004 19:33:44 - TRACE: Node 1 IP: 66.242.241.62 Login
12/03/2004 19:33:49 - TRACE: Node 1 IP: 66.242.241.62 Name Planet
12/03/2004 19:33:50 - TRACE: Node 1 IP: 66.242.241.62 Enter Game B
12/03/2004 19:55:05 - TRACE: Node 1 IP: 66.242.241.62 Exit Game B
12/03/2004 19:55:07 - TRACE: Node 1 IP: 66.242.241.62 Logout

This is one player who claims the account was stolen notice the original IP and later ones:

12/02/2004 22:27:52 - TRACE: Node 3 IP: 209.83.11.67 Login
12/02/2004 22:28:08 - TRACE: Node 3 IP: 209.83.11.67 Name Madman
12/02/2004 22:28:26 - TRACE: Node 3 IP: 209.83.11.67 Enter Game B
12/02/2004 22:58:19 - TRACE: Node 3 IP: 209.83.11.67 Exit Game B
12/02/2004 22:58:30 - TRACE: Node 3 IP: 209.83.11.67 Logout

12/04/2004 13:27:35 - TRACE: Node 2 IP: 66.242.241.62 Login
12/04/2004 13:27:36 - TRACE: Node 2 IP: 66.242.241.62 Name kirtiz
12/04/2004 13:27:36 - TRACE: Node 2 IP: 66.242.241.62 Enter Game B
12/04/2004 13:28:02 - TRACE: Node 2 IP: 66.242.241.62 Exit Game B
12/04/2004 13:28:02 - TRACE: Node 2 IP: 66.242.241.62 Logout
12/04/2004 13:28:06 - TRACE: Node 2 IP: Unknown Connect Player
12/04/2004 13:28:06 - TRACE: Node 2 IP: 66.242.241.62 Login
12/04/2004 13:28:08 - TRACE: Node 2 IP: 66.242.241.62 Name madman
12/04/2004 13:28:10 - TRACE: Node 2 IP: 66.242.241.62 Enter Game B
12/04/2004 13:28:17 - TRACE: Node 2 IP: 66.242.241.62 Exit Game B
12/04/2004 13:28:18 - TRACE: Node 2 IP: 66.242.241.62 Enter Game B
12/04/2004 13:28:23 - TRACE: Node 2 IP: 66.242.241.62 Exit Game B
12/04/2004 13:28:23 - TRACE: Node 2 IP: 66.242.241.62 Logout

It is odd two opposing players would log in from the same IP.

There's more, but I just don't care anymore than what I have here. Maybe I've been fooled and have gotten this wrong, but I seriously doubt it.


-Kevin

A point of interest. I just went to ban the IPs and found out I can only ban the first number. Not the entire IP. That can prohibit many people from using the server not just one idiot. Any ideas?

quote:Originally posted by ksadrak

A point of interest. I just went to ban the IPs and found out I can only ban the first number. Not the entire IP. That can prohibit many people from using the server not just one idiot. Any ideas?


As you start typing in one box, it opens up the next to be available to type in as well. Just start typing and you should see what I mean.

Thanks ksadrak, I will use this to monitor my server for theoffender to your server. But seriosly don't let one bad apple destroy your server and the players that play on it, just weed the bad ones out, and let them know you will put up their names and IP's for all Sysops to Ban for the practices you described, and again Thanks a mil.

Vulcan

one of my corpies who i met at deepsouth goes by the handle worrior but he was monving and i havn't heard from him in weeks. He had said he would be out of the games for a month till he was moved and settled in i will email him too see if he was the one but i seriously doubt it.

Ohh, ok, I will check out that IP thing, I didn't notice it when I did it, but I was quite pissed and didn't feel like fooling with that idiot.

quote:they belong to a player named Kirtiz

Beware that the name he is using may not be his
real Trader name but one he is masquerading as. Blocking
by IP may help a little.

Banning a duper's IP is a logical thing to do , but most dupers are using dial-up and a dynamic IP (meaning changes each re-log-on).
As you may see , banning someone like that is nearly impossible.
My suggestion is contact Jerry @ coastgames.com for a closed server.
He had wantted to offer this service to sysops but had little responce.
I use this at Vid's World , it does help but you will still get (inexperianced players) players with little experiance and think they need that advantage.

And one more thing .. d/l from my website Eq's dupe catcher , it reads the logs and pulls all the IP's for you so you can determin
dupers from that and ingame passwords.

Otherwise there is not much to stop them (dupers) built into TWGS
cept the single IP setting.

Hope this has been of help.
Vid Kid/CareTaker

It's normally fairly easy to ban a player even if they have a dynamic IP. Most only vary in the last set of digits.

I have played on a server that only let you connect once per IP addres so you couldnt' play in two games at the same time on the same server. Only one at a time. I think I've seen this with single games where I got cicked off and treid to log back in but it wouldnt' let me because the I was still in game and hadden't been dissconnected from the game yet.
I'm not a sysop and have no idea how this works but it's an idea to play with.