hmm

[[DANISH]TheDane]

### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : Player
### - Player IP : 255.255.255.255
### - Player OS : Windows
### - EngineVer : 436
### - RenderDev : Software Rendering SoftDrv.dll
### - RenderVer : UT v436 Soft Renderer
### - RenderChksm : C36BA2C34835BDB71AD7806D2EA1DD8C
### - RenderSize : 389120 bytes
### - TimeStamp : 05-02-2008 18:27:08
### ----------------- Additional information -----------------
### - GUID : ih[`sGMMFsssD0779_1916772628
### - guid Valid : True
### - KickType : 9
### - AnthChecker : v1.38 (Build 8)
### - Reason : Client loaded an illegal library! (hacked)
### - File : GNAT_1Nf.dll
### - Checksum : 160bf6b4cf95ec9042a8839001b86992
### - Ident : HACKED - Unknown Package
### -------------------------------------------------------------

[[BSC]MasterJohnny]

http://www.unrealadmin.org/forums/showthread.php?t=26455

[adminthis]

TheDane;137347']
### -------------------------------------------------------------
### ANTHCHECKER - PLAYER KICK
### -------------------------------------------------------------
### - Player name : Player
### - Player IP : 255.255.255.255


Did you edit this log? Because IP address 255.255.255.255 is not possible.

[[DANISH]TheDane]

no, i did not edit this log, that's why i commented it as hmmm

[PizzaMan]

Did you look at the server log, or only at the AC kick log?

If you still got the server log, look at the point where the player joined:

NetComeGo: Open MyLevel

Is that the same IP?

[[DANISH]TheDane]

oh .. only checked this log file, oops. Will check it out soon and get back to you on that one.

[[DANISH]TheDane]

I have gone through the log file, this player doesn't show up anywhere?

Maybe because he got kicked? but no records of him joining?

Shouldn't his name be changed into Player1 also?

This name and ip shouldn't be possible?

[PizzaMan]

He must have joined before AC kicked him. The name "Player" is possible to use, but that IP obviously cannot be real.

Did you look at the log around 05-02-2008 18:27:08 ?

Might be a different player name and IP right before that time.

[AnthraX]

AC retrieves the IP directly from the server, not from the client. 255.255.255.255 should never show up as a player IP.

[[DANISH]TheDane]

a hack then? or some random bug? or a coorupt AnthChecker file on the server?

hmm ... i'll try reinstall all the files and hope he comes back hehe


Did you look at the log around 05-02-2008 18:27:08 ?


yes, no player entered near that time, i have a player entereing 2½ minutes before and one 2 minutes after ... so it shouldn't be them? Otherwise they would have timed out instead i think.

strange. Anthrax do you have a wild guess what it is?

[Switzz]

I've seen that shit in UT logs before and reportbot readout of IP's, sometimes when hammering the server it gets it all wrong and no IP is recorded in any output.

U could post the log here from -5 to + 5 min of the incident and lets see, kinda hard to say when u dont have that.

second hacked gnat - idd hmmm