jon_torbitt

Hi there, I have just helping admin on a UK public server and am trying to make sense of what was reported second to me as hacking but there is no video evidence to back it up as nobody was near them at the time. I have an extract from addmagazinecargo that contains data from 3 different players in a short space of time: 11.02.2013 13:13:37: PLAYER 1 (IP REMOVED) GUID removed - #0 "FlareGreen_M203" 0:0 11.02.2013 13:13:37: PLAYER 1 (IP REMOVED) GUID removed - #0 "FlareGreen_M203" 0:0 11.02.2013 13:23:31: PLAYER 1 (IP REMOVED) GUID removed - #8 "1Rnd_Smoke_M203" 0:0 11.02.2013 13:23:31: PLAYER 1 (IP REMOVED) GUID removed - #9 "1Rnd_Smoke_M203" 0:0 11.02.2013 13:23:31: PLAYER 1 (IP REMOVED) GUID removed - #8 "1Rnd_Smoke_M203" 0:0 11.02.2013 13:23:31: PLAYER 1 (IP REMOVED) GUID removed - #9 "1Rnd_Smoke_M203" 0:0 11.02.2013 14:35:06: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:08: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:08: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:08: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:08: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:08: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:24: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:35:58: PLAYER 1 (IP REMOVED) GUID removed - #9 "5Rnd_127x99_as50" 0:0 11.02.2013 14:35:58: PLAYER 1 (IP REMOVED) GUID removed - #9 "5Rnd_127x99_as50" 0:0 11.02.2013 14:35:58: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:35:58: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:35:58: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:36:52: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:36:52: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:36:53: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:36:53: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:36:54: PLAYER 1 (IP REMOVED) GUID removed - #9 "10Rnd_127x99_m107" 0:0 11.02.2013 14:37:47: PLAYER 2 (IP REMOVED) GUID removed - #9 "20Rnd_762x51_FNFAL" 0:0 11.02.2013 14:37:47: PLAYER 2 (IP REMOVED) GUID removed - #9 "20Rnd_762x51_FNFAL" 0:0 11.02.2013 14:37:47: PLAYER 2 (IP REMOVED) GUID removed - #9 "20Rnd_762x51_FNFAL" 0:0 11.02.2013 14:37:47: PLAYER 2 (IP REMOVED) GUID removed - #9 "20Rnd_762x51_FNFAL" 0:0 11.02.2013 14:37:47: PLAYER 2 (IP REMOVED) GUID removed - #9 "20Rnd_762x51_FNFAL" 0:0 11.02.2013 14:37:47: PLAYER 2 (IP REMOVED) GUID removed - #9 "20Rnd_762x51_FNFAL" 0:0 11.02.2013 14:38:32: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:38:56: PLAYER 1 (IP REMOVED) GUID removed - #9 "5Rnd_127x99_as50" 0:0 11.02.2013 14:38:57: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:39:08: PLAYER 2 (IP REMOVED) GUID removed - #9 "5Rnd_127x99_as50" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #9 "30Rnd_556x45_StanagSD" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #10 "ItemSodaMdew" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #10 "ItemSodaMdew" 0:0 11.02.2013 14:39:16: PLAYER 3 (IP REMOVED) GUID removed - #10 "ItemSodaMdew" 0:0 11.02.2013 14:39:49: PLAYER 2 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 14:43:07: PLAYER 2 (IP REMOVED) GUID removed - #1 "ItemWaterbottleBoiled" 0:0 11.02.2013 14:55:56: PLAYER 1 (IP REMOVED) GUID removed - #9 "5Rnd_127x99_as50" 0:0 11.02.2013 14:55:56: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 11.02.2013 15:52:42: PLAYER 1 (IP REMOVED) GUID removed - #9 "5Rnd_127x99_as50" 0:0 11.02.2013 15:52:42: PLAYER 1 (IP REMOVED) GUID removed - #9 "15Rnd_9x19_M9SD" 0:0 Apologies for the formatting but I find it difficult to believe (despite having looted many heli sites on the same server that Player 1 (who was accused of hacking that night by another player somehow) was lucky enough to find that many mags for such high end weapons. The 3 Mountain DEws also caught my eye and all this ties in time-wise with people reporting the scripts-error pop ups that appear when someone runs a script (from my admittedly limited experience) Can anyone help me out with figuring out whether this: ( a ) constitutes hacking, and ( b ) forms sufficient evidence for a ban Player 2 I am not so sure about, but 1 and 3 definitely look suspect to me. I may have some chat logs too possibly as if I recall (sorry very tired this morning!) at least one of them was 'friendly hacking' chatting in direct text chat, so it was logged by my leaving DaRT running overnight as most hacking takes place about 5 minutes after i log off! Thanks in advance! J

thanks will do!

I have noticed that this username has started cropping up on UK410 - odd things seem to happen occasionally when they are online (popup error messages etc) that indicate something is being done but as a new admin on Drunkie's server (UK410) I am still getting to grips with the logs. Any tips for tracking down common scripting? Or even reading the logs? I was contemplating just chucking them into a code editor to at least give me a decent search and line numbering facility. What does everyone else use/do to read logs more efficiently?