SRL Archive - News and General

I Was Hacked!!


Da 0wner

2009-02-20 01:01:44

I JUST RECENTLY GOT HACKED!!!!!!!

I recovered about 5min after! It got accepted like hella long after (fuckin Fagex) and I lost all my items!

:(

Wasn't really much but I mean it was all I had. I also bought 10m from hrh and now I can't get it because the fucking KID stole my Tokkul and my money! Damn $35 dollars gone!!

Can an admin search for the IP!?

It is: 60.8.84.34
Runescapian tells me it is from China.

I will accept donations please :(.

!UGH!!!!!!FUCK THIS GUY!!!!

Hobbit

2009-02-20 01:04:57

No one on SRL

Sorry

ZaSz

2009-02-20 01:08:13

You mustve been brute forced. U have an password that could be on a password list? Ex. Pokemon, DragonBallZ ect.

cycrosism

2009-02-20 01:09:32

I am not an admin, but i might be able to provide some info. I have a good program to track I.P's. It does tell me it is from china, but almost every time i try to ping or connect to it, it gets timed out.

IP: 60.8.84.34
Name: Unresolved
Reply time: No reply

Unless the hacker used a proxy or something

Started (at 5:07:44 PM)
60.8.84.34 Pinging … no reply
Done (at 5:07:48 PM)

edit - It seems to me that someone probably faked there I.P address
It also tells me that the I.P is from a place called Guatemala, but the ISP is based in china or something
This is a list of possible I.P's maybe an admin can search these:

1: (70.87.55.154)

1: (70.86.141.249)

2: (70.87.254.29)

3: (70.85.127.109)

4: (70.87.253.25)

5: (12.87.41.149)

6: (12.122.138.118)

7: (12.122.28.178)

8: (12.122.31.134)

9: (12.122.136.61)

10: (12.126.40.58)

11: (219.158.3.153)

12: (219.158.7.186)

13: (202.99.160.246)

14: (61.182.174.122)

16: (60.8.130.101)

17: (60.8.132.126)


Hope that helps.

EDIT2 - It also tells me that the I.P could possibly be from Australia too

Da 0wner

2009-02-20 01:16:38

I don't think RS is able to load in a proxy, I tried.

And yeah, my password, was kinda easy. I will change it now to a combination of characters + an alt character :p. But well, I scanned my computer some things found and quarantined then I deleted them. Didn't even have this account at that time…

But most likely, it was brute forced. Man, anyone willing to donate geepeez?

Brain

2009-02-20 01:22:11

lol….willing to donate? Go auto up some moneys, don't beg here.

Da 0wner

2009-02-20 01:27:07

I don't know what to auto. I am only lvl 3 and my only good skill is fletching.

Edit: Also, cycrosism thanks your a help :).

cycrosism

2009-02-20 01:31:00

That's ok, I enjoy helping people

Da 0wner

2009-02-20 01:35:47

I believe the account that hacked me was Mahoj. I have never met him and my friends list is really small as I don't like having it clogged up. So he most likely added himself and didn't delete.

Don't know if that's much help but yeah.

Hobbit

2009-02-20 01:36:51

I am not an admin, but i might be able to provide some info. I have a good program to track I.P's. It does tell me it is from china, but almost every time i try to ping or connect to it, it gets timed out.

IP: 60.8.84.34
Name: Unresolved
Reply time: No reply

Unless the hacker used a proxy or something

Started (at 5:07:44 PM)
60.8.84.34 Pinging … no reply
Done (at 5:07:48 PM)

edit - It seems to me that someone probably faked there I.P address
It also tells me that the I.P is from a place called Guatemala, but the ISP is based in china or something
This is a list of possible I.P's maybe an admin can search these:

1: (70.87.55.154)

1: (70.86.141.249)

2: (70.87.254.29)

3: (70.85.127.109)

4: (70.87.253.25)

5: (12.87.41.149)

6: (12.122.138.118)

7: (12.122.28.178)

8: (12.122.31.134)

9: (12.122.136.61)

10: (12.126.40.58)

11: (219.158.3.153)

12: (219.158.7.186)

13: (202.99.160.246)

14: (61.182.174.122)

16: (60.8.130.101)

17: (60.8.132.126)


Hope that helps.

EDIT2 - It also tells me that the I.P could possibly be from Australia too


Those IP's are nothing, they are just Hops along the traceroute to the IP you targeted… Think of them as when you are traveling somewhere in a plane, if it's a long distance you don't have one flight, you stop a few times and get out at airports and move to the next plane. Think of those IP's as the airports

cycrosism

2009-02-20 01:58:14

Ok, well now i know :)

Kyle Undefined

2009-02-20 08:16:42

Damn, that sucks. Just use a fletch script ;)

~Camo

GoF

2009-02-20 09:42:59

Lol at the guy with some ip. tracing program that he can't use.

But on topic: Don't have crap passwords. If you do it wouldn't take much to brute it if the guy focused only on you (as far as I know they usually take some very usual passes and then a bigger list of acc names to try them on). Also I think there was some study that said a huge majority of people add numbers in the end of the password, so some bruteforcers obviously use that too (like dragon(1-99)), although I don't know about RS ones.

I also suggest running a virus scan on your computer incase you've got some crap on your pc (what would be better than getting hacked again right after you managed to collect some money again), you never know.

Da 0wner

2009-02-20 17:48:32

Ha my password had a 100 at the end. But my password is now and MD5 hash…

Edit:

Also this may have been his method of transfer???


I had 51k tokkul on my account already…and the glory is not from him I brought it :p.

Underwear

2009-02-20 19:45:51

Getting hacked sucks. I;ve been hacked before..

Harry

2009-02-20 19:56:56

Country Region City Latitude/
Longitude ZIP Code Time Zone
60.8.84.34 CHINA BEIJING BEIJING 39.9
116.413 - +08:00
Net Speed ISP Domain
- CNCGROUP HEBEI PROVINCE NETWORK QHPTT.HE.CN

http://www.ip2location.com/60.8.84.34

Sucks2be you. You were hacked by a Chinese person. Just hope the Chinese person only hacked you so they could get money for food D:

Anyways, GoF hit the nail on the head, just do what he said.