0blivian
2012-06-28 22:44:00
well hello guys,after going on a long vacation of 15 days i return home today to my password being changed ,and 5 hours away from my account being wiped,so i grabed the ip that was last login after playing runescape since 2003 ive been hacked twice, when i started the game and now..i am a security freak am preatty hard to hack, so nothing being changed emails or anything just my password and pin to be changed i worried if it was a script here? that i trusted with my pass so i want to give the community the ip adress so you guys can check for me if it belongs to any script maker here,even tho anyone can use a proxy the ip is 113.6.88.64 ty;)
IP leads to China
inetnum: 113.0.0.0 - 113.7.255.255
netname: UNICOM-HL
descr: China Unicom Heilongjiang Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: BG63-AP
remarks: service provider
status: ALLOCATED PORTABLE
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: [email]hm-changed@apnic.net[/email] 20080916
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-HL
mnt-routes: MAINT-CNCGROUP-RR
changed: [email]hm-changed@apnic.net[/email] 20081210
changed: [email]hm-changed@apnic.net[/email] 20090508
source: APNIC
route: 113.0.0.0/13
descr: CNC Group CHINA169 Heilongjiang Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: [email]abuse@cnc-noc.net[/email] 20081210
source: APNIC
person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: [email]abuse@cnc-noc.net[/email]
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
changed: [email]abuse@cnc-noc.net[/email] 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC
person: Binghui Gao
nic-hdl: BG63-AP
e-mail: [email]luanfuyu@vip.hl.cn[/email]
address: Shuniu Building,No.155 Zhongshan road,Harbin,Heilongjiang
phone: +86-451-82651467
fax-no: +86-451-82651464
country: CN
changed: [email]luanfuyu@vip.hl.cn[/email] 20100310
mnt-by: MAINT-CNCGROUP-HL
source: APNIC
Kyle Undefined
2012-06-28 22:57:18
Looks like someone used a Java client, got a RAT, got phished, or JDB.
Sorry to hear :/
Flight
2012-06-28 23:08:19
Have you ever used a Java Bot or played on a RS Private Server, anything along those lines?
0blivian
2012-06-28 23:33:12
not phished as i used to do phishing myself years ago i know well,and i most likely think ratted, but my pcs are clean i do ratting myself but not towards runescape based ,i just take other accounts like seafight,etc i i doubt i was ratted,am still trying to figure out.,most likely that ip was a proxy tho ,am pretty sure was someone ik, ik i didnt get phished or ratted or jbd as i dont accept any java applications
Fascinate
2012-06-29 00:29:42
Lol you probably won't get much sympathy or help when you openly admit to phishing and ratting even if it isn't for RS… Just saying Lol
0blivian
2012-06-29 00:32:46
From: Fascinate
Lol you probably won't get much sympathy or help when you openly admit to phishing and ratting even if it isn't for RS… Just saying Lol
i understand that,but atleast i dont hide it, and i dont harm people from a community am a part of :p also am not looking for sympathy am just checking if anyone here is responsible. but i think i alredy know what happened but ty
Fascinate
2012-06-29 00:38:33
Haha im not hatin or anything. Yeah it definately wasn't a script from here or Simba. I highly doubt you would be able to tell who did it since they used a proxy.
Kyle Undefined
2012-06-29 01:14:33
You do know RATs and JDB can be FUD, right?
Im New Sry
2012-06-29 04:08:50
I also RAT and Keylog. But whatever.
Do you know that RAT that you're using could be backdoored? That is possible as well. I always open it first in Virtual PC, check the processes (if the number increased by 2 - it's backdoored most of the time), and I check it with Cheat Engine. If there's no hack info… Damn, I still use Virtual PC all the time. I don't have the balls to use it on my own computer.
Benny
2012-06-29 05:49:11
Sorry to hear you were hacked man, least you didn't lose your account :)
0blivian
2012-06-29 11:56:46
From: Im New Sry
I also RAT and Keylog. But whatever.
Do you know that RAT that you're using could be backdoored? That is possible as well. I always open it first in Virtual PC, check the processes (if the number increased by 2 - it's backdoored most of the time), and I check it with Cheat Engine. If there's no hack info… Damn, I still use Virtual PC all the time. I don't have the balls to use it on my own computer.
i use sandboxie most of the times. when i think something is phishy but i use blackshades i bought, and free darkcommet from the website. ik darkcommet is found as being backdored but its not
[XoL]
2012-06-29 12:30:14
It could be a script, link us to all the ones you have used? Sure it is really really rare but I suppose if someone really wanted to they could put a way to get your password through a script but I doubt it (Has happened once, and that script wasn't even public)
Im New Sry
2012-07-01 13:53:47

Thanks… Don't know what's your problem but ok.
Ezio Auditore da Firenze
2012-07-01 14:11:37
From: Im New Sry

Thanks… Don't know what's your problem but ok.
Lol, where the hell did that come from? Disable rep it means nothing ;)
Im New Sry
2012-07-02 05:32:59
Meh, I don't care really. :D