|
Post by Old Shendemiar on Nov 30, 2007 3:17:13 GMT
Suspects who see IP's Old Shendemiar (forum admin) andre 193.126.194.157 Highlander 172.159.24.115 (Month ago)
Certain cases with ability to see IP's
Certain cases without ability to see IP's Iserath (ousu)
Techically possible ones Without ability to see IP's Soiram 84.205.255.20 Ashimar 212.233.32.57 Dalfiatach 84.203.63.67 Starshatter 81.103.62.117
Techically possible ones With ability to see IP's mmupatton 87.48.126.104 Natmus 213.237.88.178 Shendemiar 80.221.157.245 Inyati 87.196.127.96 SkulkrinBait 85.10.196.173 Arminius 82.69.108.27 Lord_Reed 90.199.83.115 Raistlin 86.132.48.58 domhnall 86.41.87.112 guinevere 83.70.238.67 Freiegeister 203.220.7.218 twilight 79.67.78.145 wolfric 86.163.112.253 Warliter 82.24.222.17 Harlequin 88.108.187.73
Technically not possible kabukin, merlin, Orvindor, ouroboro13, sparrowhawk, intchanter, shirak, mataharilives, Matija, Tigon Ologdring, the_Lith, Perun, Ringthane
|
|
|
Post by Old Shendemiar on Nov 30, 2007 3:20:12 GMT
Its also possible (or is it) that these screenshots are from the last breach, combined with iserath breach this time. (Iserath couldnt see IPs)
|
|
Clausewitz
Luxor Member
Veni. Vidi. Vici. Mori.
Posts: 1,437
|
Post by Clausewitz on Nov 30, 2007 3:23:09 GMT
Random Theory:
1. AMC. Hosted on DIGG forums. Is it possible that they could identify a user password there, and try it here? I see several names on that "technically possible" list that I know have accounts on diggik.com.
WHAT WE KNOW: 1. DIGG was the source. Hwangtm attempted to maintain "anonymity" for the "source", but tipped his hand when he quoted the source as saying "Attacked me and other diggers".
2. We were recently discussing an operation against Phil299. Phil299 has access to DIGG's "inner circle". Merda!, he's the Chairman of it. DIGG effectively tipped their hand and compromised their access (let's all be honest, if you have backdoor access to another forum you milk it, you don't let it be known). Sol had a theory that I find very plausible that Phil pushed for the info release 1) to avert a strike on his shores, and 2) to divert the growing negative press over DIGG's own "account bank".
Just some random thoughts here. This whole thing still has me spinning.
|
|
Clausewitz
Luxor Member
Veni. Vidi. Vici. Mori.
Posts: 1,437
|
Post by Clausewitz on Nov 30, 2007 3:24:36 GMT
ADDITIONAL:
Shen, is it possible to get an accurate identification NOW on when the last time each person from your list of suspected hacks logged into the forums?
We can check with them externally as to if it matches the last time THEY logged in. Logic would hold that somebody with "hack access" would be checking frequently, perhaps for more recently than the actual user logged in themselves.
|
|
|
Post by domhnall on Nov 30, 2007 3:29:25 GMT
Who is Iserath?
|
|
Sol
Luxor Member
I pledge alligeance to the corn-growers.
Posts: 1,610
|
Post by Sol on Nov 30, 2007 3:35:34 GMT
andre 193.126.194.157 - Portugal - Portugal. Highlander 172.159.24.115 (Month ago) - United States - US
Techically possible ones Without ability to see IP's Soiram 84.205.255.20 - Hungary - Greece. Ashimar 212.233.32.57 - Belgium - Luxembourg. Dalfiatach 84.203.63.67 - Ireland - Ireland. Starshatter 81.103.62.117 - Great Britain (UK) - United kingdom.
Techically possible ones With ability to see IP's mmupatton 87.48.126.104 - Great Britain (UK) - Denmark. Natmus 213.237.88.178 - Denmark - Denmark. Shendemiar 80.221.157.245 - Finland - Finland. Inyati 87.196.127.9 - Great Britain (UK) Edited IP (from first post) - Portugal. SkulkrinBait 85.10.196.17 - UK Edited IP - Germany. Arminius 82.69.108.2 - Great Britain (UK) Edited IP - United kingdom. Lord_Reed 90.199.83.115 - Great Britain (UK) United kingdom. Raistlin 86.132.48.58 - Great Britain (UK) - uk domhnall 86.41.87.112 - Great Britain (UK) - Ireland. guinevere 83.70.238.67 - Ireland - Country: US Freiegeister 203.220.7.218 - Australia - Australia. twilight 79.67.78.145 - Great Britain (UK) - United kingdom United kingdom. wolfric 86.163.112.253 - Great Britain (UK) - United kingdom Warliter 82.24.222.17 - Great Britain (UK) - United kingdom. Harlequin 88.108.187.73 - Great Britain (UK) - United kingdom.
|
|
|
Post by Old Shendemiar on Nov 30, 2007 3:51:18 GMT
These are candidates too, but could have not seen Morkin area. But yes to the shared Intelligence threads OR general luxor area.
Suspects onewhoknowsitall 71.146.74.53 SaneBandog 198.54.202.246 Haymaker 86.5.97.36 Nemesis 88.105.17.150
Techically possible ones magiter 82.34.234.17 fishcult 213.243.135.228 little 81.106.29.21 englishcheese 193.63.45.54 Pose 84.68.243.86 blazed 121.72.239.125 Null 99.252.216.6 kae 24.68.141.12 Ruku 90.207.118.82 Cesium 72.146.179.129 genadmission 66.151.82.100 GraySea 198.54.202.226 DrieZ/Cesium 81.247.103.158 Gornall 82.47.167.24 conkeror 99.246.32.148 williham 86.140.44.180 Shuriyuken 77.100.230.74 calamity77 75.178.6.82 McGoogus 71.173.59.168 Tomthebuffalo 86.6.11.15 lemming 220.239.54.39 Aesir 69.76.178.246 Sol 68.78.40.101 Clausewitz 75.178.6.82 Caith_sith 81.103.46.72 eproxy 81.109.180.221 digital 87.194.113.90 AeroS 76.235.189.44 2kcastle 86.29.187.165
Technically not possible Rocklobster 74.114.149.232 beast 90.240.255.215
|
|
|
Post by Old Shendemiar on Nov 30, 2007 3:55:14 GMT
This is as much i can provide, the forum security capabilities are lousy at best.
I have made lot of inactive accounts and suspicious accounts into "public are guests"
|
|
|
Post by Old Shendemiar on Nov 30, 2007 3:59:00 GMT
Yes id say its digg.. probing has been systematic and timing is very convenient. Its methods so dirty i can only suspect them. I feel more determined to send anything i have against phil.
|
|
|
Post by domhnall on Nov 30, 2007 4:01:21 GMT
Phil says:
"Arminius has been one constant over the year ....this player although we have not always seen eye to eye gives me hope that at the brink there is still a chance for a better outcome for many rather than the few."
"This server shows no signs of stagnation only a slow drift to the dark side of IK which morkin did so much to stop in the early days....now it appears digg and pain and a few others are the last bastion."
(from the IK.com main forum)
Circumstantial of course, but these do seem to indicate that Phil knew what was going on in the hidden forum.
|
|
Shendemiar
Morkin Admin
Mmmm, free goo!
Posts: 6,751
|
Post by Shendemiar on Nov 30, 2007 4:06:10 GMT
Do people agree its a hack and not a leak?
|
|
Clausewitz
Luxor Member
Veni. Vidi. Vici. Mori.
Posts: 1,437
|
Post by Clausewitz on Nov 30, 2007 4:16:01 GMT
The more I think about it, the more (albeit circumstantial) evidence seems to point towards Phil.
Is there any way to check the recent, say, dozen IP's used by an account? I know Phil loved his Phoenix forum access, and was diligent about using TOR (sp?). I would think that the IP would remain consistent for unhacked account, while it would jump around in the past day(s?) for a hacked account.
|
|
|
Post by domhnall on Nov 30, 2007 4:19:54 GMT
Who could or would have leaked it? There isn't anyone with that kind of access that would.
The internet offers anonymous freedom- this is what leads to people behaving on forums and in games that the same people would never do in RL.
We can put RL names on everyone with access to that forum; there is no reason that anyone would have greater loyalty to the game than they would to other Morkins.
To be honest, I have more loyalty to Morkin than to the game. I've even gone on record saying that the alliance should up sticks and go play something else.
I suspect that most, if not all, Morkins feel similarly.
|
|
Shendemiar
Morkin Admin
Mmmm, free goo!
Posts: 6,751
|
Post by Shendemiar on Nov 30, 2007 4:33:44 GMT
|
|
Sol
Luxor Member
I pledge alligeance to the corn-growers.
Posts: 1,610
|
Post by Sol on Nov 30, 2007 4:36:55 GMT
Suspects onewhoknowsitall 71.146.74.53 - United States SaneBandog 198.54.202.246 - United States Haymaker 86.5.97.36 - UK Nemesis 88.105.17.150 - UK
Techically possible ones magiter 82.34.234.17 - UK Has not logged on to the forum since last month from conversation we had on way to work today- Warliter fishcult 213.243.135.228 - finland little 81.106.29.21 - UK englishcheese 193.63.45.54 - UK Pose 84.68.243.86 - UK blazed 121.72.239.125 - Australia Null 99.252.216.6 - Canada kae 24.68.141.12 - Canada Ruku 90.207.118.82 - UK Cesium 72.146.179.129 - US genadmission 66.151.82.100 - US GraySea 198.54.202.226 - United States DrieZ/Cesium 81.247.103.158 - Belgium Gornall 82.47.167.24 - UK conkeror 99.246.32.148 - Canada williham 86.140.44.180 - UK Shuriyuken 77.100.230.74 - UK calamity77 75.178.6.82 - USA McGoogus 71.173.59.168 - USA Tomthebuffalo 86.6.11.15 - UK lemming 220.239.54.39 - Australia Aesir 69.76.178.246 - US Sol 68.78.40.101 - US Clausewitz 75.178.6.82 - US Caith_sith 81.103.46.72 eproxy 81.109.180.221 - UK digital 87.194.113.90 - UK AeroS 76.235.189.44 - USA 2kcastle 86.29.187.165 - UK
Technically not possible Rocklobster 74.114.149.232 - Canada beast 90.240.255.215 - UK
|
|