Hey guys...

I was recently hacked at work and he threw a SoF2 server up on the box they hacked into.  We have their IP address and they will shut down at thier provider's earliest convenience.

Anyway, I was wondering, can you find a server in your log files listed under the ip address of 204.94.160.5 (this is the ip of the box running the server and has since been shut down.) around 1:49-2:30am this morning???

If you could let me know via PM or email, let me know.

Thanks!!!

-Bizzar

Not exactly sure what your asking of us.

I'm looking for a server name, clan name, any information about a server that could have been running on that IP at that time listed.

i dont think the master server records that infomation, as it only sends ip's to clients, the clients then contact the servers to get the infromation, like name, map, ping etc, then the clients can get extended info like set strings like clan, host, and other server cvars

hmmmm crap...

Spike, can you do a look up for ip if I pm it to you?? PLEAS
E???

If they were running a sof2 server on your machine then you should have sof2 installed somewhere on it.  Which means there would be a config file with the hostname, etc, in it.

That's what I thought Apoxol, but it wasn't.  This is a linux install... they got it installed, somehow managed to get it running in memory alone and removed all their files.  (or they hid them really well).

Basically, we found a service running (sof2****somethingblah**) and then 1 connected user to some 21000 port or something.  But I ran a search for the sof2 files and couldn't find anything.

It would need the resources to run the game.  This means there would have to be a pk3 somewhere on your machine.  Find that pk3 and you should find sof2.  Otherwise I have no idea how they could have run it besides setting up some sort of a networked drive mapping or something.