This is information from my logs of someone who we have strong proof of who it is gained rcon access to my server and then proceeded to ban gman.
Here's his wonid and ip in game.
"NotHere!<40><194442><>" connected, address "24.132.84.168:27005"
Here's his rcon access in which he banned gman and started to look for things.
L 11/23/2003 - 20:52:04: Rcon: "rcon 3137809370 â*******â l" from "24.132.84.168:27244"
L 11/23/2003 - 20:52:10: Rcon: "rcon 3137809370 â*******â say Ok Gman, out." from "24.132.84.168:27244"
L 11/23/2003 - 20:52:10: Server say "Ok Gman, out."
L 11/23/2003 - 20:52:10: "z<45><1060842><goku>" changed name to "Domon Kashu"
L 11/23/2003 - 20:52:15: Rcon: "rcon 3137809370 â*******â status" from "24.132.84.168:27244"
L 11/23/2003 - 20:52:16: "|::Z::| GMan [notbanned]<44><450852><cell>" say "you doing that scoprched"
L 11/23/2003 - 20:52:18: Rcon: "rcon 3137809370 â*******â getip" from "24.132.84.168:27244"
L 11/23/2003 - 20:52:19: Rcon: "rcon 3137809370 â*******â dns" from "24.132.84.168:27244"
L 11/23/2003 - 20:52:22: "Xe0<42><2795835><goku>" killed "::GeA:
iStolWhiPPeD<41><3099325><trunks>" with "melee"
L 11/23/2003 - 20:52:24: "[Clanless]Smith<46><2369970><notdone>" entered the game
L 11/23/2003 - 20:52:29: "::GeA:
iStolWhiPPeD<41><3099325><trunks>" say "what did gman do?"
L 11/23/2003 - 20:52:29: Rcon: "rcon 3137809370 â*******â banid 0 450852" from "24.132.84.168:27244"
L 11/23/2003 - 20:52:31: Rcon: "rcon 3137809370 â*******â kick #44" from "24.132.84.168:27244"
L 11/23/2003 - 20:52:31: Kick: "|::Z::| GMan [notbanned]<44><450852><>" was kicked by "Console"
L 11/23/2003 - 20:52:31: "|::Z::| GMan [notbanned]<44><450852><cell>" disconnected
L 11/23/2003 - 20:52:39: "[Clanless]Smith<46><2369970><notdone>" say "Scorcher?"
L 11/23/2003 - 20:52:45: "::GeA:
iStolWhiPPeD<41><3099325><trunks>" say "scorch whats up with gaman"
L 11/23/2003 - 20:52:53: "[Clanless]Smith<46><2369970><notdone>" say "Scorcher, respond."
L 11/23/2003 - 20:53:07: Rcon: "rcon 3137809370 â*******â addip 66.24.197.156:27005" from "24.132.84.168:27244"
L 11/23/2003 - 20:53:07: "::GeA:
iStolWhiPPeD<41>" has joined Good
L 11/23/2003 - 20:53:28: Rcon: "rcon 3137809370 â*******â addip 600 66.24.197.156:27005 " from "24.132.84.168:27244"
L 11/23/2003 - 20:53:34: Rcon: "rcon 3137809370 â*******â addip 900 66.24.197.156:27005 " from "24.132.84.168:27244"
L 11/23/2003 - 20:53:37: Rcon: "rcon 3137809370 â*******â 66.24.197.156:27005 " from "24.132.84.168:27244"
L 11/23/2003 - 20:53:41: "[Clanless]Smith<46><2369970><notdone>" say "I hoped you'd have enough respect to respond."
L 11/23/2003 - 20:53:41: "::GeA:
iStolWhiPPeD<41><3099325><trunks>" killed "Fu Mon Chu<43><3191111><goku>" with "sword"
L 11/23/2003 - 20:53:57: Rcon: "rcon 3137809370 â*******â addip 5000 66.24.197.156:27005 " from "24.132.84.168:27244"
L 11/23/2003 - 20:54:17: Rcon: "rcon 3137809370 â*******â addip 4000 66.24.197.156 " from "24.132.84.168:27244"
L 11/23/2003 - 20:54:17: "[Clanless]Smith<46><2369970><notdone>" say "Scorcher, respond damnit."
L 11/23/2003 - 20:54:20: Rcon: "rcon 3137809370 â*******â ip " from "24.132.84.168:27244"
L 11/23/2003 - 20:54:22: Rcon: "rcon 3137809370 â*******â iplist" from "24.132.84.168:27244"
L 11/23/2003 - 20:54:24: Rcon: "rcon 3137809370 â*******â listban" from "24.132.84.168:27244"
L 11/23/2003 - 20:54:26: Rcon: "rcon 3137809370 â*******â cvarlist" from "24.132.84.168:27244"
L 11/23/2003 - 20:54:29: Rcon: "rcon 3137809370 â*******â cvarlist ban" from "24.132.84.168:27244"
L 11/23/2003 - 20:54:33: Rcon: "rcon 3137809370 â*******â cvarlistl ist" from "24.132.84.168:27244"
L 11/23/2003 - 20:54:37: Rcon: "rcon 3137809370 â*******â cvarlist list" from "24.132.84.168:27244"
L 11/23/2003 - 20:54:41: Rcon: "rcon 3137809370 â*******â cvarlist b" from "24.132.84.168:27244"