HELP hack

auxi14 · 31. Oktober 2015

Hello,

They broke to me today on the server. They added to the group owner and started to ban.

Code

2015-10-31 14:46:31.727531|INFO    |VirtualServerBase|  1| client connected 'lazrog'(id:7111) from 194.31.49.28:49978
2015-10-31 14:46:41.530847|INFO    |VirtualServerBase|  1| client connected 'BornOfHate'(id:6052) from 89.66.172.31:49325
2015-10-31 14:46:50.726578|INFO    |VirtualServerBase|  1| client disconnected 'Rychu#'(id:4127) reason 'reasonmsg=leaving'
2015-10-31 14:46:51.889494|INFO    |VirtualServerBase|  1| client disconnected 'barneyKIQ'(id:4091) reason 'reasonmsg=leaving'
[u][i][b]2015-10-31 14:46:58.998800|INFO    |VirtualServer |  1| client (id:7111) was added to servergroup 'Fantasy'(id:174) by client 'Unknown from 194.31.49.28:50592'(id:877)
2015-10-31 14:47:10.208923|INFO    |VirtualServer |  1| client (id:7111) was added to servergroup 'Zarejestrowany/a'(id:7) by client 'Unknown from 194.31.49.28:50592'(id:877)
2015-10-31 14:47:13.016623|INFO    |VirtualServer |  1| client (id:7111) was added to servergroup 'Właściciel'(id:24) by client 'Unknown from 194.31.49.28:50592'(id:877)[/b][/i][/u]
2015-10-31 14:47:28.178381|INFO    |VirtualServer |  1| ban added reason='Nowe IP:   Dumbgo.net      ' ip='[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' bantime=0 by client 'lazrog'(id:7111)
2015-10-31 14:47:28.178543|INFO    |VirtualServerBase|  1| client disconnected 'S K I L L E R'(id:6874) reason 'invokerid=27 invokername=lazrog invokeruid=yodt8rNGR+rIntbvUI/8loPm5b0= reasonmsg=Nowe IP:   Dumbgo.net       bantime=0'
2015-10-31 14:47:28.180226|INFO    |VirtualServerBase|  1| client disconnected 'szczepon'(id:4104) reason 'invokerid=27 invokername=lazrog invokeruid=yodt8rNGR+rIntbvUI/8loPm5b0= reasonmsg=Nowe IP:   Dumbgo.net       bantime=0'
2015-10-31 14:47:28.181516|INFO    |VirtualServerBase|  1| client disconnected 'BananowyFranek'(id:5823) reason 'invokerid=27 invokername=lazrog invokeruid=yodt8rNGR+rIntbvUI/8loPm5b0= reasonmsg=Nowe IP:   Dumbgo.net       bantime=0'
2015-10-31 14:47:28.182538|INFO    |VirtualServerBase|  1| client disconnected 'Piecuch12'(id:6883) reason 'invokerid=27 invokername=lazrog invokeruid=yodt8rNGR+rIntbvUI/8loPm5b0= reasonmsg=Nowe IP:   Dumbgo.net       bantime=0'

Alles anzeigen

**Sebbo** · 1. November 2015

Hi,

change your ServerQuery serveradmin password immediately and make sure, that they haven't grant them to the ServerQuery "Server Admin" group. Identify the servergroup ID by running the ServerQuery command "servergrouplist" and then get the list of all ServerQuery groups like this:

Code

servergroupclientlist sgid=1

How-to change ServerQuery password: ServerQuery Passwort ändern

auxi14 · 1. November 2015

today also banned all. I changed my password and port serveradmin query.

servergroupclientlist sgid=1 -names
error id=0 msg=ok

servergroupclientlist sgid=2 -names
cldbid=1 client_nickname=serveradmin\sfrom\s46.xxx.xxx.xx:xxxxx client_unique_identifier=serveradmin|cldbid=12 client_nickname=Milex client_unique_identifier=YmDxxxxxxxxxxxxxxxxxxx

it can block completely the connection to the port query? so that only authorized IP can connect by query

just I do not know how to look your rules to iptables . sorry for my English

**Sebbo** · 1. November 2015

Yeah, you can blacklist all IPs and just whitelist the specific ones, you want to. For example like this:

Zitat von query_ip_blacklist

0.0.0.0

Zitat von query_ip_whitelist

127.0.0.1
192.168.2.123
10.0.0.199

auxi14 · 1. November 2015

and by iptables can block all connections? only to my ip able to connect to the query

HELP hack

Teilen

Benutzer online in diesem Thema