Servers being attacked pls help me - Printable Version
+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: Servers being attacked pls help me (/showthread.php?tid=510938)
+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: Servers being attacked pls help me (/showthread.php?tid=510938)
Servers being attacked pls help me - Arjanz - 03.05.2014
My server being attacked by guyz known as crime.net , pls help me they hacking all admin accounts etc. and banning all players and ruining my server.
Re: Servers being attacked pls help me - EpicMan - 03.05.2014
First of all never make rcon thats really short
second it might just be the host thats giving u problems u probably might have to switch
third he hacked your rcon use bruteforce so just change rcon and delete all users on scriptfiles so no one is admin
NOW THESE SHOULD SOLVE YOUR PROBLEMS
Re: Servers being attacked pls help me - Arjanz - 03.05.2014
i did all this my rcon isnt hacked, we have 2 rcon passwords, and we disabled it, also we kicked all admins for soem time, but they still hack my server.
Re: Servers being attacked pls help me - Raza2013 - 03.05.2014
i guess it's Aayush.
Re: Servers being attacked pls help me - EpicMan - 03.05.2014
he probably knows your control panel Password
Re: Servers being attacked pls help me - doreto - 03.05.2014
What do you want for us to do ?
Re: Servers being attacked pls help me - Arjanz - 04.05.2014
I donno but when i check server logs hackers were talking about stealing some server files or making copied server files to hack admin account on my server.
Re: Servers being attacked pls help me - Blast3r - 04.05.2014
Are you using your own scripts or some which you've downloaded somewhere from the internet? Cause, if you downloaded scripts it's possible that you have a backdoor command in your script which they're using to make theirselves admin. I'd suggest you check all of your scripts (and/or filterscripts if you're using them) for any type of backdoor commands.
Re: Servers being attacked pls help me - ]Rafaellos[ - 04.05.2014
They probably RAT you or Keylogger you and they gain access on your Account ingame. This happens when you download what ever you find on the internet.
Re: Servers being attacked pls help me - SPA - 04.05.2014
I don't think it's hacked the rcon or just get admin , you saied the server kick all players, I faced same problem and actually it's from DDoS Attacks , Please make sure that your using latest update of 0.3z :SAMP 0.3z R2-2 , if you running 0.3x use This, And I hope that i can help more!
Re: Servers being attacked pls help me - Ayham - 04.05.2014
come in game with name : crimepwner.com , so they will leave you away xD joks ..
Listen , remove all accounts from Database and change rcon and make it too long at least 20 letter in it.
and that maybe will fix your problem.
Re: Servers being attacked pls help me - Proximo - 04.05.2014
If you are getting DDoSed (the server is running slow): Get a TCP & UDP Reverse proxy for your ports.
If you are using MySQL and you think someone has SQL Injected than immediately change your mysql user password.
But in your condition if you're currently being hit by DDoS attack you can't resolve it unless the packets stop to hit your server. And, as Blast3r said, there might be backdoor's in your gamemode, so better check the whole script out.
But, for now. I suggest you do shut down your server until the attack goes on, to prevent any more loss of data.
Best regards,
Proximo
Re: Servers being attacked pls help me - Flake. - 04.05.2014
Have you tried changing all your passwords for everyting and making sure your MySQL is secure?
Re: Servers being attacked pls help me - iZN - 04.05.2014
That's why you shouldn't be using easy password or password which you use everywhere and your passwords are not hashed? wow!
Re: Servers being attacked pls help me - iChiCkeNBuTT - 04.05.2014
I know the reason, i had your gamemode CVT time ago and i found a exploit command to a specific name that can set others account admin level to max and change rcon pass. I am pretty sure someone found that and acting pro hacker.
I will search your gamemode on my folders and if i found the point, i will send you it via forum message but i am not sure if i have the gamemode now.