Warning !! Hack

[killer606]

Hey,

just in this moment has someone stolen all my planets from my 2 tm2 servers. It was from Login: pr33dat0r
I think he can hack the new Aseco2 to steal Admin mode. I have a logfile there is this line:

[09/22,22:27:16] GetPlayerInfo failed for pr33dat0r -- notified & kicked

I know that he was it because i saw just one second in rcp that there was an payment of 9000 planets to this login for that i have no trust but i have the logfiles of both servers.

I hope that someone can help me.

[Xymph]

You have a PM.

[Bueddl]

It was not XAseco 2, which was hacked. It was its root it self.

I helped killer with this.
While checking the authentication log files of his server, it showed up, that there were a succesful login attempt.
The problem itself was a unsecure password for a systemuser of his rootserver, which allowed "the hacker" to access the gameservers and finally grant himself admin rights and payout the planets.

So to everyone hosting servers by themself: this is another reason to check the security level of your passwords, for systemusers as well as the users on the gameserver (superadmin, admin and user).

Cheers
Bueddl

[TStarGermany]

For real name, adress and tele number of that prick : PM me. (That guy isn't too much of a bright bulb )

Bueddl has secured the IP for criminal investigation, if required/wanted.

[Xymph]

Ok, thanks for the explanation, cool that you figured out what happened.