Page 1 of 1

Warning !! Hack

Posted: 22 Sep 2011, 21:38
by killer606
Hey,

just in this moment has someone stolen all my planets from my 2 tm2 servers. It was from Login: pr33dat0r
I think he can hack the new Aseco2 to steal Admin mode. I have a logfile there is this line:

[09/22,22:27:16] GetPlayerInfo failed for pr33dat0r -- notified & kicked

I know that he was it because i saw just one second in rcp that there was an payment of 9000 planets to this login for that i have no trust but i have the logfiles of both servers.

I hope that someone can help me.

Re: Warning !! Hack

Posted: 22 Sep 2011, 21:58
by Xymph
You have a PM.

Re: Warning !! Hack

Posted: 22 Sep 2011, 22:36
by Bueddl
It was not XAseco 2, which was hacked. It was its root it self.

I helped killer with this.
While checking the authentication log files of his server, it showed up, that there were a succesful login attempt.
The problem itself was a unsecure password for a systemuser of his rootserver, which allowed "the hacker" to access the gameservers and finally grant himself admin rights and payout the planets.

So to everyone hosting servers by themself: this is another reason to check the security level of your passwords, for systemusers as well as the users on the gameserver (superadmin, admin and user).

Cheers :thumbsup:
Bueddl

Re: Warning !! Hack

Posted: 22 Sep 2011, 22:41
by TStarGermany
For real name, adress and tele number of that prick : PM me. (That guy isn't too much of a bright bulb :D )

Bueddl has secured the IP for criminal investigation, if required/wanted.

Re: Warning !! Hack

Posted: 22 Sep 2011, 22:52
by Xymph
Ok, thanks for the explanation, cool that you figured out what happened.