Raised This Month: $ Target: $400
 0% 

my server got hacked or got a backdoor?...


  
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
Author Message
hoboman
Senior Member
Join Date: Jul 2007
Old 02-19-2008 , 19:36   my server got hacked or got a backdoor?...
#1

now I don't know what is going on, on my server now, but yesterday somehow some guys from the "dna" clan came onto the server and started kicking everyone...

i checked the users.ini and none of them are admins...i checked the amxx admin logs and no kicking command were logged...

this was actually reported to me by one of my admins ( who had immunity btw ) who they kept on repeatedly kicking...
i checked the server logs and got suspicious too...

look at these console kicks:
Code:
 02/18/2008 - 13:41:10: Kick: "O.C Naranjero<355><STEAM_0:0:8287189><>" was kicked by "Console"
L 02/18/2008 - 13:41:10: "O.C Naranjero<355><STEAM_0:0:8287189><CT>" disconnected
.
.
.L 02/18/2008 - 13:41:35: Kick: ".::AMS::.TheyHaveAwps<361><STEAM_0:0:18079190><>" was kicked by "Console"
L 02/18/2008 - 13:41:35: ".::AMS::.TheyHaveAwps<361><STEAM_0:0:18079190><CT>" disconnected
.
.
.
L 02/18/2008 - 13:42:11: Kick: "O.C Naranjero<376><STEAM_0:0:8287189><>" was kicked by "Console"
L 02/18/2008 - 13:42:11: "O.C Naranjero<376><STEAM_0:0:8287189><CT>" disconnected
.
.
.
L 02/18/2008 - 13:42:35: Kick: "O.C Naranjero<377><STEAM_0:0:8287189><>" was kicked by "Console"
L 02/18/2008 - 13:42:35: "O.C Naranjero<377><STEAM_0:0:8287189><CT>" disconnected
.
.
.
...at the end the three guys who were suspected of doing this just got kicked ( probably kicked themselves ) and the kickings stopped:
Code:
L 02/18/2008 - 13:44:28: Kick: "dna Nick<334><STEAM_0:0:13749269><>" was kicked by "Console"
L 02/18/2008 - 13:44:28: "dna Nick<334><STEAM_0:0:13749269><TERRORIST>" disconnected
L 02/18/2008 - 13:44:32: Kick: "dna drop<365><STEAM_0:1:7260443><>" was kicked by "Console"
L 02/18/2008 - 13:44:32: "dna drop<365><STEAM_0:1:7260443><CT>" disconnected
L 02/18/2008 - 13:44:36: "I <3 Yo Momma<379><STEAM_0:1:16210178><>" entered the game
L 02/18/2008 - 13:44:36: Kick: "dna silk<380><STEAM_0:1:4498532><>" was kicked by "Console"
L 02/18/2008 - 13:44:36: "dna silk<380><STEAM_0:1:4498532><>" disconnected
the same damn, "was kicked by "Console"" kept popping up again and again in the logs, but I know for a fact that I have never ever told anyone rcon so I don't know what the hell is going on...

for now I just disabled the rcon all together, until I can figure it out...there are 3 things that could have happened in my opinion.

a.) there is an amxx backdoor somewhere
b.) maybe my server host got hacked and the rcons got leaked somehow...but I am hosted by NuclearFallout
c.) someone hacked my server...but that would be pretty strange because according to psychostats neither of those 3 guys have played on my server before this, so they would not have any reason to hack me


...and that just leaves me with a.)
__________________

Last edited by hoboman; 02-19-2008 at 19:40.
hoboman is offline
 



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 08:32.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode