Author Topic: My server has been hacked  (Read 4846 times)

0 Members and 1 Guest are viewing this topic.

Offline killforfun

  • Jr. Member
  • **
  • Posts: 51
  • Karma: 1
My server has been hacked
« on: August 16, 2011, 09:08:09 PM »
Ok first my hours keep being removed then my ban logs are removed and the ban commands are disabled for admins
 i have a video of this guy talking about how he would use ddos bot-nets and uplode-packets to server and said somthing about lcid+cmd so i think he did this

(THIS IS NOT ULX's FAULT)

Anyways im going to copy all my files to another server ip ,but what are the possibility that he hacked the whole entire Box or uploaded a virus in my files somewhere so he can reconnect to the new ip.

Any tips on how to prevent getting hacked again, and Could have script enforcer prevented him from hackin?



Offline Megiddo

  • Ulysses Team Member
  • Hero Member
  • *****
  • Posts: 6214
  • Karma: 394
  • Project Lead
Re: My server has been hacked
« Reply #1 on: August 17, 2011, 04:30:28 AM »
I'd have to know more about the hack to say whether or not you'd be safe on a new box. Instead of copying files, redownload them. Make sure you don't download from garrysmod.org which is virus-prone.
Experiencing God's grace one day at a time.

Offline Aaron113

  • Hero Member
  • *****
  • Posts: 803
  • Karma: 102
Re: My server has been hacked
« Reply #2 on: August 17, 2011, 11:28:38 AM »
Set sv_allowdownload and sv_allowupload to 0.  I'm not sure if it was fixed, but this could potentially be the problem.  This will prevent things like custom Sprays from being uploaded/downloaded.

Offline swiftone

  • Newbie
  • *
  • Posts: 4
  • Karma: 0
Re: My server has been hacked
« Reply #3 on: October 14, 2011, 01:41:50 PM »
our server got hacked recently they used our own server to doss itself   =(



our host dropped us after that lol

Offline Willdy

  • Jr. Member
  • **
  • Posts: 54
  • Karma: 1
Re: My server has been hacked
« Reply #4 on: October 14, 2011, 01:44:50 PM »
our server got hacked recently they used our own server to doss itself   =(



our host dropped us after that lol
May I ask who your host was?

Offline LuaTenshi

  • Hero Member
  • *****
  • Posts: 545
  • Karma: 47
  • Just your ordinary moon angel!
    • Mirai.Red
Re: My server has been hacked
« Reply #5 on: November 01, 2011, 08:04:56 PM »
Another way to make sure that you do not get hacked is to not have your rcon_password in your server.cfg

But if you want to be extra safe and sure, disabling RCON completely is also an option.
I cry every time I see that I am not a respected member of this community.

Offline strategos

  • Jr. Member
  • **
  • Posts: 66
  • Karma: 2
  • I wanna be the guy
    • Community
Re: My server has been hacked
« Reply #6 on: November 01, 2011, 10:37:17 PM »
I've been having problems with people somehow finding an exploit and gaining the ability to use console to kick players with ulx. I think it some security issue with gmod that returns an rcon password. Thats my best guess.

Disable rcon: rcon_password ""

EDIT: I just realized I restated what HellFox Just said. lol