1

Hacker! - Help required [Urgent!]

Corsicaman 9/21/13 6:49 pm
3.4k
9/24/2013 6:20 pm
Hello everyone, I'm here today because I have a huge problem with a hacker.

Every day he joins my server and CRASHES it. He said he found an exploit and will keep using it to lag and crash it. We have no idea how he does it, he just stands still in the spawn, then the server starts lagging and finally crashes.

I require your help Planet Minecrafters, PLEASE, does anyone have an idea on how he does that? He will keep crashing my server if I don't find how to stop him ASAP!

Thanks everybody! Any suggestion/idea would be greatly appreciated!
Posted by
Corsicaman
Level 26 : Expert Network
26

  Have something to say?

JoinSign in

172

poltercreeper
09/21/2013 6:51 pm
Level 16 : Journeyman Goblin
ban him
1
MACMAN-
09/21/2013 6:52 pm
Level 2 : Apprentice Explorer
ban his ip
1
Azie
09/21/2013 6:52 pm
She/They • Level 59 : Grandmaster Goblin Scribe
Have you IP banned/banned this person? If you have an he has alts or a proxy to keep getting on, I'd reccommend shutting your server down for a few days. They give up eventually. Also, it'd be worth your time to check out where he plays on the server to search for lag machines and the like.
1
madisonjack01
09/21/2013 7:04 pm
Level 27 : Expert Unicorn
I also was going to say that but Azie already said what I was going to say
1
TheEvilKittyWizard
09/21/2013 7:06 pm
Level 43 : Master Nether Knight
She's like that XD
1
McJackson3180
09/21/2013 7:46 pm
Level 51 : Grandmaster Ladybug
Azie, our profile pics are the same style :3
1
MACMAN-
09/21/2013 6:55 pm
Level 2 : Apprentice Explorer
if you ban him hell hack some1 and then join your server so its wise just to ban his ip
1
Nevin
09/22/2013 10:17 pm
Level 11 : Journeyman Pokémon
You are misinformed.
1
Corsicaman
09/21/2013 6:55 pm
Level 26 : Expert Network
He is able to change his ip, he probably uses some proxys. It's useless to ban him, even banip. He also spam botted us, but I was able to prevent that by installing a plugin.

He isn't building any lag machine or anything of this kind... I've been searching for several days now, so it's nothing obvious.
1
Pease_Xpress
09/21/2013 6:58 pm
Level 24 : Expert Taco
I had this problem before.
I just had to whitelist the server, then check the console to find his IP adress, and username when he TRIES to connect.
Then ban both.
repeat 'till he is annoyed.
1
CascadianX
09/21/2013 8:06 pm
Level 44 : Master Architect
Stop the server, Enable Whitelist. Start Server. Ban-IP/Username and much more
1
Corsicaman
09/21/2013 8:10 pm
Level 26 : Expert Network
Ok I'll try that. Thanks!

swimmer1929
CorsicamanMe pathetic? I'd say you're the pathetic one, doing everything you can to get rid of your competitors...

I have nothing to hide, join my server and see by yourself.

Nah, just doing my duty and reporting cracked servers like we're supposed to. Also, you never mentioned in the OP that your server is cracked, if you did we would all know why the hacker was able to do this. Make your server online if you would like to "get rid of this hacker"

So I joined and got this screenshot:
http://i.imgur.com/luDQPKM.png

While that doesn't prove it's cracked, you can still log on for yourself and ask.

Yeah exactly, that doesn't prove my server is cracked. As I said above (you apparently didn't read), Authme can be used by premium servers too to prevent people's accounts to be used be someone who would have got their password.
Moreover, even IF my server was cracked, it wouldn't change anything: the hacker is using a glitch like a command to crash it.
1
Motherload
09/21/2013 6:59 pm
Level 18 : Journeyman Ninja
Whitelist the server ^^
1
madisonjack01
09/21/2013 7:02 pm
Level 27 : Expert Unicorn
Well first of all has he EVER accessed your console? Second off Perma ban his IP that should block all connections to your server. If the server is rented and he has access to the console remove him from the console that will also keep him away. Hope this helps
1
MACMAN-
09/21/2013 7:03 pm
Level 2 : Apprentice Explorer
make a new server with a ip similar to your server
pm your friends
leave no evidence to the hacker that you made a new server
if he finds out you have a new server
repeat above
report his ip and minecraft to mojang to ban him from the game
1
Wizardofdoom
09/21/2013 9:19 pm
Level 28 : Expert Spleefer
From what I know, mojang doesn't ban accounts. He'd have to deal with it.
1
MACMAN-
09/21/2013 7:08 pm
Level 2 : Apprentice Explorer
my idea of a new server that he doesnt know about is VERY useful
becus one of my friends had the SAME PROBLEM and that idea got the hacker out of his worriesLISTEN TO ME ABOUT DAT ITS VERY USEFUL
1
Corsicaman
09/21/2013 7:09 pm
Level 26 : Expert Network
My server is not a "server for friends". It's a serious server with usually 20-30 people online, hosted 24/7 by a very secure host, he can't access the console.

He just seems to be typing something in the chat, and that crashes the server.

Whitelisting my server for a few days might work since I have a plugin that automatically adds new players to the whitelist, so I won't lose them, however what tells me that he won't come back 1 week later, once the whitelist will be removed?
1
Mason4061
09/21/2013 7:15 pm
Level 1 : New Miner
Their's nothing saying he won't unfortunately but most people who go on servers just to sabotage only last a few days 'till they realize it's pointless.

You're right though, no way to ensure it.
1
MACMAN-
09/21/2013 7:18 pm
Level 2 : Apprentice Explorer
WRONG
ObiWanKenobi Youse da force corsicaman
whitelist the server for about a year and he will think its wortless
1
BLESS_YO_FACE
09/21/2013 7:17 pm
Level 28 : Expert Lumberjack
If this server is being hosted off your computer, it is more than likely that he is booting your server offline.

The only reason he is going on, is to probably taunt you, when he is standing still, it means that he is getting his booter ready.

The best course of action would be to either

A) Switch to a hoster(they normally have 24/7 support for this kind of stuff)

B) Get the IP he first used to join, and report it to whatever Web Security is available in the country you live in. Booting IS illegal. And he WILL get fined if caught.


Of course, he may not even be booting, in which case this whole reply is useless

._.
1
grin141
09/21/2013 7:26 pm
Level 24 : Expert Toast
Could he be crashing the server with chat?
1
MACMAN-
09/21/2013 7:13 pm
Level 2 : Apprentice Explorer
very wise to keep dat plugin running for a yearbe wary that he might break in to your server by making an new account
1
moox10
09/21/2013 7:14 pm
Level 12 : Journeyman Explorer
Have you tried muting him

Click to reveal
try that


BLESS_YO_FACE
A) Switch to a hoster(they normally have 24/7 support for this kind of stuff)

B) Get the IP he first used to join, and report it to whatever Web Security is available in the country you live in. Booting IS illegal. And he WILL get fined if caught.


Of course, he may not even be booting, in which case this whole reply is useless

._.


Click to reveal
Thisisalsoagoodideatryit
1
Swimmer1929
09/21/2013 7:22 pm
Level 40 : Master Taco
Whoahhhh, whoah whoah. Hold up. I went on the server on your submission, joined and it's CRACKED.
1
Pease_Xpress
09/21/2013 7:25 pm
Level 24 : Expert Taco
Ooooh...
Double whamy.
First off: You can't have offline servers in the Servers category.
Second off: Change it to online.
1
Paril
09/21/2013 7:24 pm
He/Him • Level 89 : Elite Scapegoat Programmer
Whitelist the server. Easy.

Second option is to use a permission plugin to block new players from performing commands. This should let you see what he's typing in order to do it.

He's probably exploiting one of your plugins.

Third option as said above is he's using DoS software. You didn't specify whether the lag was server-side CPU lag or network lag. If it's the latter, then that's the most likely cause. Contact your host and tell them about it.

-P
1
MACMAN-
09/21/2013 7:26 pm
Level 2 : Apprentice Explorer
WAIT ITS CRACKED?
1
Swimmer1929
09/21/2013 7:27 pm
Level 40 : Master Taco
MACMAN-:shock: :shock: :shock: :shock: :shock: :shock: :shock: WAIT ITS CRACKED?

Yes, it's cracked. Cracked server's aren't allowed to be posted as submissions, and this one is.
1
Corsicaman
09/21/2013 7:29 pm
Level 26 : Expert Network
Wow wow guys calm down it's not cracked! That's right, we got the Authme plugin but it doesn't mean we're cracked... -_-

BLESS_YO_FACE
CorsicamanMy server is not a "server for friends". It's a serious server with usually 20-30 people online, hosted 24/7 by a very secure host, he can't access the console.

He just seems to be typing something in the chat, and that crashes the server.

Whitelisting my server for a few days might work since I have a plugin that automatically adds new players to the whitelist, so I won't lose them, however what tells me that he won't come back 1 week later, once the whitelist will be removed?


If this server is being hosted off your computer, it is more than likely that he is booting your server offline.

The only reason he is going on, is to probably taunt you, when he is standing still, it means that he is getting his booter ready.

The best course of action would be to either

A) Switch to a hoster(they normally have 24/7 support for this kind of stuff)

B) Get the IP he first used to join, and report it to whatever Web Security is available in the country you live in. Booting IS illegal. And he WILL get fined if caught.


Of course, he may not even be booting, in which case this whole reply is useless

._.



As I said above, I already have a host.
1
mchungames4441
09/21/2013 7:34 pm
Level 2 : Apprentice Taco
Whitelist the server, then he'll need your permission to log in no matter what IP or account he's using. Don't take the whitelist off at all, and make a form on the server website to fill out to get into the server.
1
Corsicaman
09/21/2013 7:35 pm
Level 26 : Expert Network
ParilWhitelist the server. Easy.

Second option is to use a permission plugin to block new players from performing commands. This should let you see what he's typing in order to do it.

He's probably exploiting one of your plugins.


Paril is right, it must be that. Someone told me I should also install Commandslog to know what command he is typing more easily, so I'll try that.
1
MACMAN-
09/21/2013 7:35 pm
Level 2 : Apprentice Explorer
StupidPerson hacker eh whitelist da server ban his ip mute him

sheep baaah

Testificate have you tried to ban his ip and ban him and whitelist the server?

all are very wise exept the sheep's idea
1
mchungames4441
09/21/2013 7:36 pm
Level 2 : Apprentice Taco
Corsicaman
ParilWhitelist the server. Easy.

Second option is to use a permission plugin to block new players from performing commands. This should let you see what he's typing in order to do it.

He's probably exploiting one of your plugins.


Paril is right, it must be that. Someone told me I should also install Commandslog to know what command he is typing more easily, so I'll try that.

Oh yeah, that's a good idea. Maybe you can disable the command on the server when you find out the command he's using.
1
nyanekomimi
09/21/2013 7:37 pm
Level 51 : Grandmaster Technomancer
Why am I laughing at this.
1
Corsicaman
09/21/2013 7:41 pm
Level 26 : Expert Network
Good question. Because you're one of them?
1
MACMAN-
09/21/2013 7:42 pm
Level 2 : Apprentice Explorer
im so confused that i think that your blasting me with a paradox
1
nyanekomimi
09/21/2013 7:44 pm
Level 51 : Grandmaster Technomancer
I know that this is serious but I keep imagining some guy standing in the middle of a street then the world exploding.
1
MACMAN-
09/21/2013 7:48 pm
Level 2 : Apprentice Explorer
i imagine of a guy standing nin the middle of a spawn on a glass block standing still then the server crashes
1
TacoBurgerzgaming
09/21/2013 9:29 pm
Level 24 : Expert Taco
Good question. Because you're one of them?[/quote]
im so confused that i think that your blasting me with a paradox[/quote]
I know that this is serious but I keep imagining some guy standing in the middle of a street then the world exploding.[/quote]
Now i wanna laugh!!!
1
MACMAN-
09/21/2013 7:39 pm
Level 2 : Apprentice Explorer
MACMAN- commandlog and AVAST will work
Click to reveal
dont open the spoiler in this spoiler the stupid person is in there
Click to reveal
THANK YOU FOR LETTING ME OUT *barf*
1
Jenko90
09/21/2013 7:45 pm
Level 1 : New Miner
Commandlog should do it, once you know what the exploit is then you can either remove that plugin or have you tried updating all your plugins recently?

Second.. make that rank with no commands, and let staff promote unless they apply for citizenship.
1
Swimmer1929
09/21/2013 7:47 pm
Level 40 : Master Taco
CorsicamanWow wow guys calm down it's not cracked! That's right, we got the Authme plugin but it doesn't mean we're cracked... -_-

BLESS_YO_FACE
CorsicamanMy server is not a "server for friends". It's a serious server with usually 20-30 people online, hosted 24/7 by a very secure host, he can't access the console.

He just seems to be typing something in the chat, and that crashes the server.

Whitelisting my server for a few days might work since I have a plugin that automatically adds new players to the whitelist, so I won't lose them, however what tells me that he won't come back 1 week later, once the whitelist will be removed?


If this server is being hosted off your computer, it is more than likely that he is booting your server offline.

The only reason he is going on, is to probably taunt you, when he is standing still, it means that he is getting his booter ready.

The best course of action would be to either

A) Switch to a hoster(they normally have 24/7 support for this kind of stuff)

B) Get the IP he first used to join, and report it to whatever Web Security is available in the country you live in. Booting IS illegal. And he WILL get fined if caught.


Of course, he may not even be booting, in which case this whole reply is useless

._.



As I said above, I already have a host.


Funny how you deny it being cracked. Mods/Admins, this server is cracked (he posted it as a server submission on his profile).
1
Corsicaman
09/21/2013 7:56 pm
Level 26 : Expert Network
swimmer1929
CorsicamanWow wow guys calm down it's not cracked! That's right, we got the Authme plugin but it doesn't mean we're cracked... -_-

As I said above, I already have a host.


Funny how you deny it being cracked. Mods/Admins, this server is cracked (he posted it as a server submission on his profile).


What the hell man? My server is premium, why are you saying that? Admins, don't listen to him please.
1
Swimmer1929
09/21/2013 7:58 pm
Level 40 : Master Taco
Corsicaman
swimmer1929
CorsicamanWow wow guys calm down it's not cracked! That's right, we got the Authme plugin but it doesn't mean we're cracked... -_-

As I said above, I already have a host.


Funny how you deny it being cracked. Mods/Admins, this server is cracked (he posted it as a server submission on his profile).


What the hell man? My server is premium, why are you saying that? Admins, don't listen to him please.

Pretty pathetic how you're so hell-bent on making sure nobody finds out your server is cracked.
1
Corsicaman
09/21/2013 8:01 pm
Level 26 : Expert Network
Me pathetic? I'd say you're the pathetic one, doing everything you can to get rid of your competitors...

I have nothing to hide, join my server and see by yourself.
1
MACMAN-
09/21/2013 8:05 pm
Level 2 : Apprentice Explorer
whats your update of the server 1.6.2 1w38c ect.
1
Swimmer1929
09/21/2013 8:06 pm
Level 40 : Master Taco
Nah, just doing my duty and reporting cracked servers like we're supposed to. Also, you never mentioned in the OP that your server is cracked, if you did we would all know why the hacker was able to do this. Make your server online if you would like to "get rid of this hacker" ;)

So I joined and got this screenshot:
http://i.imgur.com/luDQPKM.png
(You can see that it asks you to not create several accounts and prompts you to log in)

While that doesn't prove it's cracked, you can still log on for yourself and ask.
1
MACMAN-
09/21/2013 8:02 pm
Level 2 : Apprentice Explorer
Corsicaman

As I said above, I already have a host.


What the hell man? My server is premium, why are you saying that? Admins, don't listen to him please.
idontknowPretty pathetic how you're so hell-bent on making sure nobody finds out your server is cracked.

HIS SERVER IS NOT CRACKED LISTEN TO HIM FOR ATLEAST ASECOND!
1
Corsicaman
09/21/2013 8:05 pm
Level 26 : Expert Network
MACMAN-
Corsicaman

As I said above, I already have a host.


What the hell man? My server is premium, why are you saying that? Admins, don't listen to him please.
idontknowPretty pathetic how you're so hell-bent on making sure nobody finds out your server is cracked.

HIS SERVER IS NOT CRACKED LISTEN TO HIM FOR ATLEAST ASECOND!

Thanks bro.
1

Welcome