1
Possible hacking?
On my server, very weird things are going on. Recently, one of my Moderator (SkaterX411) is suddenly spamming random swear words in a fashion like this (lets say foo is a swear).
<SkaterX411>foofoofoofoofoofoofoo
He isn't actually swearing, which is verified by his brother which is an admin on my server. Then, the server reaches 98% CPU usage, and when I try to shut down the server I get crash reports.
We get SkaterX411 to get a fresh copy of Minecraft, and it still persists. We test something on SkaterX411's brother, we de-op him and suddenly he's spamming swear words too.
Our server is running Spigot, and our swear filter is PwnFilter. Anyone know how this could be happening? Thanks.
<SkaterX411>foofoofoofoofoofoofoo
He isn't actually swearing, which is verified by his brother which is an admin on my server. Then, the server reaches 98% CPU usage, and when I try to shut down the server I get crash reports.
Click to reveal
04.05 22:44:13 [Disconnect] User [Owner]~BattlingApollo has disconnected, reason: Server shutting down
04.05 22:44:13 [Disconnect] User [Member]~SirNoob has disconnected, reason: Server shutting down
04.05 22:44:13 [Multicraft] Server stopped
04.05 22:44:13 [Multicraft] Server shut down
04.05 22:44:13 [Multicraft] Forcefully killing server
04.05 22:44:12 [Server] INFO Stopping server
04.05 22:44:12 [Multicraft] Skipped 517 lines due to rate limit (30/s)
04.05 22:44:12 [Multicraft] Terminating server via signal
04.05 22:44:04 [Server] SEVERE java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1043)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.SynchronousQueue.poll(SynchronousQueue.java:942)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:359)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:226)
04.05 22:44:04 [Server] SEVERE sun.misc.Unsafe.park(Native Method)
04.05 22:44:04 [Server] SEVERE Stack:
04.05 22:44:04 [Server] SEVERE PID: 70 | Suspended: false | Native: false | State: TIMED_WAITING
04.05 22:44:04 [Server] SEVERE Current Thread: Async Packet Handler - 7
04.05 22:44:04 [Server] SEVERE ------------------------------
04.05 22:44:04 [Server] SEVERE Current Thread State:
04.05 22:44:04 [Server] SEVERE Spigot version: git-Spigot-735 (MC: 1.5.1)
04.05 22:44:04 [Server] SEVERE Be sure to include ALL relevant console errors and Minecraft crash reports
04.05 22:44:04 [Server] SEVERE Please report this to http://www.spigotmc.org/
04.05 22:44:04 [Server] SEVERE The server has stopped responding!
04.05 22:44:00 [Server] INFO I
04.05 22:44:00 [Server] INFO say <> Low on cash? Earn $250 every time you vote! Click here ---> bit.ly/Xggsc
04.05 22:44:00 [Multicraft] Server ran command Admin Say
04.05 22:43:40 [Server] INFO stop
04.05 22:43:40 [Server] INFO save-all
04.05 22:43:40 [Multicraft] Stopping server!
04.05 22:43:40 [Multicraft] Received stop command
04.05 22:44:13 [Disconnect] User [Member]~SirNoob has disconnected, reason: Server shutting down
04.05 22:44:13 [Multicraft] Server stopped
04.05 22:44:13 [Multicraft] Server shut down
04.05 22:44:13 [Multicraft] Forcefully killing server
04.05 22:44:12 [Server] INFO Stopping server
04.05 22:44:12 [Multicraft] Skipped 517 lines due to rate limit (30/s)
04.05 22:44:12 [Multicraft] Terminating server via signal
04.05 22:44:04 [Server] SEVERE java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1043)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.SynchronousQueue.poll(SynchronousQueue.java:942)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.SynchronousQueue$TransferStack.transfer(SynchronousQueue.java:359)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.SynchronousQueue$TransferStack.awaitFulfill(SynchronousQueue.java:460)
04.05 22:44:04 [Server] SEVERE java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:226)
04.05 22:44:04 [Server] SEVERE sun.misc.Unsafe.park(Native Method)
04.05 22:44:04 [Server] SEVERE Stack:
04.05 22:44:04 [Server] SEVERE PID: 70 | Suspended: false | Native: false | State: TIMED_WAITING
04.05 22:44:04 [Server] SEVERE Current Thread: Async Packet Handler - 7
04.05 22:44:04 [Server] SEVERE ------------------------------
04.05 22:44:04 [Server] SEVERE Current Thread State:
04.05 22:44:04 [Server] SEVERE Spigot version: git-Spigot-735 (MC: 1.5.1)
04.05 22:44:04 [Server] SEVERE Be sure to include ALL relevant console errors and Minecraft crash reports
04.05 22:44:04 [Server] SEVERE Please report this to http://www.spigotmc.org/
04.05 22:44:04 [Server] SEVERE The server has stopped responding!
04.05 22:44:00 [Server] INFO I
04.05 22:44:00 [Server] INFO say <> Low on cash? Earn $250 every time you vote! Click here ---> bit.ly/Xggsc
04.05 22:44:00 [Multicraft] Server ran command Admin Say
04.05 22:43:40 [Server] INFO stop
04.05 22:43:40 [Server] INFO save-all
04.05 22:43:40 [Multicraft] Stopping server!
04.05 22:43:40 [Multicraft] Received stop command
We get SkaterX411 to get a fresh copy of Minecraft, and it still persists. We test something on SkaterX411's brother, we de-op him and suddenly he's spamming swear words too.
Our server is running Spigot, and our swear filter is PwnFilter. Anyone know how this could be happening? Thanks.
4
Looks like there is a plugin running asynchronous calls, and doing so badly. A plugin list would help.
what plugins are you running
and were are you getting them from\
Edit: that link leads to a non existant site
also is this hosted off of your computer?
and were are you getting them from\
Edit: that link leads to a non existant site
also is this hosted off of your computer?
I re-downloaded Spigot and all my Bukkit plugins. I de-oped myself and then I started swearing, so I think it's not an account problem. Then the server started reaching 98% CPU usage again.
1. Try getting a clean copy of the Spigot jar from their site http://www.spigotmc.org/
2. Go get new copies of your plugins http://plugins.bukkit.org
3. Have SkaterX411 change his MineCraft password
If the above doesn't work then I'd have SkaterX411 maybe run a virus scan
and if it continues I'd
get a plugin such as command spy and see if you have maybe a another person making him say things
2. Go get new copies of your plugins http://plugins.bukkit.org
3. Have SkaterX411 change his MineCraft password
If the above doesn't work then I'd have SkaterX411 maybe run a virus scan
and if it continues I'd
get a plugin such as command spy and see if you have maybe a another person making him say things
