Attempted TS2 Server "Attack"

[priestx]

Users:

Frto
jordan2
Yoya - ************ (EDITED by Guldi: Do not post IP's here, see McAfee's post, thx)

Tried a "ctrl-e" to access server adminstration and deny access to TeamSpeak2.

Thought I'd just report these idiots. :cool:

[McAfee]

Hope you know it's of bad ethics to post someone's IP address. A person's IP address may be dynamic, and usually is.

In doing so, you may be accusing an inocent person, who just got asigned that IP by their provider.

PS. I wouldn't call an atempt to logon an "attack"

[3rdDegree]

Relatively new to Team Speak, I set up a clan for my TS server and left it public for others to use. I changed the Admin / SuperAdmin pw's to very unique numbers. However some guy came in and changed his name to match our Clan Handle and another members named and was asking everyone to "Right-Click on his name and press E" don't know what happened next. Because he the proceeded to ban everyone that joined.

-=DA=-The Dude was his name and [Deadly Assassian] was what he renamed the channel to. I'm the only admin so I don't know how he was able to login..

1) Whats the Right Click E / or Ctrl E thing do
2) Is there security issues with Team Speak? And If Yes how can you prevent this from happening.

Thanks for any reply.

This was definitely an Attack....

[Sn4ke]

It makes them a server admin

[Brain]

It's a shortcut for grant/revoke SA privileges derived from the context menu.

[guldi]

2) Is there security issues with Team Speak? And If Yes how can you prevent this from happening.
take away the rights to grant and revoke SA rights.

con: this way you have to grant/revoke SA rights via the webadmin. But I assume you do not play around with these rights each day, so this shouldn't be a too big issue.

[DeW46]

My friends server was "attacked" in a way of they removed all channeles and BANNED MOST OF MY FRIENDS IP'S I NEED HELP FOR SOEM REASON SOME1 GRANTED THEM SA And now im stuck in a crisis HELP ME PLZ!

[3rdDegree]

If your like me, they banned my IP as well... I was the server admin and the server was the IP they banned. So I could not login. there is a server.dbs database file that stores all this information. I don't know what you can open/edit this with.. I simply re-installed the server portion to get a new fresh dbase. I took about 5 mins to setup super / server admin.. Then I proceeded to Revoke the ability for other admins to grant admin privledges. I also Passworded the server but I don't think I really need that. So I may go public again.

[DeW46]

Do you think my friends server needs to do that?

[TrekHAXOR]

ok, if you are running the server from your own computer, you can log in via the localhost. if you are on the stock port it is localhost:8767. Also, don't forget about your web administration. most attackers aren't smart enough to figure out how to connect to your web admin panel.

[WalkaboutTigger]

I frequently backup the TeamSpeak directory (about every 2 hours) so that if someone were to do something nefarious, the server could be restored from a snapshot prior to the havoc.

Something you might want to think about...

Walkabout