PDA

View Full Version : My TS Was Hacked...


MaXXimus
21-05-2006, 23:05
Ok maybe someone can help me on this one...

Two days ago I was in my TS and 2 unregistered people joined, I right clicked on their names and game them voice. One asked me why I banned a certain person and I said because he is from a gaming clan I do not allow on my TS. He went on to TELL me I better unban this person and I said no and he then started with abusive language so I right clicked the 2 names and banned them.

Two seconds went by and the one showed back up so I banned again and still he kept coming back in and next thing ya know we were all kicked and banned. I run TS off my own machine so I shut it down for a few minutes and then when I restarted I went right into SuperAdmin deleted the SA accounts they created and added a password for the server. No more then 10 seconds this same @!#$!@ was back in again and kicked and banned me.

What was odd is that when I right clicked on the TS Server Icon in System Tray it showed 3 IP's ##.##.###.## which was my IP, ###.###.#.### which was my IP from router and a 3rd one which If I recall was something on the lines of 0.4.0.4 I would assume this had something to do with however they were able to hack my TS but my question is... what is it that they could do to add another IP to my TS like that?

To resove the issue and havent had a problem since, I reinstalled a fresh copy of TS and took away all but texting to other players and channel from CA and SA and also made myself the only SA and took away the rights for me to give SA, they must register first and then I give them CA... I also passworded the server on top of all this as well.

Conman5
21-05-2006, 23:15
They could have done something with TCP. I dont know too much about TS but i think its possible

Or maybe they loaded a virus to ur computer that allowed them to interfear with TS

veggii
22-05-2006, 00:25
Did you use the same passwords when you created it a second time? Did you change your superadmin password?

MaXXimus
22-05-2006, 00:50
Ya know... I dont think I did... LOL, but why did the new IP show up in the list?

Conman5
22-05-2006, 04:25
This is going to sound crazy, but maybe they were somehow able to connect you to a VPN controled by them. LOL it's late and im just talking nonsense

veggii
23-05-2006, 00:50
I'm not sure what 0.4.0.4 is but try opening your web browser on the computer that the teamspeak server is running on and enter http://0.4.0.4:14534/slogin.html
My theory is that it might be another IP of your computer, created by your computer, for your computer, like localhost. Just a theory though.

sgtbenc
23-05-2006, 01:22
This is going to sound crazy, but maybe they were somehow able to connect you to a VPN controled by them. LOL it's late and im just talking nonsenseWell, they would have to have gotten access to his computer to actually install a VPN, unless he installed it himself.

MaXXimus
23-05-2006, 02:39
Well my computer didnt just out of the blue create this IP, I know for a fact that they were not present until the time of the attack. So whatever type of attack or script they used is directly associated with this IP showing up, no question about it.

I'm not sure what 0.4.0.4 is but try opening your web browser on the computer that the teamspeak server is running on and enter http://0.4.0.4:14534/slogin.html
My theory is that it might be another IP of your computer, created by your computer, for your computer, like localhost. Just a theory though.