Something strange is happening

[FSchroeder]

Hey,


at 00:54 a customer has written the following ticket:

---

Hallo !!! Gerade hat sich auf meinem server was seltsames abgespielt , will nur sicher gehen das der nicht gehackt wurde oder so !!! Der text stand im chat nachdem ein komischer ton aus meinem headset kam ^^ hat aber keiner was gemacht , waren grad alle ingame !! "

<00:47:06> Die Channel Gruppe "Channel Admin (69)" wurde "Angeldust / Sven" von B.F.T. Teamspeak³ zugewiesen.
<00:47:06> "Unknown from 85.25.143.145:40297" betrat den Server
<00:47:06> "Unknown from 85.25.143.145:40297" hat die Verbindung getrennt (deselected virtualserver)" Angelust/ sven bin ich !!

Evtl.gehackt oder was war das ?! mfg sven

---

What i wondered about, the customer is on annother IP. The customers server is installed on the server with the ip 85.131.234.200.

On the IP 85.25.143.145 run another instance we host too. But both instances works correctly. What happend there?

Nothing was logged in the serverlogs of both instances.

[Lil-rich]

Seems like somebody from 85.25.143.145 connected via telnet to the Server Query Admin Console of the other server. When he got a signal he used another server (use <serverid>) and so he disappeared. Maybe he tried to gain access by trying some pws like "asd" or "password"...

Nothing spectacular so far. I got those messages on my servers every hour and they still run fine

Just the thing about the "strange noise/tone" makes me wondering. Perhaps just a howl of one of the clients or somebody started his 56k modem
As long as the server is running fine you can be 99% sure that nobody "hacked" your server (because they who try to "hack" the servers won't let you go like nothing happened ^^ They kickban you, delete all channels and write stuff like "YOU GOT HACKED BY 1337HaxX0R" in all channels etc. - of course not always... This is why I wrote 99% )