Cracked TS3 Spam - Hacked?

[bbqeater]

<time censored> "GameTracker": The cracked server and license for slots 16776960 and 65535 servers...
Test server: URL CENSORED
Free Android and iOS client.
Crack to bypass blackList and advanced bans!
Link : http://URL CENSORED

We admins were chatted at by this bot with that message, the log is not showing any IP or UID, because I didn't log the ServerQuery so far (we never had this problem before). After clicking the name in the serverchat and trying to ban, I'm getting this error:
<time censored> missing required parameter

A look into the ban list after that only had the UID "ServerQuery" banned (makes no sense?!)

I guess I will have to whitelist the query from now on.

[Morthawt]

Add the client id of ServerQuery to a server group and on that server group block the ability to send messages. You could also do this via client permissions. However this ability will be removed with the upcoming server update for new servers. So likely you will need to put these settings in manually. New servers guard against this by default.

[bbqeater]

We already have default permissions set so far, that regular users won't receive those messages anyways.
I just can't understand, why I can't ban that Client.

[ANR Daemon]

Limit access to a serverquery. And adjust permissions to prevent guests from sending messages through it.

[joshua2504]

Its the Guest Server Query, no hack.

[numma_cway]

Was actually a query user or some very strange hack? I mean it advertises ignoring bans and if TS accepts ServerQuery as a voice client ID (can't say if it does), it's over.

[bbqeater]

YES! That's what I mean.
It's using a not possible ID, does not save an IP AND also, it sends private messages, even though it can't!
I just checked the Guest Query permissions and it does not have the private textmessage power set at all!

The advertised "hacks" do work!
It's advertising even more, from ignoring antiflood to ignoring server passwords!
Please understand: You can not even ban people using that tool now!

@Teamspeak Devs: If you need the real link, I can send you that through PM if you like
We are using TS3 Server v. 3.0.10.3 on Windows x64

[Ahmed]

i remember a guy once asked me about this said he banned him from his server but he still connects he even came back as a voice user talked to him a little and then DDoSed his server for few min

[numma_cway]

I just checked the Guest Query permissions and it does not have the private textmessage power set at all!
[...]
We are using TS3 Server v. 3.0.10.3 on Windows x64

You are using an outdated server where the Guest Query group does not affect people on virtual servers. Guest Query group only works when using a the recent server version.
And even then, having no permission that might actually be enough to PM certain people. But not sure about that.

[bbqeater]

3.0.10.3 is not outdated, it's the most current stable.
http://www.teamspeak.com/?page=downloads

Guest Query group only works when using a the recent server version.

It is the most recent version, please don't tell lies.

And even then, having no permission that might actually be enough to PM certain people. But not sure about that.

There is no permission that allows them to PM, thats the point.

[numma_cway]

Guest Server Query does not work in 3.0.10.3.

[bbqeater]

LOL
Then how are the TSViewer.com, Game-State.eu and GameTracker Crawlers retreiving their data?
Also, how is anyone able to spam through something that doesn't work?

[numma_cway]

Because the Guest standard server group takes place.

[ANR Daemon]

LOL
Then how are the TSViewer.com, Game-State.eu and GameTracker Crawlers retreiving their data?
Also, how is anyone able to spam through something that doesn't work?

Before starting an argument, try to do some research. you might find that your argument is void before start.

Also, stop using useless decorations in your posts, if you want people to read them.

[bbqeater]

Maybe you're right, thank you for that information.
But where is the problem in telling that in the first place, without creating misunderstandings?
Telling me to do research instead of just providing the info in the first place?
Otherwise I have the feeling that you're trying to create arguing and not find solutions.
Especially as this is not the regular all-day thing to know about this specific problem/bug.
Okay, let's just forget about it.

However: The exploits seems to exist anyways.
It's not possible to ban the IP/UID because both are not logged by TS (the IP probably will be in the serverlog, if you activate ServerQuery logging - but they're using very frequent names like "GameTracker" etc. as stated before).