Forum

Results 1 to 11 of 11

Hybrid View

  1. #1
    Join Date
    June 2014
    Posts
    16

    Wierd Query Login Attempts on my server

    Today i updated both of my servers to the latest version (3.7.0) and after that i get failed query login attempts from the same ip.
    PS: servers are in two different machines with different ip and didn't have this issue before.

    Any idea what is wrong?

    https://i.imgur.com/D06eCDL.jpg

  2. #2
    Join Date
    June 2008
    Posts
    17,809
    Does it only happen on every instance start? -> A script is running on that machine tried to connect.
    Or did it only happen once? -> Check your old logs possibly someone tried to login before.
    When sending me private messages: Please make sure to include reference link to your forum thread or post.

    TeamSpeak FAQ || What should i report, when i open a client thread?

  3. #3
    Join Date
    June 2014
    Posts
    16
    Quote Originally Posted by dante696 View Post
    Does it only happen on every instance start? -> A script is running on that machine tried to connect.
    Or did it only happen once? -> Check your old logs possibly someone tried to login before.
    As i said after the update to version 3.7.0 this started happened. I have the default query ip ban at 10 minutes so every 10 minutes it tries to login again in both machines. If it makes sence, it tries with different names every 2 failures as i see. The IP that gets banned is unknown to me and has nothing to do with my servers cause none of them own it. A normal geo-location search also shows India, when the servers are hosted in Germany.

    EDIT:
    HMM, what the .... Searched yesterday's log before the update.
    https://i.gyazo.com/a7fc646494b44b79...54b56647f5.png
    So someone is trying to gain access with wierd / random accounts, or trying to flood or what?
    Same stuff on the other server, no point to send the same log again. Just random other login names.

    Everything looks like started yesterday morning. Looks like some bot or something.


    PS: as it's not an error related directly to 3.7.0 could you change the title and remove the "After 3.7.0 Update" part? I am not able to.
    Last edited by Alligatoras; March 20th, 2019 at 08:34 AM.

  4. #4
    Join Date
    June 2008
    Posts
    17,809
    Please add the IP to the blacklist or block it completely in your firewall or change the port for the ServerQuery interface (telnet and SSH).

    Changed the title.
    When sending me private messages: Please make sure to include reference link to your forum thread or post.

    TeamSpeak FAQ || What should i report, when i open a client thread?

  5. #5
    Join Date
    June 2014
    Posts
    16
    Quote Originally Posted by dante696 View Post
    Please add the IP to the blacklist or block it completely in your firewall or change the port for the ServerQuery interface (telnet and SSH)
    Uhh, as i never managed to make it work with the ini file i guess i will just block the ip both in firewall and the ts3 blacklist.
    Anyway, thank you
    Last edited by Alligatoras; March 20th, 2019 at 08:57 AM.

  6. #6
    Join Date
    June 2008
    Posts
    17,809
    Create server.ini file and fill in what is listed below and there change the port.
    Start he server with parameter inifile=server.ini and the server will use other ports.


    Code:
    query_ip=0.0.0.0,::
    query_port=10011
    query_ssh_ip=0.0.0.0,::
    query_ssh_port=10022
    query_protocols=raw, ssh
    When sending me private messages: Please make sure to include reference link to your forum thread or post.

    TeamSpeak FAQ || What should i report, when i open a client thread?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Lost Server query Login
    By KeksDipp in forum Linux / FreeBSD
    Replies: 1
    Last Post: June 27th, 2016, 12:46 PM
  2. server query login
    By locuazon5 in forum Server Support
    Replies: 1
    Last Post: June 25th, 2013, 04:33 PM
  3. Can't Login to Server Query
    By behgonn in forum Permission System
    Replies: 2
    Last Post: April 23rd, 2013, 10:43 AM
  4. need help server query login
    By brandon789 in forum Linux / FreeBSD
    Replies: 7
    Last Post: November 29th, 2012, 11:11 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •