Query creates channels, send messages or pokes users

[lars-olof]

I have same problem...

<01:32:21> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<01:37:25> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<01:38:55> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<01:38:55> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<01:38:56> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*

[Chris]

#148 - #151 have been merged to this thread.
There once (until server 3.0.11.2, which fixed it) was a loophole in default query permissions that allowed query connections to send messages through query.
If your server instance was created using an older version than specified above, you need to manually fix those permissions. See first post, the changelog for Server 3.0.11.2 or the Announcement thread in the forums for instructions.

[warfront1]

The same exact spammer has been targeting my teamspeak today (2/11/2017).
I'm just hoping he goes away so I don't have to alter my permissions.
If not I'll make a backup and try fixing them.

When you try to ban the user you get the following error:
"missing required parameter"

I honestly think that you should be able to ip ban someone who sends a message to the server like this, regardless of a historic permissions issue.

Warfront1

[Demianz]

Today I have the same problem too, server version 3.0.13.6.

[Soluna]

Same problem with my linux-server...I just updated to version 3.0.11.4 in the hope that the latest version fixes that but unfortunately it didn´t...I really hope there will be a fix soon.. My community even started asking me if I could stop the spam :/

[ScP]

Execute the following commands via ServerQuery to resolve the issue:

servergroupautoaddperm sgtype=20 permsid=b_channel_join_permanent permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_channel_join_semi_permanent permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_channel_join_temporary permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_channel_create_permanent permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_channel_create_semi_permanent permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_channel_create_temporary permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_client_server_textmessage_send permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_client_channel_textmessage_send permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=b_client_offline_textmessage_send permvalue=0 permskip=1 permnegated=1
servergroupautoaddperm sgtype=20 permsid=i_client_private_textmessage_power permvalue=-1 permskip=1 permnegated=1 
servergroupautoaddperm sgtype=20 permsid=i_client_poke_power permvalue=-1 permskip=1 permnegated=1

[stoyk]

Today I have the same problem too, server version 3.0.13.6.

same here, and i've got the same version than you, WTF is that spam ? how to stop it ?

[tiga05]

Hello,

I tried the fix in the first post, but I only get an error when I type the command "use port=ANY_ACTIVE_PORT": error id=1540 msgconvert\serror.

So I repeated this (and the other command) with the default port 9987 and it worked. So.... I think this is now only fixed for the server with the port "9987"? What does this error mean, when I try to use all ports?

[Barungar]

You can't use "any_active_port"; it's just a place holder in the posting. You'll have to repeat the steps for any active server/port combination.

[pakiko]

Spam on my server, help plz


ip spam 209.15.243.68:33409


https://gyazo.com/840ab053ec43d265bf67c8ceb6769045

<12:59:10> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<12:59:10> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<12:59:10> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<12:59:10> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*
<12:59:10> "Server": Monitor your TS3 server or game server, custom your banner and more stats : *AdLink Removed*

[Soluna]

Will there be an official fix or how can we get rid of this? It´s really annoying and it feels as if the users receive this spam at increasingly shorter intervals

[Chris]

Hello,

I tried the fix in the first post, but I only get an error when I type the command "use port=ANY_ACTIVE_PORT": error id=1540 msgconvert\serror.

So I repeated this (and the other command) with the default port 9987 and it worked. So.... I think this is now only fixed for the server with the port "9987"? What does this error mean, when I try to use all ports?

It's a place holder, since we cannot know which ports are being used on your installation. It written in caps to indicate it being a place holder. Given that it says "any" it doesn't matter which one you use as long as it's an active server.
The command will actually fix it on all virtual servers, current and future ones.

You can't use "any_active_port"; it's just a place holder in the posting. You'll have to repeat the steps for any active server/port combination.

No you don't. The command will fix all virtual servers in the instance.

Will there be an official fix or how can we get rid of this? It´s really annoying and it feels as if the users receive this spam at increasingly shorter intervals

New installations are not affected for over 2 years. Old instances are because there wasn't an easy way for us to fix those while not potentially messing up user made changes to the group.
So if your instance is old you have to change the permissions once by running the command(s) indicated in the announcement as well as the first post of this thread. Or the ones posted by ScP a couple of posts up, which do the exact same thing as those in the first post. He just split them up and used a different command not requiring to select a specific server.

[Roose]

A bot comes in and spams a website to all the users thru a private message.

I took off where new users cannot message other users.

For some reason its bypassing that parameter.

I them try to ban the user and it states missing required parameter.

[inSANEGeek]

Hello everyone,
For a few days now, I receive a message from "Server" every 10-15 minutes by sending to all the people of the Teamspeak: <22:19:12> "Server": Monitor your TS3 server or custom server And more stats: *AdLink Removed*.
I do not know how to remove
Server teamspeak hosted by OVH.

Thank you very much for your help.
Regards,

[XDE4TH]

We had the same problem but resolved it by updating the server. Doesn't appear that query client has been able to send anymore messages.

We also reported the IP that our client was connecting from to the provider. Ours was spamming the same ranksr domain and the IP ended in "xxx.xxx.79.53"(not sure if giving whole IPs are okay). In the top right corner of American Registry for Internet Numbers(ARIN) you can enter an IP address and then it will return who the provider is. In my case it was Digital Ocean and it appears that whoever is running the server from that IP on Digital Ocean may be in violation of some of their Spam/Automation TOS clauses. We provided them snippets from the logs and some screenshots, along with this thread. It is worth a shot anyways, won't hurt anything and you can try the same if you find the IP address belongs to a provider. Not to say they won't just start another server elsewhere.. :S

The response we got from Digital Ocean was...

Thank you for submitting your abuse complaint. One of our support engineers has picked it up and assigned it to the customer in question and it will be resolved as soon as possible.

Maybe something will happen, maybe not. Hope you all get your issues resolved too.