Forum

Page 15 of 16 FirstFirst ... 513141516 LastLast
Results 211 to 225 of 234
  1. #211
    Join Date
    February 2017
    Posts
    3

    Exclamation Server query spam.

    Hi, dont know where to put this, so Ill put it here. I am currently an admin for two servers, and I cant ban a client. This client spams the users, then disconnects.

    From one server
    <13:48:26> "Unknown from 37.59.31.160:41724" connected to channel "Landing Zone -> 15 Min Auto Kick"
    <13:48:27> "Unknown from 37.59.31.160:41724" disconnected (disconnecting)
    <13:48:41> missing required parameter
    From another.
    <13:44:01> "Unknown from 37.59.31.160:50610" connected to channel "Landing Zone -> 15 Min Auto Kick"
    <13:44:02> "Unknown from 37.59.31.160:50610" disconnected (disconnecting)
    <13:46:26> "Unknown from 159.203.2.181:51628" connected to channel "Landing Zone -> 15 Min Auto Kick"
    <13:46:27> "Unknown from 159.203.2.181:51628" is now known as "Server"
    <13:46:27> "Server" disconnected (disconnecting)

    I know that this is a server query, as when I deselect the "Show server query" from bookmarks, I cant see this.

    Anyone know anyway to stop this?
    Last edited by dante696; February 18th, 2017 at 07:44 PM. Reason: merged

  2. #212
    Join Date
    February 2017
    Posts
    3
    Read this thread. There are instructions. As a temporary fix you can block their ip's when you have a linux host. Example:

    sudo iptables -A INPUT -s 159.203.2.181 -j DROP

    Look for further instructions for the serverquery fixes in this thread.

  3. #213
    Join Date
    September 2007
    Location
    Liverpool, England
    Posts
    14
    Quote Originally Posted by Chris View Post
    They could've been yes, but we're just regular old humans ourselves and make mistakes here and there. Back when this loophole was first found, we fixed it and the default permissions do not allow this since server 3.0.11. The changelog also mentioned the extra permissions we're using and why. The forum announcement of that version also included them. I don't exactly remember why we didn't update existing databases with those new permissions, but it was a decision that was made and there was a reason for it. In any case everyone had the chance to be informed and update their permissions. It doesn't affect any database that was created with an up to date server as of September 2014.




    Sure do hope you updated your server within those 8 years. If you don't have it you can read the documentation or look here for ways to get it back without starting from scratch.
    Will look at this thanks... ps ive updaterd the server in all that time & thats about it

  4. #214
    Join Date
    August 2011
    Posts
    1
    I have updated to the latest version, done everything else in this thread and the only way is blocking the IP's.

    All the IP's appear to belong to DigitalOcean. While we can't do anything at the moment, I feel that an abuse report should be issued to DigitalOcean for these IP's.

    If you guys are coming along this thread, please ban the IP's using IPtables.

    138.197.79.53
    138.68.64.36
    159.283.2.181
    139.59.152.99

  5. #215
    Join Date
    June 2008
    Posts
    18,108
    Quote Originally Posted by VampiricPadraig View Post
    the only way is blocking the IP's.
    There is no need to block or ban any IP.
    The right way is to set the permissions as mentioned in post#1. It's impossible that anyone without a working login can abuse the Query afterwards.
    When sending me private messages: Please make sure to include reference link to your forum thread or post.

    TeamSpeak FAQ || What should i report, when i open a client thread?

  6. #216
    Join Date
    September 2012
    Posts
    6,076
    If anyone successfully executed the commands posted and is still seeing spam, please do what I asked before:
    Quote Originally Posted by Chris View Post
    Enable query logging and post the log.
    When sending PMs please make sure to include a reference link to the thread in question in the body of your message.

  7. #217
    Join Date
    February 2017
    Posts
    1

    Bug Nachricht von Server "Create you FREE Teamspeak 3 Server"

    Seit einigen Tagen bekommt jeder der auf meinem Teamspeak Server ist von einem Client namens "SERVER" die Nachricht "Create you FREE Teamspeak 3 Server 100 Slots : *AdLink removed*" - diese Nachricht schickt dieser SERVER 5 mal und ist dann nicht mehr sichtbar! Ich kann diesen SERVER auch nicht bannen damit das aufhört! Woran liegt das das wir diese Nachricht bekommen bzw dieser SERVER soetwas postet?! Es nervt ziemlich und ich finde nichts damit das aufhört!
    Last edited by Chris; February 20th, 2017 at 02:55 PM.

  8. #218
    Join Date
    February 2017
    Posts
    1

    "Server" Keeps on spamming

    Idk why but "Server" Keeps on spamming in my teamspeak channel and I cant get it to stop.


    https://i.imgur.com/tbIQyls.png
    Last edited by dante696; February 21st, 2017 at 07:24 AM. Reason: merged

  9. #219
    Join Date
    March 2015
    Posts
    12
    Attachment 15029

    @Chris see the above image. The user is still spamming me. (He just bought another ip to spam from)
    As I stated in my last post, I will work with you to resolve the issues.
    Let me know what you need.

    What a management nightmare, my server moderator/admins can't even do anything. Neither can I.
    I am having to manually log on to my server and block him at the firewall level daily.
    I'll reiterate, it is complete non-sense that a full blown Server Administrator can't ban a GUEST server query user via the client.

    Warfront1
    Last edited by warfront1; February 21st, 2017 at 03:59 AM.

  10. #220
    Join Date
    June 2008
    Posts
    18,108
    You could close the port for the ServerQuery and connect via localhost in case you need the Query feature.
    When sending me private messages: Please make sure to include reference link to your forum thread or post.

    TeamSpeak FAQ || What should i report, when i open a client thread?

  11. #221
    Join Date
    February 2017
    Posts
    3
    As I already said. Did everthing you stated in #1, got "error id=0 msg=ok" after each command. The (same) spammer is still aktiv I until now I needed to block 4 different IP's,

    Quote Originally Posted by Chris View Post
    Enable query logging and post the log.
    Code:
    2017-02-20 19:30:27.564746|INFO    |VirtualServer |1  |query client connected 'Unknown from 109.230.239.49:54241'(id:3312)
    2017-02-20 19:30:27.606877|INFO    |VirtualServerBase|1  |query client disconnected 'Unknown from 109.230.239.49:54241'(id:3312) reason 'reasonmsg=disconnecting'
    2017-02-20 19:30:39.870215|INFO    |VirtualServer |1  |query client connected 'Unknown from 139.59.152.99:44972'(id:3312)
    2017-02-20 19:31:07.003145|INFO    |VirtualServerBase|1  |query client disconnected 'Server'(id:3312) reason 'reasonmsg=disconnecting'
    2017-02-20 19:34:56.351695|INFO    |VirtualServer |1  |query client connected 'Unknown from 109.230.239.49:54247'(id:3312)
    2017-02-20 19:34:56.393019|INFO    |VirtualServerBase|1  |query client disconnected 'Unknown from 109.230.239.49:54247'(id:3312) reason 'reasonmsg=disconnecting'
    2017-02-20 19:41:58.029175|INFO    |VirtualServer |1  |query client connected 'Unknown from 139.59.152.99:60496'(id:3312)
    2017-02-20 19:42:15.004938|INFO    |VirtualServer |1  |query client connected 'Unknown from 109.230.239.49:54253'(id:3312)
    2017-02-20 19:42:15.046181|INFO    |VirtualServerBase|1  |query client disconnected 'Unknown from 109.230.239.49:54253'(id:3312) reason 'reasonmsg=disconnecting'
    2017-02-20 19:42:25.057763|INFO    |VirtualServerBase|1  |query client disconnected 'Server'(id:3312) reason 'reasonmsg=disconnecting'
    2017-02-20 19:52:09.820688|INFO    |VirtualServer |1  |query client connected 'Unknown from 139.59.152.99:45580'(id:3312)
    2017-02-20 19:52:37.767976|INFO    |VirtualServerBase|1  |query client disconnected 'Server'(id:3312) reason 'reasonmsg=disconnecting'
    2017-02-20 20:06:06.447547|INFO    |VirtualServer |1  |query client connected 'Unknown from 139.59.152.99:42268'(id:3312)
    2017-02-20 20:06:34.418884|INFO    |VirtualServerBase|1  |query client disconnected 'Server'(id:3312) reason 'reasonmsg=disconnecting'
    Hope the brings light into my issue!?

  12. #222
    Join Date
    June 2008
    Posts
    18,108
    There is someone who connects to your server via Query, but does not send spam in any form right?

    Your first post #176 showed that you made the test while you where logged in a serveradmin. You had to logout first to make sure user without any login can send spam.

    ---------------Off-Topic------------
    The thread is about stopping spam via messages or pokes or channel creation and not about anyone can connect to Query.

    If you don't want that user can connect via Query do one of the following.
    - Change the Query port.
    - Close the port and connect from now from the sever via 127.0.0.1
    - Add the unwanted IP into the blacklist.txt
    When sending me private messages: Please make sure to include reference link to your forum thread or post.

    TeamSpeak FAQ || What should i report, when i open a client thread?

  13. #223
    Join Date
    March 2015
    Posts
    12
    Quote Originally Posted by dante696 View Post
    There is someone who connects to your server via Query, but does not send spam in any form right?
    Incorrect, my logs are the exact same as the user above's that you commented on.
    That is what the server log looks like when enabled.
    He connects sends 4-5 spam messages to everyone in a private message and then disconnects.
    The logs only show him connecting and disconnecting for whatever reason.

    Warfront1

  14. #224
    Join Date
    September 2012
    Posts
    6,076
    Quote Originally Posted by Webdancer View Post
    As I already said. Did everthing you stated in #1, got "error id=0 msg=ok" after each command. The (same) spammer is still aktiv I until now I needed to block 4 different IP's,

    Hope the brings light into my issue!?
    That is not query logging, or the log is from the wrong log file.
    When sending PMs please make sure to include a reference link to the thread in question in the body of your message.

  15. #225
    Join Date
    February 2017
    Posts
    1
    Hello, I realised I have the same IPs spamming me.

    All those IPs come from DigitalOcean, I filled a report for each of those, they told me they are doing something but I don't see any changes.

    What you can do is filling a abuse report for each IPs at https://www.digitalocean.com/company/contact/#abuse

    You can also report an abuse on https://www.ovh.com/fr/abuse/ (OVH is the hoster where the website itself is hosted on)

    If you do, they will probably do something.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. How to send chat messages to Server Query
    By JamieG193 in forum Tools / Web Based
    Replies: 3
    Last Post: July 5th, 2013, 10:02 AM
  2. [Resolved] (not possible) How do I send out pokes to a defined usergroup?
    By Pluvrr in forum General Questions
    Replies: 1
    Last Post: August 28th, 2011, 03:50 PM
  3. send text messages to everyone
    By constrych9 in forum General Questions
    Replies: 5
    Last Post: February 8th, 2011, 06:01 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •