Last night somebody came on our server, banned 3 people, then left. I checked the perm files and he was not in them. I checked ops.txt and he was not in it. The plugin we use for banning is Essentials, has there been any sort of issues with it in recent builds? On an unrelated note, we had another hacker come on and demand OP 3 days ago. He then obtained WE perms, and made a gigantic trench across the server. Same as above, no record of him in our perm files. We use bPermissions. Anyone else has this happen?
1) Shut down your server. 2) Check your ops.txt for any names you don't recognize. 3) Check your permissions management plugin and check for any configuration that looks bad (a name getting a group it shouldn't have). 4) Post your plugin list here. 5) Download NEW, fresh versions of every plugin from dev.bukkit.org even if it's the same version you have already. If you have a plugin you can't find on dev.bukkit.org post that info here.
Following with mbaxty, check with all the admins, including with yourself, to make sure none of the accounts were compromised recently and/or if one of the admins fell for one of those "im frm planet minecraft. i need op nao" kind of things.
