Getting Hacked. Please help.

Ok. Someone is logging in as myself and my admins names and greifing my server.
There's no way that they got my password and my admins ones too.
I think they are logging in with a nickname that is our names and permissions recognises them as admins.
How can i stop this?

 

you could try an ip ban from the console

I forget which plugin has it but there is a way to disable nicknames.

 

add authcraft or other auth plugin that requires a second password.

 

Use Authorize: http://forums.bukkit.org/threads/admn-authorize-v1-4-authcraft-like-plugin-186.610

 

Authorize is pointless. Even without being logged people can still issue comands...
So player log as admin name>do a modify command on his player name to be admin> all the sme shit again

 

Exactly, they just log back in as me and it all starts again.
Please help, my server is getting griefed.

 

do you have set
online-mode=true
in server.properties?

 

1-Turn offline mode on if you can.
or
2-Get his ip and make a range ban!
like his ip is 201.11.17.180 > open excell, put this ip 201.11.17.1 and drag to generate a sequential ip list until like 201.11.17.255. Copy everything and paste on baned ips.

Ye this is a way to do this, probably not the best (or the right)one, but it works.

 

i didn't because for some reason, people couldn't connect unless they tried 7-10 times to log in, including myself.
i switched it back to =true and i'm still getting hacked and i get the login problems again.

 

just to clarify:
online-mode=true -> names are verified with minecraft.net
online-mode=false -> anybody can use any name


if you cant login with =true, then minecraft.net is offline (happpened quite often lately)

 

minecraft.net isn't down when i can't connect with online-mode=true.

i get console errors like this:

Code:

java.net.ConnectException: Connection timed out: connect
        at java.net.PlainSocketImpl.socketConnect(Native Method)
        at java.net.PlainSocketImpl.doConnect(Unknown Source)
        at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
        at java.net.PlainSocketImpl.connect(Unknown Source)
        at java.net.SocksSocketImpl.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at sun.net.NetworkClient.doConnect(Unknown Source)
        at sun.net.www.http.HttpClient.openServer(Unknown Source)
        at sun.net.www.http.HttpClient.openServer(Unknown Source)
        at sun.net.www.http.HttpClient.<init>(Unknown Source)
        at sun.net.www.http.HttpClient.New(Unknown Source)
        at sun.net.www.http.HttpClient.New(Unknown Source)
        at sun.net.www.protocol.http.HttpURLConnection.getNewHttpClient(Unknown
Source)
        at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Sour
ce)
        at sun.net.www.protocol.http.HttpURLConnection.connect(Unknown Source)
        at sun.net.www.protocol.http.HttpURLConnection.followRedirect(Unknown So
urce)
        at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown So
urce)
        at java.net.URL.openStream(Unknown Source)
        at net.minecraft.server.ThreadLoginVerifier.run(SourceFile:96)
2011-02-10 01:00:04 [INFO] Disconnecting stolen_insanity [/192.168.1.12:63526]:
Took too long to log in
2011-02-10 01:00:28 [INFO] /192.168.1.12:63543 lost connection

This code happens everytime someone tries to log in while online-mode=true
Also, it says that it can't authicate my username and says that the server is disconnecting me, but i don't get disconnected.

 

the http request to minecraft.net times out, because it's being blocked (most likely some kind of firewall installed on the pc you run the server)

 

i run it on windows x64.
Could it be windows firewall?
Or is it more likely my AVG anti-virus?

 

if players can connect to the server, then windows firewall shouldn't be the problem

i suspect AVG anti-virus to detect the http request and block it (some virus files have the same behavior)

 

Sorry to keep asking you questions but how do i stop that? I don't see any options for that on AVG.

 

Yes.. Kiddies let remember that one thing Microsoft got right was their firewall in Windows.
So make your lives easier and get arid of your stupid Zonealarm and bite the bullet and get a paid for virus protector.

In the long run you will thank yourself for following these instructions.

 

first you should make sure that its really avg that causes the problem, so try turning it off (completely) and check if it works, if it does , well i'm not an avg expert, you'll have to search or ask someone other
--- merged: Feb 11, 2011 1:29 PM ---

i fully agree

 

If online-mode=true then you shouldn't get "hacked". However, it is best to log into your minecraft.net profile and change your password - can't hurt.

Minecraft.net can be up, but the authentication servers can be taking a pounding and not let you in. If no one can possibly log in when online-mode=true, then there is something blocking that connection.

 

The problem is not minecraft.net
I can log in to other servers easily and so can all my users.
It's when you actually try and connect to my server.
I get the error message on my console and the person logging in gets either the 'took to long to log in' message, or the minecraft window stops responding for a while and then when it does respond, comes up with an error.

This happens a few time before it lets you connect, and then in the console I get the message about the username could not be authencated, disconnecting user (name)

But it doesn't disconnect them.

 

You definitely have a firewall blocking it then.