Staff help

[zinc gyro]

HELP MY SERVER KEEPS GETTING GRIEFED BY HACKERS

[exotic juniper]

Why ?

[zinc gyro]

pls help the server keeps getting destroyed and we ban them but they get unbanned and have operator somehow

[exotic juniper]

Can you send me a list of ur plugins ?

[zinc gyro]

uh 1 sec

lemme log on rq

Im the co-owner but i have server panel access

[silk crown]

Hmm

[zinc gyro]

i will send the hackers users

[silk crown]

Did you give them gmc?

[zinc gyro]

no

they literally keep getting op and my feather client just crashed when trying to join

[silk crown]

I'm assuming GrimAC is a anti cheat?

[jade siren]

Might wanna whitelist your server and delete the opped users file btw

[silk crown]

Did you do this?

@zinc gyro

[zinc gyro]

no

not yet

my game crashed when i joined

[silk crown]

Do it

It might stop it

[zinc gyro]

im going to make a skript to auto ban and deop when tehy join

[silk crown]

Wait is chunky a chunk loader?

[jade siren]

Or just do what I said and then we can figure out what caused it in the first place

[zinc gyro]

idk

I didnt exactly make the server

[silk crown]

Alright

[zinc gyro]

i joint it like 3 days ago and im co-owner

[silk crown]

Did you ban up?

[zinc gyro]

but server hasnt been up for long

[silk crown]

Ip*

[zinc gyro]

only about 4 days

Yes

[silk crown]

Stupid auto correct

[zinc gyro]

i banned their ips

[silk crown]

They def joined using VPNs

[zinc gyro]

yeah prob

my game crashes each time i try join

and it says someone is no game

on*

[silk crown]

Restart the server

[zinc gyro]

K

[silk crown]

I hope it's, what I think it is

[zinc gyro]

restarted i try join again

[silk crown]

Can you join?

[zinc gyro]

trying

yes

i can

[silk crown]

Alright

/deop them

And then /banip again

And make sure they are deop by doing /deop again

[zinc gyro]

They are alr deoped

by the other guy

[silk crown]

Redo /deop

Make sure

[zinc gyro]

testing out my ban skript tho

btw their users are Now_or_Nova and OfficialNoob1234

im pretty sure

 if player is "Now_or_Nova":
  broadcast "Stupido hacker attempted to join"
  execute console command "/ban Now_or_Nova"
  execute console command "/deop Now_or_Nova"

on join:
 if player is "OfficialNoob1234":
  broadcast "Stupido hacker attempted to join"
  execute console command "/ban OfficialNoob1234"
  execute console command "/deop OfficialNoob1234"```

that should work

right

[silk crown]

That's good

[zinc gyro]

it broadcasts to tell everyone who is on they tried to join

[silk crown]

Thats great

So they all know, it's hackers

[zinc gyro]

whats a staff member who can ban them on minehut???

or can atleast review this

[jade siren]

None of them, report it via a support ticket

[surreal harbor]

A couple notes:

1. If you downloaded any "free" premium plugins, or just sus plugins in general, they can be backdoors
2. Skript is W, that looks good

[zinc gyro]

yeah i take pride in coding 😄

Uh k

like arceon maybe

except i deleted it

i fully deleted it all

[surreal harbor]

I'm assuming you restarted after

[zinc gyro]

after deleting?

or adding

[surreal harbor]

Yeah

[zinc gyro]

which

[surreal harbor]

Deleting

[zinc gyro]

uh

yes

the server has literally rolled back to before i added them ngl

[surreal harbor]

Ahh huh

It seems this is solved, but just keep in mind that the majority of hackers are from backdoor plugins

[zinc gyro]

also i think i should add "wait 3 seconds" and then "execute console command "/kick (hacker user)"

[surreal harbor]

Ohh you're right yeah

Banning them with skript does not kick them

[jade siren]

This really seems like a lot of unnecessary work

[surreal harbor]

They can still play

[zinc gyro]

fr?

should i test the skript on myself

[surreal harbor]

It takes about 30s to code

[jade siren]

You really could just find the backdoor instead of all this

It takes 30 seconds for them to get an alt and do it again

[surreal harbor]

Kick them 1 tick after banning them

[jade siren]

Ban the user sure, but find the backdoor first and foremost

[zinc gyro]

its all precautions

how do i find the backdoor

[surreal harbor]

.

[rustic lantern]

I would say uninstall the plugins and reinstall them from official websites

[surreal harbor]

Or that

[zinc gyro]

no the server has lie

like

been set back

to a backup

where there are all plugins from real sites

[rustic lantern]

Okay good

[jade siren]

That doesnt do much if the plugin with the backdoor is still there lol

[rustic lantern]

is this resolved?

[zinc gyro]

Uh not yet

[rustic lantern]

Alright

Feel free to ping me if it's resolved

[zinc gyro]

can we leave it open until its like confirmed solved?

[surreal harbor]

Moon if you added any plugins since then that would be the backdoor I'd assume

[rustic lantern]

Sure just ping me when you're done

[surreal harbor]

If you had no issues in the past

[zinc gyro]

just incase T-T

n3ecron

from what i know

i think they are old staff

[surreal harbor]

I see

Were they devs by any chance

[zinc gyro]

i dont know

admin

no panel access

[surreal harbor]

Ah you're probably fine then

I was just picturing them coding a skript backdoor

[zinc gyro]

i think i might delete all skript files that arent mine

just to be SURE

[surreal harbor]

Uhhh

I wouldn't do that personally

[jade siren]

Could just read through them considering you know skript

[zinc gyro]

ik

but

[surreal harbor]

Look for "on join"

And that's basically it

[zinc gyro]

there is one file that i didnt add

i think

its called zscmds

[surreal harbor]

Just read it

[fluid spire]

make sure to also report this to support

[ornate estuary]

:shield: Reporting Players & Servers

Have you seen a player or server breaking our community rules? Please submit a report so that our team can investigate!

When creating a report, please include information such as your username, the players username, the server name it happened on, and an estimated date & time that it occurred at. Screenshots are helpful, but not required.

Once you're ready to file a report, click one of the options below and fill out the form.

Requested by duckyprogrammer (232950078514397186)

[zinc gyro]

oh yeah

btw

thats the zscmds

ill let u read it just incase because i have alr read through it before and found nothing

but the file is practically useless

[surreal harbor]

Looks fine

[zinc gyro]

btw

any good anticheats?

that are free

cuz GrimAC kinda sucks

£15 for vulcan bro 💀

@rustic lantern im pretty sure its resolved

Ill make another if it isnt!

[silk crown]

It's community forums, Its gonna stay open

When you need help, just come back to this one

[zinc gyro]

oh

fr?

[silk crown]

Right?

[zinc gyro]

😮 hi jamie

wait not the staff one

[light trench]

They can ask for their own posts to be locked, and we’d recommend making new posts for unrelated issues

[zinc gyro]

nvm

im a bozo

[zinc gyro]

oh

ok

so i dont want it to be locked

T-T

[light trench]

I think you’re able to change the tags for your post to add Resolved, but can’t remember

[rustic lantern]

I added the resolved tag

[zinc gyro]

I got new info on it

Basically the Now_or_Nova person somehow gets op and ops the OfficalNoob guy

This new source of info participated in the griefing bit they now chill

And

they think it was through meteor or smth

[silk crown]

Most likely a backdoor

But Thats impossible, Considering all you Plugins are From The Real Websites

[zinc gyro]

Yeah

I mean i think im safe for now

ill pray its fixed

[silk crown]

Unless of course

One of the website admins got hacked and added a back door

But thats impossible, because of 2FA

[zinc gyro]

New just just joint who was part of it

guy* just joint

Adapted

He js spammed n word 4 times

@rustic lantern

i put part of it

but like

he said the forbidden language 😮

[rustic lantern]

Please do not post images containing slurs

You can report them to Minehut

[zinc gyro]

K i deleted it

how do ir eport

T-T

[rustic lantern]

!report

[ornate estuary]

:shield: Reporting Players & Servers

Have you seen a player or server breaking our community rules? Please submit a report so that our team can investigate!

When creating a report, please include information such as your username, the players username, the server name it happened on, and an estimated date & time that it occurred at. Screenshots are helpful, but not required.

Once you're ready to file a report, click one of the options below and fill out the form.

Requested by greyhashira2 (1115597108486094859)

[zinc gyro]

LOL

I JUST BAITED

HIM

TO TEST OUT MY AUTO BAN SYSTEM

ON THE HACKER PPL

W

that means my auto ban system WORKS

btw @rustic lantern

he also sent a link

with his msg

[silk crown]

Lmao

[zinc gyro]

Yeah he sent a link

i dont wanna click on ir

at all.

[silk crown]

Send link in dms

I will investigate

[zinc gyro]

malware

T-T

[rustic lantern]

Just report him, don't click any links you are send and stop engaging with this user

[silk crown]

He send links btw

[zinc gyro]

yeah i have

[silk crown]

And look here

[zinc gyro]

he sent a link

that was Phishing

[silk crown]

^

[zinc gyro]

Yeah he spammed it 4 times

[silk crown]

Damn

[zinc gyro]

dw i only used him to test my auto ban system and the auto kick

[silk crown]

Get a anti link plugin

To hide links

[rustic lantern]

Do not send a picture of the link in here pelase

[zinc gyro]

oh true yeah

dont do that

T-T

people might go on it

[silk crown]

Sorry

[zinc gyro]

theres a whole lot of them

grey

i have a question

are u LGBT?

just checking T-T

dont wanna assume

btw beware of ppl with this skin

[rustic lantern]

As my tag says
Yes
But that is not relevant to this conversation

[zinc gyro]

like that style

[zinc gyro]

im lgbt too

🙂

oh true

but yeah

[rustic lantern]

let's not spread misinformation about groups of people

[zinc gyro]

no like

its just

Keep in mind

especially if their users are Adpated

Adpated*

[silk crown]

Here

I cover links dw

Just look

[zinc gyro]

because the WHOLE lot of them have the skin

all 3 of them have that skin

Adpated, Now_or_Nova and OfficialNoob1234

[silk crown]

Damn

A lot of people

[zinc gyro]

fr

🙂

so many

[silk crown]

For 1 server 💀

[zinc gyro]

Innit

they need all 3

just to grief me

[silk crown]

Lmao

[zinc gyro]

except

the saddest thing is

they literally failed

because

every time

i just get back up

I dont get ppl like them

T-T

[silk crown]

Great for you

[zinc gyro]

innit

@silk crown

this guy is saying my server is vunerable and has an exploit on it

the "show plugins" exploit

hes on about how he can see my plugins even tho there is a plugin hider on

and asks if i want the patch

[silk crown]

Nah

He's def adding a back door

[zinc gyro]

true

he said cmd blocks are activated

oh crap

how he know that

hes on vanilla

HES ON VANILLA ASWELL

HE HASNT EVEN GOT A CLIENT

nova was on 35 minutes ago

[gilded remnant]

bukkit:help

Or whatever the command is, always shows plugins no matter what

That’s not a backdoor..

[zinc gyro]

K

goodie

Btw

Adpated is the Official guy

[dense scaffold]

what's ur serv

@zinc gyro

[zinc gyro]

why?

🙂

[dense scaffold]

I want to play

[zinc gyro]

I dont think im rlly allowed to say-

[dense scaffold]

oh okay

ty

[zinc gyro]

np

whats ur user

[gilded remnant]

Hey, is this problem solved?

@zinc gyro

[zinc gyro]

uh not entirely

doesnt it have solved tag

??

[gilded remnant]

What’s the other issue

[zinc gyro]

Its just that they keep coming back so i want the thing open still

it has resolved tag doesnt it?

[gilded remnant]

I can’t tell if it does on mobile

[zinc gyro]

yeah it has resolved

[gilded remnant]

Most you can do is ip ban them, and ban their individual usernames as well. I don’t know if they void each other and makes only one ban type apply though

But if it’s resolved, I can get a moderator to lock the post so no further people bump it and message in it

[zinc gyro]

I alr set up a skript

to auto ban them

[gilded remnant]

Best you use the ban methods, and not a skript

[zinc gyro]

no like

it auto deops them

auto bans

auto kicks

when they join

so if they manage to unban themself somehow

when they join

they get rebanned

[gilded remnant]

Why not just.. stop them from joining through a manual ban, because if you removed any malicious code, and the users, then they can’t join back

[zinc gyro]

no because they somehow do it everytime

there is no malicious code

[gilded remnant]

The same exact username?

[zinc gyro]

ive manual banned them before

yes

exact same

ive literally done the manual ban

the skript is an extra precaution

[gilded remnant]

And you did /ban (user)

[zinc gyro]

yes#

the advancedban one aswell

[gilded remnant]

Did you check console as to how they’re unbanning themself

[zinc gyro]

no

but

they just manage it

ok

idk how

but yeah

it should be fine

[gilded remnant]

You should check so that you can not only fix it, but spread awareness of how people are doing it

[zinc gyro]

idk the logs of it ill try find

[gilded remnant]

Should just be the latest log, but I don’t know if that’s them most recent time they joined

[zinc gyro]

i mena

there is this

[gilded remnant]

I recommend temporarily disabling the skript and just manual banning once and see what happens in the logs

[zinc gyro]

theres a swear but idk how to block out

so ill show for 1 second

[gilded remnant]

This is not the logs

[zinc gyro]

Ik but

[gilded remnant]

Do you know how to get to the logs?

[zinc gyro]

it says smthing about "bricking" it

Ik how to

[gilded remnant]

I can show you

[zinc gyro]

but icb to get to it

rn

[zinc gyro]

nah dw

Its fine

if it happens again ill do all this

[gilded remnant]

Okay, I’ll get a moderator to lock the channel?

[zinc gyro]

nah keep it open

dont lock

🤣

[gilded remnant]

Is your problem resolved?

[zinc gyro]

partially

can it just stay open for now or not ??

cuz incase ppl have somewhat idea on how they are doing it

[gilded remnant]

It can if your problem is still existing

But anyways, best of luck dude. Hope everything goes smoothly