Something Hacked My Gmod Server, "The End Is Coming" picture? (Unbanned SteamIDs, AutoChat) - Help

Something Hacked My Gmod Server, "The End Is Coming" picture? (Unbanned SteamIDs, AutoChat)

8 replies, posted
In This Thread

Hey guys, I really have no idea what happened, I made an account just to report this in, maybe it is something important that someone has to look into. I was on my server when my Steam Overlay popped up, and display a link to this picture.Note that I did NOT click anything, it literally just appeared out of nowhere in the Steam Overlay Window Browser! (Link: I will post it if people say It's ok for me to do that) Then, suddenly, other weird things started happening. I started unbanning a steam ID, which I will also post if people tell me I'm allowed to.People on the server were not related to this or hackers, but then they started saying "If you ban me, you are done" and stuff like that! (They were my friends?) [CODE] [Peasant] PorannyPoranek#MEEM: wt$ [Peasant] PorannyPoranek#MEEM: page open them self with this [Peasant] PorannyPoranek#MEEM: link_that_i_will_post_if_people_tell_me_im_allowed_to [Peasant] PorannyPoranek#MEEM: wt$ [Owner] MariosS: omg [Owner] MariosS: post this on the forumns Client "Chace" spawned in server <STEAM_0:0:99604xxx> (took 61 seconds). [SERVER] Chace, has finished loading (STEAM_0:0:99604xxx) [Peasant] PorannyPoranek#MEEM: ???? [Rookie] jackcavanagh1: cant you just give it to me jackcavanagh1 killed PorannyPoranek#MEEM using weapon_lightsaber [Peasant] PorannyPoranek#MEEM: !noclip PorannyPoranek#MEEM<STEAM_0:1:118821xxx> spawned/gave himself swep weapon_lightsaber Giving PorannyPoranek#MEEM a weapon_lightsaber [Owner] MariosS: WAIT [Peasant] PorannyPoranek#MEEM: !noclip jackcavanagh1 killed PorannyPoranek#MEEM using weapon_lightsaber [Owner] MariosS: POST THIS ON THE FACEPUNCH FORUMS [Peasant] PorannyPoranek#MEEM: !noclip PorannyPoranek#MEEM<STEAM_0:1:118821xxx> spawned/gave himself swep swep_asm Giving PorannyPoranek#MEEM a swep_asm You're playing on GentBros SandBox, enjoy your stay! [ERROR] RunString:1: unfinished string near '<eof>' 1. unknown - RunString:0 PorannyPoranek#MEEM<STEAM_0:1:118821xxx> spawned/gave himself swep m9k_smgp90 Giving PorannyPoranek#MEEM a m9k_smgp90 PorannyPoranek#MEEM killed jackcavanagh1 using m9k_smgp90 jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep weapon_lightsaber Giving jackcavanagh1 a weapon_lightsaber [Peasant] PorannyPoranek#MEEM: k i must end bby You unbanned steamid STEAM_0:0:7370xxx [Peasant] PorannyPoranek#MEEM: !noclip [Peasant] PorannyPoranek#MEEM: !noclip [Peasant] PorannyPoranek#MEEM: by [Peasant] PorannyPoranek#MEEM: !noclip PorannyPoranek#MEEM<STEAM_0:1:118821xxx> spawned/gave himself swep m9k_aw50 Giving PorannyPoranek#MEEM a m9k_aw50 PorannyPoranek#MEEM killed jackcavanagh1 using m9k_aw50 Dropped "PorannyPoranek#MEEM" from server<STEAM_0:1:118821xxx> [SERVER] PorannyPoranek#MEEM, left the server! (STEAM_0:1:118821xxx) You unbanned steamid STEAM_0:0:7370xxx <----------------- IMPORTANT LINE jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep weapon_lightsaber Giving jackcavanagh1 a weapon_lightsaber You unbanned steamid STEAM_0:0:7370xxx <----------------- IMPORTANT LINE You unbanned steamid STEAM_0:0:7370xxx<----------------- IMPORTANT LINE You unbanned steamid STEAM_0:0:7370xxx <----------------- IMPORTANT LINE You unbanned steamid STEAM_0:0:7370xxx <----------------- IMPORTANT LINE MariosS suicided! jackcavanagh1 suicided! Chace suicided! [Rookie] jackcavanagh1: is someone hacking [Rookie] jackcavanagh1: one more ban and bye bye server <----------------- IMPORTANT LINE [Rookie] Chace: one more ban and bye bye server <----------------- IMPORTANT LINE [Owner] MariosS: one more ban and bye bye server <----------------- IMPORTANT LINE [Rookie] jackcavanagh1: one more ban and bye bye server <----------------- IMPORTANT LINE [Rookie] Chace: one more ban and bye bye server <----------------- IMPORTANT LINE [Owner] MariosS: one more ban and bye bye server <----------------- IMPORTANT LINE [Owner] MariosS: guys Chace<STEAM_0:0:99604xxx> spawned/gave himself swep weapon_lightsaber Giving Chace a weapon_lightsaber jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep weapon_lightsaber Giving jackcavanagh1 a weapon_lightsaber You unbanned steamid STEAM_0:0:7370xxx <----------------- IMPORTANT LINE You unbanned steamid STEAM_0:0:7370xxx <----------------- IMPORTANT LINE [Rookie] Chace: if you ban me i destroy your server <----------------- IMPORTANT LINE [Owner] MariosS: if you ban me i destroy your server <----------------- IMPORTANT LINE [Rookie] jackcavanagh1: if you ban me i destroy your server <----------------- IMPORTANT LINE [Rookie] Chace: if you ban me i destroy your server <----------------- IMPORTANT LINE [Owner] MariosS: if you ban me i destroy your server <----------------- IMPORTANT LINE [Rookie] jackcavanagh1: if you ban me i destroy your server <----------------- IMPORTANT LINE [Rookie] Chace: if you ban me i destroy your server <----------------- IMPORTANT LINE Chace killed jackcavanagh1 using weapon_lightsaber jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep weapon_lightsaber Giving jackcavanagh1 a weapon_lightsaber Chace killed jackcavanagh1 using weapon_lightsaber jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep weapon_lightsaber Giving jackcavanagh1 a weapon_lightsaber Chace killed jackcavanagh1 using weapon_lightsaber jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep m9k_m60 Giving jackcavanagh1 a m9k_m60 jackcavanagh1 killed Chace using m9k_m60 jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep m9k_pkm Giving jackcavanagh1 a m9k_pkm Chace<STEAM_0:0:99604xxx> spawned/gave himself swep weapon_hack_phone Giving Chace a weapon_hack_phone jackcavanagh1 killed Chace using m9k_pkm jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep m9k_m24 Giving jackcavanagh1 a m9k_m24 jackcavanagh1<STEAM_0:0:195269xxx> spawned/gave himself swep weapon_lightsaber Giving jackcavanagh1 a weapon_lightsaber [ERROR] RunString:1: unfinished string near '<eof>' ----------------- This happened before the server shutdown --------------------- 1. unknown - RunString:0 [ERROR] RunString:1: unfinished string near '<eof>' 1. unknown - RunString:0 [ERROR] RunString:1: unfinished string near '<eof>' 1. unknown - RunString:0 [ERROR] RunString:1: unfinished string near '<eof>' 1. unknown - RunString:0 [Owner] MariosS: !unjail * <----------------- IMPORTANT LINE [Owner] MariosS: !unjail * <----------------- IMPORTANT LINE Chace<STEAM_0:0:99604xxx> spawned vehicle models/nova/chair_wood01.mdl [Owner] MariosS: !unjail * <----------------- IMPORTANT LINE [Owner] MariosS: !unjail * <----------------- IMPORTANT LINE Chace<STEAM_0:0:99604xxx> spawned vehicle models/nova/airboat_seat.mdl You're playing on GentBros SandBox, enjoy your stay! Chace<STEAM_0:0:99604xxx> spawned vehicle models/nova/chair_plastic01.mdl Chace<STEAM_0:0:99604xxx> spawned vehicle models/nova/chair_wood01.mdl (SILENT) You ran rcon command: REMOVEIP 81.102.143.193 (SILENT) You ran rcon command: REMOVEIP 81.102.143.193 jackcavanagh1<STEAM_0:0:195269xxx> spawned/used tool duplicator -=RESTRICTED=- jackcavanagh1<STEAM_0:0:195269xxx> spawned/used tool duplicator -=RESTRICTED=- jackcavanagh1<STEAM_0:0:195269xxx> spawned/used tool duplicator -=RESTRICTED=- jackcavanagh1<STEAM_0:0:195269xxx> spawned/used tool duplicator -=RESTRICTED=- jackcavanagh1<STEAM_0:0:195269xxx> spawned/used tool duplicator -=RESTRICTED=- Disconnect: Server shutting down. Disconnect: Server shutting down. [/CODE] Sorry if this post had anything wrong, I just wanted the admins and people that are interested in this to know, and me to get a solution. Thanks, Mario

[QUOTE=Moat;51845522]You most likely have a backdoor in your server. Can you post which addons you are using?[/QUOTE] Yes, the workshop collection: [url]http://steamcommunity.com/sharedfiles/filedetails/?id=648314885[/url] I also have a few other addons in the server: 1) [url]https://scriptfodder.com/scripts/view/629/awarn2-warning-module[/url] 2) [url]https://scriptfodder.com/scripts/view/460/cake-anti-cheat[/url] 3) UTime from the Official ULX Site 4) [url]https://scriptfodder.com/scripts/view/2698/admin-ticket-system-ats[/url] [editline]19th February 2017[/editline] I've been running them for over a year on my previous server, they did never create problems.

Definitely a backdoor somewhere, the end is not near it's just a little kid who got really excited that he got some extra power.

Can this be fixed in any way?

You can detour functions like HTTP and RunString to try to find the source of the backdoor.

No we don't

[QUOTE] [ERROR] RunString:1: unfinished string near '<eof>' 1. unknown - RunString:0 [/QUOTE] That right there looks like someone was trying to run lua... As they said I'd detour the functions and try to detect incoming messages that are suspect, also keep note of who is on the server when it happens and remember the banned steam ids and check friends for a common person as they ran a console command on you to remove said bans for a reason.

Sorry, you need to Log In to post a reply to this thread.