1 Topic by Magix (edited by Magix 2009-08-29 21:35:35)

  • Magix
  • Magix
  • Member
  • Offline

Topic: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Original (now invalid) message

the main domain tee-city.net will be taken down shortly. the subdomains will remain in working order.

reason: i need this domain for my portfolio

New message

EDIT: Subdomains are being cleaned up. Reply to this thread in a week and your subdomain will be set up again with everything you had before. Funwar will be back up in a day or two from the 29th of August.

I apologize for the hacking stuff.

<? php echo "Magix"; ?>
------------------------------------------------
Tee-City <--------- The one Teeworlds site to rule them all!

2 Reply by Kottizen

  • Kottizen
  • Kottizen
  • Administrator
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Could I have a mysql-database on your server? I did not get one sad

3 Reply by 0³7

  • 0³7
  • 0³7
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

humm..?

Please use an english signature //heinrich5991

4 Reply by Pepperoni

  • Pepperoni
  • Pepperoni
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Kottizen magix stated before that he won't make new subdomains. Only the ones already excisted would stay.

Never argue with a fool, people might not know the difference.

5 Reply by Kottizen

  • Kottizen
  • Kottizen
  • Administrator
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

I have already a subdomain, and now a mysql-database too.

6 Reply by Pepperoni

  • Pepperoni
  • Pepperoni
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

to quote magix:

Magix wrote:

The topic says it all. Cancelled projects: TeeMail, Communitee, and TeeFiles. All the subdomains that I have created will stay up. No more will be created. No support for these subdomains.

Never argue with a fool, people might not know the difference.

7 Reply by Lanta

  • Lanta
  • Lanta
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

all site4 hacked... server hacked... i think now we need support! XD

Support Staff - ESL.eu Teeworlds Admin

8 Reply by Magix

  • Magix
  • Magix
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

lol why are you on my site a couple weeks after it was announced dead? For those interested, it should be fixed soon, within 2 days.

<? php echo "Magix"; ?>
------------------------------------------------
Tee-City <--------- The one Teeworlds site to rule them all!

9 Reply by Kill0r

  • Kill0r
  • Kill0r
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

This may be off topic but how come your link sends me to a site that says it's been hacked?

no but yeah
Server : ~{M}~ Clan Server
Working on ~{M}~'s clan website.

10 Reply by Captain AMN

  • Captain AMN
  • Captain AMN
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Magix wrote:

lol why are you on my site a couple weeks after it was announced dead?


The subdomains are affected too, e.g. FunWar website. I hope you got a backup of the registered users database. We had over 150 users there.

*** JUSTICE ALWAYS WINS ***

11 Reply by DinoSmoothie

  • DinoSmoothie
  • DinoSmoothie
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

All our index pages have been hacked. But i have many other pages anyway, but you told us it was hackproof in the previous topic.

Bye.

12 Reply by Lanta

  • Lanta
  • Lanta
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

DinoSmoothie wrote:

All our index pages have been hacked. But i have many other pages anyway, but you told us it was hackproof in the previous topic.

XD
maybe the've found some exploit... i wanna only that always returns like before ^^

Support Staff - ESL.eu Teeworlds Admin

13 Reply by GSGDani (edited by GSGDani 2009-08-29 12:18:23)

  • GSGDani
  • GSGDani
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

hah lol teedb server got hacked too .. and now our root server is down for a while to check this.. :X
maybe we got a hacker here... who tries to kill all popular tw user pages..

this s***s

short log file:

->> first attack:

--- LOG ---
2009-08-27 08:35 UTC : ILLEGAL FAKED IPadr '174.44.165.37' from 00:18:38:02:10:10 'golf869' to 86.107.129.99:113 TCP packets: 512 bytes: 31744

.... and so on.. ->>
this attack happened 10 hours after a completely reinstall of the whole system..

Remember me? Questions? Just leave a message, I will respond within 72 hrs!

14 Reply by swetankmodi (edited by swetankmodi 2009-08-29 16:31:39)

  • swetankmodi
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

swetankmodi (at) gmail.com
dani i need a server

Removed @ to prevent possible abuse by automated searches. // ~{MS}~ Azon

15 Reply by Lanta

  • Lanta
  • Lanta
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Dani wrote:

hah lol teedb server got hacked too .. and now our root server is down for a while to check this.. :X
maybe we got a hacker here... who tries to kill all popular tw user pages..

this s***s

short log file:

->> first attack:

--- LOG ---
2009-08-27 08:35 UTC : ILLEGAL FAKED IPadr '174.44.165.37' from 00:18:38:02:10:10 'golf869' to 86.107.129.99:113 TCP packets: 512 bytes: 31744

.... and so on.. ->>
this attack happened 10 hours after a completely reinstall of the whole system..

not a good news >.< funwar hacked and teedb too... maybe they are going to hack something else?

Support Staff - ESL.eu Teeworlds Admin

16 Reply by Magix

  • Magix
  • Magix
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

DinoSmoothie wrote:

All our index pages have been hacked. But i have many other pages anyway, but you told us it was hackproof in the previous topic.

Let me rephrase what I said before. It is hackproof as long as nobody who I give a subdomain to exploits it by uploading a PHP file that can mess up the master server, and I now know that is what happened. I shall unleash a wrath upon you so powerful...

I still don't know which subdomain it is from, all I know is the attack came from a Folder other than the root, meaning it had to be a subdomain.

Dun wurry guyz. It's k. I have a backup but I just need to find out where the attack came from and eliminate that folder so the hacker can't do it again.

<? php echo "Magix"; ?>
------------------------------------------------
Tee-City <--------- The one Teeworlds site to rule them all!

17 Reply by Lanta

  • Lanta
  • Lanta
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

for start, u can eliminate clansphere from n3g subdomain... we've leaved the site... it's useless now for us.
All we need again back is funwar.

Support Staff - ESL.eu Teeworlds Admin

18 Reply by GSGDani

  • GSGDani
  • GSGDani
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

@Kottizen contacted which person ?!!?!!
my or magix one? or is that the same person?

Remember me? Questions? Just leave a message, I will respond within 72 hrs!

19 Reply by Lanta

  • Lanta
  • Lanta
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Dani wrote:

@Kottizen contacted which person ?!!?!!
my or magix one? or is that the same person?

our one, there is the IM contact...
(and maybe is the same person)

Support Staff - ESL.eu Teeworlds Admin

20 Reply by Kottizen

  • Kottizen
  • Kottizen
  • Administrator
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

The same exploit was used in both attacks.
Magix, I made you aware of the exploit a long time ago and you said you fixed it.

21 Reply by GSGDani (edited by GSGDani 2009-08-29 21:11:17)

  • GSGDani
  • GSGDani
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

what?.. noway... so pls give me some more informations about this(maybe pm or icq/msn .. ) .. because i have to tell it to my hoster ... -> server is blocked till ill call them ...

if this hack attacks wont stop ...  teeworlds(includes teedb, this forum, teeworlds-community.de and all hosted servers)  is dead for me..

Remember me? Questions? Just leave a message, I will respond within 72 hrs!

22 Reply by Magix

  • Magix
  • Magix
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Alright: Update Time

SQL Databases remain good. This means that Funwar is saved. I also have a backup of the sites now, but when checking the logs, I saw something. Other than funwar, barely any of the other subdomains have recently getting traffic, meaning you are wasting space on my site. And this launches the first-ever subdomain clean up. If you don't reply on this thread in the next week asking to keep your subdomain alive, then I delete it.

<? php echo "Magix"; ?>
------------------------------------------------
Tee-City <--------- The one Teeworlds site to rule them all!

23 Reply by Captain AMN

  • Captain AMN
  • Captain AMN
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Cool i hope you put funwar back up soon or we have to look for alternative hosting.

I hope the security issue is fixed for now smile

*** JUSTICE ALWAYS WINS ***

24 Reply by Magix

  • Magix
  • Magix
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Strangely enough AMN, the security hole was exploited through an upload to...

/root/public_html/funwar

That is the directory for funwar...Is there anything you or Lanta want to tell me? I don't suspect you but it was your subdomain that brought tee-city down.

<? php echo "Magix"; ?>
------------------------------------------------
Tee-City <--------- The one Teeworlds site to rule them all!

25 Reply by torch

  • torch
  • torch
  • Member
  • Offline

Re: [WEBSITE] tee-city.net = NOT dead [Subdomain Cleanup!!]

Even if that was where the 'exploit' was uploaded I doubt that the funwar admins could do anything about it. Its your server and from what I understood the 'security hole' was lack of proper configuration. Moreover funwar used a CMS they didnt develop themselves, so if they didn't mess up anything when installing that CMS, they have nothing to do with it. And when giving away hosting on your servers you should know that your server is just as secure as the weakest subdomain you are hosting. And since almost anyone could get a domain, i can easily imagine the so called 'hacker' requested and received one, then uploaded a php-shell or other malicious code.

We will meet again when the flowers spread their glorious scent of victory and the birds sing us the melody of justice...