Hacked my gameserver?

01/27/2020 19:14 ThievesUTD#1
Someone in my server showed me a pic of an mbot chat where in his guild chat, a guy was typing that he entered to my gameserver in early morning, idk if he means via exploit or via vps (remote desk), and then said that he will edit himself.

The fun fact is my GM char got DC at early morning :D, and my internet connection was working fine, becouse i refreshed the web of my sro and it refreshed as normally, then i went to my VPS, and i could not enter :D, remote desk showed me: Remote Desktop can’t Connect to the Remote Computer for one of these Reasons
1-Remote access to the server is not enabled
2-he remote computer is turned off
3-he remote computer is not available on the network

And again and again, so i went to my VPS panel (google cloud), and instanse was working fine, nothing inusual. So i closed the window of Remote Desk and opened it again and finally i got entered to my vps, when i entered, all was normal, as if no one had entered, everything was as i left it, all was normal.

Well obviously im feeling some fear, but idk what to think really, if maybe was my internet connection, or yes, he got hacked my server, anyway im just looking for some who faced this?, and how he could protect.

Here some features of VPS:

-All outbound rules are deleted in firewall
-All inbound rules are existing by default, not deleted. (Should i delete it?)
-Filter SR Proxy (Didnt showed anything about this problem)
-Gameserver srZor
-Only TCP ports opened in firewall: 15779, 80, 1338, 1337
-IPv4 WEB-VPS: [Only registered and activated users can see links. Click Here To Register...] (Its vulnerable?)

Thx in advance.
01/27/2020 20:04 mudik#2
change your RD Port, like this one(sorry its on german translate it) [Only registered and activated users can see links. Click Here To Register...]

but care make backup and safe everything on Mega or something! becouse if u do it wrong you cant login in your RD and safe the new port becouse u will need it to loing on your RD. Its look like this YourIp:YourNewPortHere. So everyone need the port which only you know to login on your RD.
01/27/2020 20:20 COSTEXXL#3
Quote:
Originally Posted by ThievesUTD View Post
Someone in my server showed me a pic of an mbot chat where in his guild chat, a guy was typing that he entered to my gameserver in early morning, idk if he means via exploit or via vps (remote desk), and then said that he will edit himself.

The fun fact is my GM char got DC at early morning :D, and my internet connection was working fine, becouse i refreshed the web of my sro and it refreshed as normally, then i went to my VPS, and i could not enter :D, remote desk showed me: Remote Desktop can’t Connect to the Remote Computer for one of these Reasons
1-Remote access to the server is not enabled
2-he remote computer is turned off
3-he remote computer is not available on the network

And again and again, so i went to my VPS panel (google cloud), and instanse was working fine, nothing inusual. So i closed the window of Remote Desk and opened it again and finally i got entered to my vps, when i entered, all was normal, as if no one had entered, everything was as i left it, all was normal.

Well obviously im feeling some fear, but idk what to think really, if maybe was my internet connection, or yes, he got hacked my server, anyway im just looking for some who faced this?, and how he could protect.

Here some features of VPS:

-All outbound rules are deleted in firewall
-All inbound rules are existing by default, not deleted. (Should i delete it?)
-Filter SR Proxy (Didnt showed anything about this problem)
-Gameserver srZor
-Only TCP ports opened in firewall: 15779, 80, 1338, 1337
-IPv4 WEB-VPS: [Only registered and activated users can see links. Click Here To Register...] (Its vulnerable?)

Thx in advance.
Don't open Billing port.
The only ports you need are gatewayserver and agentserver.

Change remote server port.
Always redirect ports and use proxy behind the ip.
Change the usual ports to different ports for extra security.
01/28/2020 01:55 ThievesUTD#4
Quote:
Originally Posted by COSTEXXL View Post
Don't open Billing port.
The only ports you need are gatewayserver and agentserver.

Change remote server port.
Always redirect ports and use proxy behind the ip.
Change the usual ports to different ports for extra security.
Could u be more especific bro, ty for answer