I was happily playing away on my server this afternoon when a couple of new players joined.
Next thing I know, I was kicked from the server (stating I'd logged in on another device).
The new guys logged in as me (somehow stolen my account details but I have never given them out). Then oped themselves and deopped me.
I quickly changed my minecraft account password and shutdown the server before they could do any real damage.
I don't know how they managed to pull this off.
Here is the log if it is any help.
2013-09-07 13:57:47 [INFO] Cheesiepuff[/120.146.80.16:59658] logged in with entity id 85468 at ([world] 2370.5, 73.0, 2280.5)
2013-09-07 13:57:47 [INFO] Creating empty config: \craftbukkit\plugins\Essentials\userdata\cheesiepuff.yml
2013-09-07 13:57:54 [INFO] [m<[0;36;1mCheesiepuff[m> Hello![m
2013-09-07 13:57:54 [INFO] [0;36;22m[[0;36;1mFactions 2.0.5[0;36;22m] [0;33;1m[0;32;1mpostAttach added [0;35;1mcheesiepuff [0;33;1maka [0;35;1m[0;36;1mCheesiepuff[m [0;33;1mto [0;35;1meb9698fe-07d6-4698-921c-f3e24c2c33ab [0;33;1maka [0;35;1m[0;32;22mWilderness[0;33;1m.[m
2013-09-07 13:58:07 [INFO] [m<[0;36;1mCheesiepuff[m> Rucifa[m
2013-09-07 13:58:09 [INFO] [m<[0;36;1mCheesiepuff[m> may i ask you[m
2013-09-07 13:58:19 [INFO] [m<[0;36;1mCheesiepuff[m> what is your isn?[m
2013-09-07 13:58:21 [INFO] McChaos33[/124.185.14.40:52701] logged in with entity id 86830 at ([world] 2374.5, 78.0, 2274.5)
2013-09-07 13:58:22 [INFO] Creating empty config: \craftbukkit\plugins\Essentials\userdata\mcchaos33.yml
2013-09-07 13:58:24 [INFO] [m<[0;36;1mCheesiepuff[m> mine is Cheesiepuff[m
2013-09-07 13:58:24 [INFO] [0;36;22m[[0;36;1mFactions 2.0.5[0;36;22m] [0;33;1m[0;32;1mpostAttach added [0;35;1mmcchaos33 [0;33;1maka [0;35;1m[0;36;1mMcChaos33[m [0;33;1mto [0;35;1meb9698fe-07d6-4698-921c-f3e24c2c33ab [0;33;1maka [0;35;1m[0;32;22mWilderness[0;33;1m.[m
2013-09-07 13:58:25 [INFO] [m<[0;36;1mCheesiepuff[m> :D[m
2013-09-07 13:58:28 [INFO] kreashenz[/58.7.163.255:56248] logged in with entity id 86974 at ([world] 2363.5, 73.0, 2287.5)
2013-09-07 13:58:28 [INFO] Creating empty config: \craftbukkit\plugins\Essentials\userdata\kreashenz.yml
2013-09-07 13:58:34 [INFO] [m<[0;36;1mkreashenz[m> TITIIIIES.[m
2013-09-07 13:58:34 [INFO] [m<[0;36;1mMcChaos33[m> Hi[m
2013-09-07 13:58:35 [SEVERE] Reached end of stream for /173.255.228.22
2013-09-07 13:58:36 [INFO] [m<[0;36;1mCheesiepuff[m> ign*[m
2013-09-07 13:58:38 [INFO] Cheesiepuff issued server command: /who
2013-09-07 13:58:39 [INFO] [0;36;22m[[0;36;1mFactions 2.0.5[0;36;22m] [0;33;1m[0;32;1mpostAttach added [0;35;1mkreashenz [0;33;1maka [0;35;1m[0;36;1mkreashenz[m [0;33;1mto [0;35;1meb9698fe-07d6-4698-921c-f3e24c2c33ab [0;33;1maka [0;35;1m[0;32;22mWilderness[0;33;1m.[m
2013-09-07 13:58:43 [INFO] Connection reset
2013-09-07 13:58:43 [INFO] Cheesiepuff lost connection: disconnect.quitting
2013-09-07 13:58:43 [INFO] §eCheesiepuff left the game.
2013-09-07 13:58:48 [INFO] McChaos33 issued server command: /who
2013-09-07 13:58:48 [INFO] [m<[0;34;22md[0;31;22mb[0;32;22m ADMIN[0;36;22m [0;31;22mRucifa[m> In game name is Rucifa[m
2013-09-07 13:58:52 [INFO] §eRucifa left the game.
2013-09-07 13:58:52 [INFO] Rucifa[/120.146.80.16:59717] logged in with entity id 87820 at ([world] 3315.300000011921, 59.0, 1863.303692180228)
2013-09-07 13:59:04 [INFO] Rucifa issued server command: /op mcchaos33
2013-09-07 13:59:04 [INFO] Rucifa: Opped mcchaos33[m
2013-09-07 13:59:05 [INFO] §eRucifa left the game.
2013-09-07 13:59:05 [INFO] Rucifa[/123.243.213.153:18242] logged in with entity id 88030 at ([world] 3316.16584486391, 59.0, 1858.5426816632746)
2013-09-07 13:59:07 [INFO] Connection reset
2013-09-07 13:59:08 [INFO] McChaos33 issued server command: /gamemode 1
2013-09-07 13:59:13 [INFO] §eRucifa left the game.
2013-09-07 13:59:13 [INFO] Rucifa[/120.146.80.16:59728] logged in with entity id 88297 at ([world] 3319.498739946176, 59.0, 1858.330535141164)
2013-09-07 13:59:13 [SEVERE] Reached end of stream for /123.243.213.153
2013-09-07 13:59:13 [INFO] McChaos33 issued server command: /op kreashenz
2013-09-07 13:59:13 [INFO] McChaos33: Opped kreashenz[m
2013-09-07 13:59:15 [SEVERE] Reached end of stream for /123.243.213.153
2013-09-07 13:59:16 [INFO] kreashenz issued server command: /deop rucifa
2013-09-07 13:59:16 [INFO] kreashenz: De-opped rucifa[m
2013-09-07 13:59:20 [INFO] §eRucifa left the game.
2013-09-07 13:59:20 [INFO] Rucifa[/123.243.213.153:18255] logged in with entity id 88475 at ([world] 3315.638529188123, 60.166109260938214, 1858.7240472410328)
2013-09-07 13:59:20 [INFO] kreashenz issued server command: /gmc
2013-09-07 13:59:22 [INFO] Connection reset
2013-09-07 13:59:22 [INFO] kreashenz issued server command: /clear
2013-09-07 13:59:24 [INFO] kreashenz issued server command: /
2013-09-07 13:59:25 [INFO] [m<[0;34;22md[0;31;22mb[0;32;22m ADMIN[0;36;22m Rucifa[m> they are stealing accounts[m
2013-09-07 13:59:29 [INFO] Connection reset
2013-09-07 13:59:29 [INFO] Rucifa lost connection: disconnect.quitting
2013-09-07 13:59:29 [INFO] §eRucifa left the game.
2013-09-07 13:59:31 [INFO] [m<[0;36;1m[0;31;22mkreashenz[m> Don't lie.[m
2013-09-07 13:59:36 [INFO] sammyd2[/120.146.80.16:59746] logged in with entity id 89309 at ([world] 2360.5, 76.0, 2288.5)
2013-09-07 13:59:36 [WARNING] class com.bergerkiller.bukkit.common.internal.network.CommonPacketHandler$CommonPlayerConnection wasn't prepared to deal with a class net.minecraft.server.v1_6_R2.Packet2Handshake
2013-09-07 13:59:36 [INFO] §esammyd2 left the game.
2013-09-07 13:59:36 [INFO] Creating empty config: \craftbukkit\plugins\Essentials\userdata\sammyd2.yml
2013-09-07 13:59:44 [INFO] Disconnecting Notch [/120.146.80.16:59754]: Failed to verify username!
2013-09-07 13:59:44 [SEVERE] Reached end of stream for /120.146.80.16
2013-09-07 13:59:46 [INFO] [m<[0;36;1m[0;31;22mMcChaos33[m> Hi[m
2013-09-07 13:59:53 [INFO] [m<[0;36;1m[0;31;22mkreashenz[m> Hi[m
2013-09-07 13:59:58 [SEVERE] Reached end of stream for /123.243.213.153
2013-09-07 13:59:58 [INFO] Rucifa [/123.243.213.153:18564] lost connection
2013-09-07 14:00:01 [INFO] Notch[/120.146.80.16:59772] logged in with entity id 89839 at ([world] 2360.5, 76.0, 2288.5)
2013-09-07 14:00:01 [INFO] Creating empty config: \craftbukkit\plugins\Essentials\userdata\notch.yml
2013-09-07 14:00:01 [INFO] [m<[0;36;1m[0;31;22mkreashenz[m> :D[m
2013-09-07 14:00:14 [INFO] [m<[0;36;1mNotch[m> Hello![m
2013-09-07 14:00:17 [INFO] kreashenz issued server command: /citizens
2013-09-07 14:00:21 [INFO] kreashenz issued server command: /op notch
2013-09-07 14:00:21 [INFO] kreashenz: Opped notch[m
2013-09-07 14:00:22 [INFO] Read timed out
2013-09-07 14:00:22 [INFO] Disconnecting /120.146.80.16:59761: Took too long to log in
2013-09-07 14:00:22 [INFO] [0;36;22m[[0;36;1mFactions 2.0.5[0;36;22m] [0;33;1m[0;32;1mpostAttach added [0;35;1mnotch [0;33;1maka [0;35;1m[0;36;1mNotch[m [0;33;1mto [0;35;1meb9698fe-07d6-4698-921c-f3e24c2c33ab [0;33;1maka [0;35;1m[0;32;22mWilderness[0;33;1m.[m
That's when I pulled the plug on the server.
So you can see it was three guys working together, one of whom somehow managed to log in as me.....
Let me know what has happened and how they got my account if you can figure it out.
I don't think they took your account. An exploit was found recently that allows players to join with other usernames. I would really, really recommend upgrading to the latest version of bukkit, which fixes the issue. I updated yesterday, and just today I saw someone try to log in as me, but the server kicked them.
So anyway, to keep this from happening again, update to the latest beta build of bukkit and you should be good.
I was happily playing away on my server this afternoon when a couple of new players joined.
Next thing I know, I was kicked from the server (stating I'd logged in on another device).
The new guys logged in as me (somehow stolen my account details but I have never given them out). Then oped themselves and deopped me.
I quickly changed my minecraft account password and shutdown the server before they could do any real damage.
I don't know how they managed to pull this off.
Here is the log if it is any help.
That's when I pulled the plug on the server.
So you can see it was three guys working together, one of whom somehow managed to log in as me.....
Let me know what has happened and how they got my account if you can figure it out.
Just scary that they somehow took my account as part of it all.
So anyway, to keep this from happening again, update to the latest beta build of bukkit and you should be good.
upgrade immediately..
it just happened to me too