[DiscordArchive] Saw some activity in my world server console today that had some SQL commands in it that I wasn't re
[DiscordArchive] Saw some activity in my world server console today that had some SQL commands in it that I wasn't re
Original source
Saw some activity in my world server console today that had some SQL commands in it that I wasn't responsible for and have never seen before. Something about an IP and worldstate but I don't remember exactly what it said. I became concerned and shut down the server immediately and went to check the logs, but mysteriously both those commands were not in the log while everything else before and after was there. Sorry if my description of this is too vague to actually draw any conclusions (I didn't think to take a screenshot or anything because I thought it would be in the log) but should I be concerned about my server being compromised or something?
rektbyfaith
09-10-2024, 12:34 AM #1Archived author: BlairenceParging • Posted: 2024-09-10T00:34:41.537000+00:00
Original source
Saw some activity in my world server console today that had some SQL commands in it that I wasn't responsible for and have never seen before. Something about an IP and worldstate but I don't remember exactly what it said. I became concerned and shut down the server immediately and went to check the logs, but mysteriously both those commands were not in the log while everything else before and after was there. Sorry if my description of this is too vague to actually draw any conclusions (I didn't think to take a screenshot or anything because I thought it would be in the log) but should I be concerned about my server being compromised or something?
Original source
I don't see how someone could run SQL command by trying to send it to your worldserver
rektbyfaith
09-10-2024, 12:37 AM #2Archived author: Revision • Posted: 2024-09-10T00:37:50.179000+00:00
Original source
I don't see how someone could run SQL command by trying to send it to your worldserver
Original source
Without knowing what it said it's a bit difficulty to say exactly what it is and if it could be harmful
rektbyfaith
09-10-2024, 12:40 AM #3Archived author: Revision • Posted: 2024-09-10T00:40:13.197000+00:00
Original source
Without knowing what it said it's a bit difficulty to say exactly what it is and if it could be harmful
Original source
if you set loggers to debug sql then it will show queries
rektbyfaith
09-10-2024, 01:31 AM #4Archived author: Nyeriah • Posted: 2024-09-10T01:31:42.147000+00:00
Original source
if you set loggers to debug sql then it will show queries
Original source
Ahh thanks for the tip! I just found it, I didn't know to search the error log instead of the normal log. Here's what it said:
```
SQL(p): SELECT unbandate > UNIX_TIMESTAMP() OR unbandate = bandate AS banned, NULL as country FROM ip_banned WHERE ip = 199.45.154.116
[ERROR]: [2013] Lost connection to MySQL server during query
SQL(p): UPDATE worldstates SET value = 1725969600 WHERE entry = 20008
[ERROR]: [2013] Lost connection to MySQL server during query
[2013] Lost connection to MySQL server during query
Lost the connection to the MySQL server!
Lost the connection to the MySQL server!
Lost the connection to the MySQL server!
```
rektbyfaith
09-10-2024, 02:24 AM #5Archived author: BlairenceParging • Posted: 2024-09-10T02:24:21.670000+00:00
Original source
Ahh thanks for the tip! I just found it, I didn't know to search the error log instead of the normal log. Here's what it said:
```
SQL(p): SELECT unbandate > UNIX_TIMESTAMP() OR unbandate = bandate AS banned, NULL as country FROM ip_banned WHERE ip = 199.45.154.116
[ERROR]: [2013] Lost connection to MySQL server during query
SQL(p): UPDATE worldstates SET value = 1725969600 WHERE entry = 20008
[ERROR]: [2013] Lost connection to MySQL server during query
[2013] Lost connection to MySQL server during query
Lost the connection to the MySQL server!
Lost the connection to the MySQL server!
Lost the connection to the MySQL server!
```
1 Guest(s)
1 Guest(s)