ts3server using %100 CPU

[tayyaraga]

Hello, someone joined my server today and he told me i will crash your server and he did crash my server. When I look at the htop and I saw ts3server using %100 cpu. Im using 3.0.12.3 . How did he do that? Is it exploit or what? Also he is still crashing my server. Im using ddos protected vps from blazingfast. How can I fix this help me please.

 

[ehthe]

Try cutting access to file transfer and / or query port to see if that helps.

 

[tayyaraga]

Try cutting access to file transfer and / or query port to see if that help.

i will try this.

any other suggestions?

 

[kingston]

Just wondering if that's an isolated incident related to misconf of this particular teamspeak or perhaps the newest exploit has been leaked?

 

[Qraktzyl]

I don't know, I just see you are running a TeamSpeak server, one of the most dangerous application out there, with the root user. Even the developpers of this application do not trust their capacity in making a secure app and recommend running it under a normal user.

 

[ReXpeiTa]

You have the server log?

Paste teamspeak > logs

 

[vupyC]

I also have this problem I run the php bot and CPU 100%
OS: ubuntu-10.04-minimal_10.04_i386
Resource limits: Virtual CPU 4000Mhz, 2000Mb memory, 80000Mb disk

 

[Shockru]

useradd ts3
passwd ts3
---
---
mv /your/ts3/folder/ /home/ts3/server/
chown -hR ts3 /home/ts3/
chmod -R 0777 /home/ts3/
su ts3
cd /home/ts3/server
./Accounting... (if you)
./ts3server_minimal_runscript.sh createinifile=1
---
---
---
Ctrl + C
nano / vim / edit your ts3server.ini , change filetransfer and query port

My way to start ts3 server:
screen -dmS ts ./ts3server_minimal_runscript.sh inifile=ts3server.ini serveradmin_password=uououo

 

[tayyaraga]

Im not using root user for ts3 anymore but he can still crash my server -.-

 

[ehthe]

Well you could try running a dummy (new server) server for a while and see if he can crash it too.

 

[Rijndael]

Im not using root user for ts3 anymore but he can still crash my server -.-

It's a problem on your end. Limit the available resources the server has access to, and monitor incoming traffic. As for the "Possible Leak" part. That's very unlikely. I've seen the professionality of the r4p3 dev team (just watch their threads) and I don't think they'd allow such thing happen, beside, even if that did happen, I'm sure they'd come up with an official announcement and a binary patch addressing the leaked exploit.

 

[ReXpeiTa]

Im not using root user for ts3 anymore but he can still crash my server -.-

Add Paul on skype, the Blazingfast. It helps a lot. pavel.blazingfast.io

 

[iAndrewGG]

Why don't you just set a swap file? Check how *Adf.Ly Link Removed*

 

[Derp]

Why don't you just set a swap file? Check how *Adf.Ly Link Removed*

CPU Paging? wat?
https://en.wikipedia.org/wiki/Paging

 

[GustavoBretas]

CPU Paging? wat?
https://en.wikipedia.org/wiki/Paging

What do you mean by CPU Paging?

 

[iAndrewGG]

Well, could be http://www.linuxatemyram.com/

 

[Qraktzyl]

Well, could be http://www.linuxatemyram.com/

Cached memory is in yellow in htop. Not the problem here, its not using a lot.

 

[Derp]

What do you mean by CPU Paging?

It was referred to what @iAndrewGG said, He was talking about swap memory (paging). But that doesn't apply to CPU Usage, there's no such thing as CPU Paging and that's why I linked him to the wikipedia Paging article

-Derp

 

[GustavoBretas]

Then what might it be? I'm curious because I run +20 ts servers and they don't eat up my 2vCores neither 500mb of ram...