Server gone wrong

[Electricity]

i am an owner of a server and we had about 14 people on. So me and my friend are the owners and all of sudden this on guy joins and everything went wrong. My friend starts banning me and killing me over and over again. i thought it was a joke but then he skyped me saying his account has been hacked. So i go on console and unbaned myself and log back onto the server. So when i got back on, he hacks into my account and takes it over. At the end, i just closed all servers, i have 3, and changed my password. Does anyone know how to prevent this from happening? is there a plugin i should add or get a vpn or something? any help would be much appreciated, Thanks.

 

[Cal]

Make sure all of your staff have secure accounts and put 2fa on your server.

 

[Electricity]

That's an L sir

L of the year more like it

 

[Kiri]

https://www.spigotmc.org/resources/ipwhitelist.61/

Spoofing

 

[itslyn]

Get a VPN, that'll help.

 

[Cal]

Demote all the staff members except for your TRUSTED IRL FRIENDS[DOUBLEPOST=1498583722][/DOUBLEPOST]
or just get a vpn

Trusted IRL friends are usually shit staff.

 

[Nitr0us]

Trusted IRL friends are usually shit staff.

Can confirm.

 

[Chad Griffith]

Do you use BungeeCord? If so, they used a common BungeeCord exploit

 

[ShadowMX]

Do you use BungeeCord? If so, they used a common BungeeCord exploit

That exploit was just used on my server a couple days ago. I was able to shut it down before any crazy things happen and fixed the exploit so it didnt happen again

 

[Vip]

i am an owner of a server and we had about 14 people on. So me and my friend are the owners and all of sudden this on guy joins and everything went wrong. My friend starts banning me and killing me over and over again. i thought it was a joke but then he skyped me saying his account has been hacked. So i go on console and unbaned myself and log back onto the server. So when i got back on, he hacks into my account and takes it over. At the end, i just closed all servers, i have 3, and changed my password. Does anyone know how to prevent this from happening? is there a plugin i should add or get a vpn or something? any help would be much appreciated, Thanks.

Train your staff and owners to not click on any links that they think is sketchy or a link thats given by someone they don't know. If they click on a link they arent aware of it can cause the guy who sent the link to get his/her IP. If the link goes to a login page the website can also save all login details which are then sent to the guy who sent the link. If that made any sense I tried explaining to the best of my ability, if you have any other concerns pm me or add me on skype @ youcrazyson123.