RCON Hacking Bot or something..

RCON Hacking Bot or something.. - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: RCON Hacking Bot or something.. (/showthread.php?tid=373416)

RCON Hacking Bot or something.. - Luke_James - 30.08.2012

There's some automated thing attempting to crack our RCON password. I'm not worried about them getting it, as the password is 100 characters wrong and changes every day, but it's just a nuisance to see "<IP> failed RCON login attempt" every second when I load my server log. I know exactly who's doing it, their names, emails etc, I know their server and who hosts it. is there any way to get them into some sort of trouble for this?

Re: RCON Hacking Bot or something.. - HyDrAtIc - 30.08.2012

Yeah report thier IP and Server IP to any of the moderators or Kalcor it's the best way to get them banned from Master Servers

Re: RCON Hacking Bot or something.. - Emmet_ - 30.08.2012

1) You can rangeban their IP by typing the first two columns of their IP following the '*' character (without the quotes).

Example:

Код:

/banip OR /rcon banip 69.158.*

2) Or you can paste the snippet below into your gamemode and it will stop the failed login attempts.

pawn Код:

public OnRconLoginAttempt(ip[], password[], success)
{
    if (!success)
    {
        new szString[16 + 8];
        format(szString, sizeof(szString), "banip %s", ip);
        SendRconCommand(szString);
    }
    return 1;
}

Re: RCON Hacking Bot or something.. - Luke_James - 30.08.2012

RCON IP banning didn't work..

Quote:

[13:53:27] RCON (In-Game): Player [Luke_Wilkinson] sent command: banip 196.205.*
[13:53:27] BAD RCON ATTEMPT BY: 196.205.177.251

Re: RCON Hacking Bot or something.. - Emmet_ - 30.08.2012

Quote:

Originally Posted by Luke_James

RCON IP banning didn't work..

Oh, I forgot to tell you that even if someone is banned, they can still try to log in to RCON by using a simple .bat script.

However, it says 'BAD RCON ATTEMPT', so the player is not logged into RCON, yet they can do /rcon blablabla and such.

I don't think there's a solution, sorry.

Re: RCON Hacking Bot or something.. - Luke_James - 30.08.2012

Is it just trying random passwords?

Re: RCON Hacking Bot or something.. - C00K13M0N$73R - 30.08.2012

Try

rcon 0

in your server.cfg. This disables RCON.

Re: RCON Hacking Bot or something.. - ColorHost-Kevin - 30.08.2012

I am assuming he still wants RCON active. Sadly i am not sure if there is a solution out there to disable that in your logs.

Re: RCON Hacking Bot or something.. - linuxthefish - 30.08.2012

Kill it with fire, and turn rcon off. It's useless and outdated.

Re: RCON Hacking Bot or something.. - Luke_James - 30.08.2012

Nope, I have no use for RCON, it just causes trouble. Didn't know you could turn it off though, thanks.