RCON Login attacks, without a player connecting..?
#5

Quote:
Originally Posted by Latyos
Посмотреть сообщение
Let me guess ip addresses:

178.167.40.195
86.57.187.228

I'm having these attacks too.

By the way if you want to prevent your rcon got hacked use rcon 0 for server.cfg and set your rcon password complex like "asHdfsЈ#>Ј1231243$Ј#423fAdHsd"
Yeah, exactly.


This is my OnRconLogin ... script:
pawn Код:
public OnRconLoginAttempt(ip[], password[], success)
{
    new playerid;
    if(!success)
    {
        if(Warns[playerid] == 2)
        {
            if(PlayerInfo[playerid][pFailedRCON] <= 1)
            {
                new name[MAX_PLAYER_NAME], string[94];
                GetPlayerName(playerid, name, sizeof(name));
                format(string, sizeof(string), "* %s[%d] was automatically KICKED for failed RCON Login Attempts [3/3]!", name, playerid);
                SendClientMessageToAll(COLOR_RED, string);
                SetTimerEx("KickTimer", 100, false, "i", playerid);
                PlayerInfo[playerid][pTimesKicked]++;
                PlayerInfo[playerid][pFailedRCON]++;
                printf("%s has been AUTO-KICKED for Failed RCON Login(s) - IP: %s - PASSWORD: %s", name, playerid, ip, password);
            }
            else if (PlayerInfo[playerid][pFailedRCON] >= 2)
            {
                new name[MAX_PLAYER_NAME], string[94], plrIP[16];
                GetPlayerIp(playerid, plrIP, sizeof(plrIP));
                GetPlayerName(playerid, name, sizeof(name));
                format(string, sizeof(string), "* %s[%d] was automatically BANNED for MULTIPLE failed RCON Login Attempts!", name, playerid);
                SendClientMessageToAll(COLOR_RED, string);
                SetTimerEx("BanTimer", 50, false, "i", playerid);
                format(string, sizeof(string), "banip %s", plrIP);
                SendRconCommand(string);
                PlayerInfo[playerid][pACBanned] = 1;
                PlayerInfo[playerid][pTimesKicked]++;
                PlayerInfo[playerid][pFailedRCON] = 3;
                printf("%s has been AUTO-BANNED for Failed RCON Login(s) - IP: %s - PASSWORD: %s", name, playerid, ip, password);
            }
        }
        else
        {
            new name[MAX_PLAYER_NAME], string[94];
            GetPlayerName(playerid, name, sizeof(name));
            Warns[playerid]++;
            format(string, sizeof(string), "* Failed RCON Login Attempt - [ %d / 3 ]", Warns[playerid]);
            SendClientMessage(playerid, COLOR_RED, string);
            format(string, sizeof(string), "* WARNING * Player %s[%d] is attempting to login the RCON - IP: %s -", name, playerid, ip);
            SendMessageToAdmins(COLOR_RED, string);
            printf("%s has tried to login in RCON - IP: %s - PASSWORD: %s", name, playerid, ip, password);
        }
    }
    return 1;
}
I actually don't get any PRINTF warnings, when they attempt to login.. And my password is kinda complex (6 letters, 4 numbers)

Anyways..
"rcon 0", if it's disabled, will stuff like "/rcon login MYPASSWORD" or "SendRconCommand("gmx") work?
Reply


Messages In This Thread

Forum Jump:


Users browsing this thread: 1 Guest(s)