Posts: 508
Threads: 34
Joined: Feb 2011
Reputation:
0
We were playing in a server, until a guy name "unknown" entered and threaten to hack the server. We thought it was some kind of prank. But after few mins, he take control of the rcon admin and banned all players. How did he hacked?
Posts: 150
Threads: 0
Joined: Dec 2010
Reputation:
0
No security your end.
Disable rcon if you know need to use it, EG if you have a Admin script.
Posts: 2,220
Threads: 154
Joined: Jul 2009
Reputation:
0
You just have used too simple passwords. Look in your RCON what he tried and how much times and the time, on that you can determine if he used a program or just tried by himself.
Posts: 508
Threads: 34
Joined: Feb 2011
Reputation:
0
Incredible hacker. I have change the RCON pass today morning. When I got back home and see the server files, there are 17 people banned in the banlist
Posts: 10,066
Threads: 38
Joined: Sep 2007
Reputation:
0
Looks like a brute force attack. Any kid can do it with some simple tools found on the net. Be sure to not use any words that can be found in a dictionary or obvious combinations like 123456 or 654321 (you'd be surprised if you'd know how many people actually use these). Example of a good password that you can remember:
R4ndomP@ssw0rd!
Posts: 508
Threads: 34
Joined: Feb 2011
Reputation:
0
well our old password was "aazyuuxx.exE" which they have found and the next old password was "HoWoNEarthZ"
Posts: 2,350
Threads: 96
Joined: Jun 2007
Reputation:
0
Then it looks like that person has gained access to the ftp server or your servers control panel. You need to contact your server host about this.
