[Dan.]

Hi,

I encountered a problem when suddenly everyone in the server got a white loading screen. The hostname was changed to:

Hacked by Vegaz!skype:[skypecontact]

I have 'rcon 0' in my server config, using a safe 15+ character RCON password. This was in the server log:
[13:28:33] BAD RCON ATTEMPT BY: 146.148.112.229
[13:28:33] BAD RCON ATTEMPT BY: 146.148.112.229

A restart worked but how can I keep this from happening in the future? This is how it looked for the players: http://i.imgur.com/u2X3Lja.png

If you enter 'Hacked by Vegaz!skype' into ****** search, then you can find some old servers who had this problem aswell.

[HarrisonC]

I'm not sure how this happened but it would be really useful to note which player might have caused this and disclosing their IP upon request for servers to ban this guy.

[SoFahim]

He can do thing, because in server.cfg , there one line like rcon 1 . Just put it rcon 0

NOTE : If you cannot find in server rcon 1 , then just put rcon 0 .

[Dan.]

If you read my original post, you can see that I already have 'rcon 0' in my config.

[SoFahim]

Quote:

Originally Posted by Dan. If you read my original post, you can see that I already have 'rcon 0' in my config.

REALLY? Ahh! But, This is impossible to do like like. hold on, are you trying to making troll here or real problem. Because if rcon 0 , then no Rcon can connect to the server. even if they try, there will be no log of that

[Dan.]

I'll recheck my configs, maybe it indeed is on 1 somehow. But still a weird problem since he got access to my server with only 2 attempts on a long RCON password.

[Kapersky™]

He's a Russian hacker, I've encountered him at many servers. I guess he's some quality hacks or quality tricks. Are you sure your RCON was not only in Alphabets or numbers (it is easy to crack if only alphabets or numbers are there). You should use format like this "XYZ.123@9836;YHSK[LOL]" at least the mixture of special characters and alphabets; and numbers

[[WSF]ThA_Devil]

I opt-in for a method of random RCON password each login. I handle my RCON stuff using YSF, and on each RCON login attempt, I just change a password for a random one.

[Jake187]

Limit rcon attempts to one only, if fails autoban simple as that. Nobody should be attempting to login to the rcon besides yourself and if you get the password wrong than you ban yourself simple as that.

[Trollerz]