[Topma4]

Hello, i have look to my server and one ip adress all time try rcon hack to my server...

Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 11:55:48: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 11:55:49: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 11:55:58: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 11:56:16: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 11:561: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:09:53: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:10:11: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:10:26: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:102: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:10:41: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:20:17: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:225: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:22:54: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:23:01: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 12:23:15: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 126:58: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216") Banning 178.212.103.216 for rcon hacking attempts L 02/02/2012 - 129:28: Addip: "<><><>" was banned by IP "permanently" by "Cons ole" (IP "178.212.103.216")

Any one, can tell how to protect it? Thanks

[Drixevel]

I ignore it but if you feel as if you're getting attacked then do the following:

1. Make sure your rcon password is long and has random numbers/letter.

2. Install SMAC from the proper thread.

[Bacardi]

I did plugin to log rcon passwords who ever try log in for curiosity.

Those rcon hack spammers just did something simple...
123
-=DreamZ=-

etc. etc.
Don't know is the main thing to crash servers, valve update that bug.

[Topma4]

Originally Posted by r3dw3r3w0lf I ignore it but if you feel as if you're getting attacked then do the following: 1. Make sure your rcon password is long and has random numbers/letter. 2. Install SMAC from the proper thread.

I have long rcon password, where i can get SMAC?

[Jasonbourne]

https://forums.alliedmods.net/showthread.php?t=169586

[Topma4]

Originally Posted by Jasonbourne https://forums.alliedmods.net/showthread.php?t=169586

this work for tf2 too?

[Nolongerinthegame]

Originally Posted by Topma4 this work for tf2 too?

Yes it does I highly recommend SMAC for your servers.

[Topma4]

Originally Posted by nelioneil Yes it does I highly recommend SMAC for your servers.

Thanks, i think with SMAC no one hack my rcon pw

[Topma4]

Again -.-

rcon from "195.58.249.190:54199": Bad Password rcon from "195.58.249.190:59399": Bad Password rcon from "195.58.249.190:52546": Bad Password rcon from "46.180.235.123:55457": Bad Password rcon from "95.78.107.215:65331": Bad Password

[blue zebra]

Man ...

Write these rows to your server.cfg (and forget this bad password thing):

sv_rcon_minfailures 2
sv_rcon_maxfailures 3
sv_rcon_minfailuretime 30
sv_rcon_banpenalty 360
sv_rcon_log 1

sv_max_queries_sec 3.0
sv_max_queries_window 20
sv_max_queries_sec_global 2500

sv_max_connects_sec 2.0
sv_max_connects_window 4
sv_max_connects_sec_global 150

And ofcorse use strong rcon password, like this:

T_9iOc4Sh-aRK7g5Q

Thats all. The strong password never not be cracked if you protect your server with this extension:
http://forums.alliedmods.net/showthread.php?t=142249