[Yihya]

Hello All,

My server was hacked recently. I believe it was done via rcon, but am not certain. I have since changed the rcon and yet the hackers, were able to get back in.

MY MODS: Sourcemod, Sourcebans, and MetaMod. It seems they are disabled the mods, then FORCING my gamers to download different config files which deforms the screen color, disables console and more.

Has anyone experienced this or can point me in the right direction?

[Hipster]

I recommend you install voogru's D-FENS and devicenull's rcon locker.

[egor1908]

If you have your RCON password in server.cfg, i recommend you to remove it from there, because it can be downloaded by using the well known exploit. Put your Rcon pass into your launch parameters instead.

like +rcon_password "mypass"

[NoS]

Its done via rcon and allows them to do the commands through sv_cheats 0.

[Timtam]

Look in your addons - sourcemod - plugins folder. There could be a plugin called "SourceAdmin.smx". Delete this file immediately.

[Bacardi]

In this same issue and how to work
Just a question.