PaperMC / PaperMC/Paper

Request to add RCON event

Open
#12,085 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

priority: low status: unlikely
Dominant language
Java
Stars
12.7k
Forks
3.5k
Avg merge
3d 13h
Merged PRs (30d)
11

Description

Is your feature request related to a problem?

I would like to request the addition of an RCON login event to the Minecraft API. Currently, there is no event to listen for RCON login attempts, which makes it difficult to implement security measures such as detecting brute force attacks on the RCON interface.

Why is this needed?

Brute-force protection: This would allow server admins to track failed login attempts, lock out IPs after a number of failed attempts, and integrate with firewalls.
Logging and monitoring: Server admins could log RCON activity and detect unauthorized access attempts in real time.
Improved security: It would allow for more secure server management, without relying on external tools or scripts.
Adding this feature would help improve RCON security and better protect Minecraft servers.

Describe the solution you'd like.

Currently, there is no event to listen for RCON login attempts in Minecraft. Adding an RCON login event would provide plugin developers with the ability to:

Detect and handle failed RCON login attempts.
Track the number of login attempts from specific IPs.
Integrate security measures such as automatic IP blocking after a set number of failed attempts.
This event would enable plugin developers to create more secure RCON management systems and prevent brute-force attacks.

Describe alternatives you've considered.

Alternative Solutions Considered:
Currently, I have not found any suitable alternative solutions within the Minecraft ecosystem to achieve this functionality. The only method to handle RCON brute force protection is by using network security software that implements system-level IP access restrictions. These solutions, however, are not tailored to Minecraft and often require complex configuration outside the game environment, which makes them less ideal for plugin-based solutions.

Other

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points. Begin by locating the RCON login handling and existing Minecraft API event conventions; completion requires an agreed event shape for login attempts and tests covering the requested behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.