SA-MP Forums Archive
BAD RCON ATTEMPT by someone when there are no players - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: BAD RCON ATTEMPT by someone when there are no players (/showthread.php?tid=416841)



BAD RCON ATTEMPT by someone when there are no players - pasha97 - 18.02.2013

I am woried about this thing. I see many warnings in console: BAD RCON ATTEMPT BY: 78.36.37.120

Код:
[19:23:07] BAD RCON ATTEMPT BY: 78.36.37.120
[19:25:29] BAD RCON ATTEMPT BY: 78.36.37.120
[19:27:51] BAD RCON ATTEMPT BY: 78.36.37.120
[19:30:16] BAD RCON ATTEMPT BY: 78.36.37.120
[19:35:44] BAD RCON ATTEMPT BY: 78.36.37.120
[19:37:34] BAD RCON ATTEMPT BY: 78.36.37.120
[19:39:32] BAD RCON ATTEMPT BY: 78.36.37.120
This thing even appears when there are no players on the server. Is someone hacking me or what? This is very weired. Can anyone help me?


Re: BAD RCON ATTEMPT by someone when there are no players - Vince - 18.02.2013

Disable remote rcon in server.cfg. Next time search.


Re: BAD RCON ATTEMPT by someone when there are no players - pasha97 - 18.02.2013

Quote:
Originally Posted by Vince
Посмотреть сообщение
Disable remote rcon in server.cfg. Next time search.
Remote rcon? Can you tell me what is it and how does it work? I have never heard about it


Re: BAD RCON ATTEMPT by someone when there are no players - Jason_Dealley - 18.02.2013

Quote:

The Remote Console is a command prompt where you can use RCON commands without having to be in game and on your server.

https://sampwiki.blast.hk/wiki/Remote_Console


Re: BAD RCON ATTEMPT by someone when there are no players - Blast3r - 18.02.2013

That IP is the same as the one that shows on my console, I guess it's some kind of a bug or something...


Re: BAD RCON ATTEMPT by someone when there are no players - Guest9328472398472 - 18.02.2013

Unless someone is going to random servers doing this, just block the other IP - otherwise disable to remote console.


Re: BAD RCON ATTEMPT by someone when there are no players - pasha97 - 18.02.2013

I think it is some kind of bot, which goes through all servers in sa-mp in ored to find a server with easy rcon password. I will disable remote console as you all told me. Thanks for replying


Re: BAD RCON ATTEMPT by someone when there are no players - caki - 19.02.2013

Geographic Information about 78.36.37.120:

Country: RU (Russian Federation)
Region: 28
Latitude: 61.8167
Longitude: 34.3333

pawn Код:
public OnRconLoginAttempt(ip[], password[], success)
{
    if(!success) //If the password was incorrect
    {

        printf("FAILED RCON LOGIN BY IP %s USING PASSWORD %s",ip, password);
        new pip[16];
        for(new i=0; i<MAX_PLAYERS; i++) //Loop through all players
        {
            GetPlayerIp(i, pip, sizeof(pip));
            if(!strcmp(ip, pip, true)) //If a player's IP is the IP that failed the login
            {   new str[128], name[MAX_PLAYER_NAME];
                GetPlayerName(i, name, sizeof(name));
                format(str, sizeof(str), "{37DB45}%s {FF0000}was auto-banned by {0000FF}GOD{FF0000}. Reason: {DB881A}Attepmt to hack Rcon{FF0000}.", name);
                SendClientMessageToAll(0xFFFFFFFF,str);
                SendClientMessage(i, 0xFFFFFFFF, "{FF0000}Wrong Password. {0xFFFFFFFF}You are automatically {FF0000}banned."); //Send a message
                SendClientMessage(i, 0xFFFFFFFF, "{DB881A}Send me an e-mail at {FF0000}change{37DB45}@{FF0000}change{37DB45}.{FF0000}change{DB881A} for an unban."); //Send a message
                Ban(i); //They are now banned.
            }
        }
    }
    return 1;
}
Code above will help you also.