WEIRD (BAD RCON ATTEMPT BY:) - Printable Version
+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: WEIRD (BAD RCON ATTEMPT BY:) (/showthread.php?tid=420680)
+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: WEIRD (BAD RCON ATTEMPT BY:) (/showthread.php?tid=420680)
WEIRD (BAD RCON ATTEMPT BY:) - nGen.SoNNy - 06.03.2013
Hi guys! I saw something weird on my server started in my PC. A bad rcon attempt was showed in my console xD
How is this possibile if my IP it's just dynamic and the IP is from Russia...
Код:
[15:01:49] ======================================= [15:01:49] | | [15:01:49] | YSI version 1.06.0002 | [15:01:49] | By Alex "******" Cole | [15:01:49] | | [15:01:49] ======================================= [15:01:49] [15:01:49] << MySQL Conecting >> To ' x' as 'x' to database 'x'. [15:01:49] << MySQL >> Connection to 'x' established. [15:01:49] << MySQL >> Database 'x' selected. [15:01:49] Spawned [ 4 ] Hot Air Balloons [15:01:49] Number of vehicle models: 7 [15:01:49] Loading houses... [15:01:49] Successfully Loaded [ 307 ] houses [15:01:49] Loading gangs... [15:01:49] Gang Name: Grove Street 4 Life - ID: 1 [15:01:49] Gang Name: SF UnkNown Gang - ID: 2 [15:01:49] Gang Name: Blistery Crew - ID: 3 [15:01:49] Gang Name: Underground Criminals - ID: 4 [15:01:49] Gang Name: BRT 4 Life - ID: 5 [15:01:49] Gang Name: The Triads - ID: 6 [15:01:49] Gang Name: EmpireStatesSunderground - ID: 7 [15:01:49] Loading teritories... [15:01:49] Successfully Loaded [ 7 ] teritories [15:01:49] Loading gang checkpoints... [15:01:49] Successfully Loaded [ 7 ] gang checkpoints [15:02:09] Incoming connection: 127.0.0.1:65032 [15:02:09] [join] SoNNy has joined the server (0:127.0.0.1) [15:03:17] [part] SoNNy has left the server (0:1) [15:07:29] BAD RCON ATTEMPT BY: 95.134.107.23 [15:15:13] BAD RCON ATTEMPT BY: 95.134.107.23
Re: WEIRD (BAD RCON ATTEMPT BY:) - Yves - 06.03.2013
looks like someone is trying to guess your Rcon Password. /rcon login [pass]
Re: WEIRD (BAD RCON ATTEMPT BY:) - nGen.SoNNy - 06.03.2013
Nobody was connected to the server
Re: WEIRD (BAD RCON ATTEMPT BY:) - Djole1337 - 06.03.2013
Quote:
|
Originally Posted by nGen.SoNNy
 Nobody was connected to the server
|
Re: WEIRD (BAD RCON ATTEMPT BY:) - Jason_Dealley - 06.03.2013
Seeing the log its an remote.
It means that there is someone with a tool to rcon control servers without being on there trying to guess your password.
Re: WEIRD (BAD RCON ATTEMPT BY:) - nGen.SoNNy - 06.03.2013
Yeah i know but i just opened it in my PC for about 5-10 minutes! How the fuc* it's possible to use my ip?
It's just a coincidence?As u can see... the time different it's about 8 minutes
[15:07:29] BAD RCON ATTEMPT BY: 95.134.107.23
[15:15:13] BAD RCON ATTEMPT BY: 95.134.107.23
Re: WEIRD (BAD RCON ATTEMPT BY:) - Jason_Dealley - 06.03.2013
Add this to your Server.cfg
rcon 0
This blocks the remote rcon function.
Re: WEIRD (BAD RCON ATTEMPT BY:) - Jason_Dealley - 06.03.2013
Did that work?
Re: WEIRD (BAD RCON ATTEMPT BY:) - rdstm - 06.03.2013
I recived the same kind of attack . Imagine how much did someone tryed to guess my rcon , cause my server log was almost 400mb
) rcon 0 on server.cfg and you fix the problem. cheers
Re: WEIRD (BAD RCON ATTEMPT BY:) - Jason_Dealley - 06.03.2013
Quote:
|
Originally Posted by rdstm
I recived the same kind of attack . Imagine how much did someone tryed to guess my rcon , cause my server log was almost 400mb
) rcon 0 on server.cfg and you fix the problem. cheers |