[nGen.SoNNy]

Hi guys! I saw something weird on my server started in my PC. A bad rcon attempt was showed in my console xD
How is this possibile if my IP it's just dynamic and the IP is from Russia...

Код:

[15:01:49]  ======================================= 
[15:01:49]  |                                     | 
[15:01:49]  |        YSI version 1.06.0002        | 
[15:01:49]  |        By Alex "******" Cole        | 
[15:01:49]  |                                     | 
[15:01:49]  ======================================= 
[15:01:49]  
[15:01:49] << MySQL Conecting >> To ' x' as 'x' to database 'x'.
[15:01:49] << MySQL >> Connection to 'x' established.
[15:01:49] << MySQL >> Database 'x' selected.
[15:01:49] Spawned [ 4 ] Hot Air Balloons
[15:01:49] Number of vehicle models: 7
[15:01:49] Loading houses...
[15:01:49] Successfully Loaded [ 307 ] houses
[15:01:49] Loading gangs...
[15:01:49] Gang Name: Grove Street 4 Life - ID: 1
[15:01:49] Gang Name: SF UnkNown Gang - ID: 2
[15:01:49] Gang Name: Blistery Crew - ID: 3
[15:01:49] Gang Name: Underground Criminals - ID: 4
[15:01:49] Gang Name: BRT 4 Life - ID: 5
[15:01:49] Gang Name: The Triads - ID: 6
[15:01:49] Gang Name: EmpireStatesSunderground - ID: 7
[15:01:49] Loading teritories...
[15:01:49] Successfully Loaded [ 7 ] teritories
[15:01:49] Loading gang checkpoints...
[15:01:49] Successfully Loaded [ 7 ] gang checkpoints
[15:02:09] Incoming connection: 127.0.0.1:65032
[15:02:09] [join] SoNNy has joined the server (0:127.0.0.1)
[15:03:17] [part] SoNNy has left the server (0:1)
[15:07:29] BAD RCON ATTEMPT BY: 95.134.107.23
[15:15:13] BAD RCON ATTEMPT BY: 95.134.107.23

[Yves]

looks like someone is trying to guess your Rcon Password. /rcon login [pass]

[nGen.SoNNy]

Nobody was connected to the server

[Djole1337]

Quote:

Originally Posted by nGen.SoNNy Nobody was connected to the server

You don't have to be connected on the server!

[Jason_Dealley]

Seeing the log its an remote.
It means that there is someone with a tool to rcon control servers without being on there trying to guess your password.

[nGen.SoNNy]

Yeah i know but i just opened it in my PC for about 5-10 minutes! How the fuc* it's possible to use my ip? It's just a coincidence?
As u can see... the time different it's about 8 minutes

[15:07:29] BAD RCON ATTEMPT BY: 95.134.107.23
[15:15:13] BAD RCON ATTEMPT BY: 95.134.107.23

[Jason_Dealley]

Add this to your Server.cfg
rcon 0

This blocks the remote rcon function.

[Jason_Dealley]

Did that work?

[rdstm]

I recived the same kind of attack . Imagine how much did someone tryed to guess my rcon , cause my server log was almost 400mb )
rcon 0 on server.cfg and you fix the problem. cheers

[Jason_Dealley]

Quote:

Originally Posted by rdstm I recived the same kind of attack . Imagine how much did someone tryed to guess my rcon , cause my server log was almost 400mb ) rcon 0 on server.cfg and you fix the problem. cheers

No problem man