[kaisersouse]

This has nothing to do with sa-mp.com or SAMP as a whole. This post is in regards to my own server.

Thinking about blocking Korea at the firewall:

Quote:

119.68.246.2 # lfd: (sshd) Failed SSH login from 119.68.246.2 (KR/Korea, Republic of/-): 5 in the last 300 secs - Thu Jul 21 06:53:23 2011 219.254.35.83 # lfd: (sshd) Failed SSH login from 219.254.35.83 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Jul 23 17:27:07 2011 203.230.73.221 # lfd: (sshd) Failed SSH login from 203.230.73.221 (KR/Korea, Republic of/embix.pufs.ac.kr): 5 in the last 300 secs - Fri Jul 29 14:27:41 2011 117.16.143.145 # lfd: (sshd) Failed SSH login from 117.16.143.145 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sun Jul 31 15:28:14 2011 218.146.253.72 # lfd: (sshd) Failed SSH login from 218.146.253.72 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Aug 3 16:13:31 2011 121.88.250.208 # lfd: (sshd) Failed SSH login from 121.88.250.208 (KR/Korea, Republic of/-): 5 in the last 300 secs - Thu Aug 4 12:08:55 2011 203.239.31.226 # lfd: (sshd) Failed SSH login from 203.239.31.226 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Aug 27 07:28:25 2011 123.212.190.200 # lfd: (sshd) Failed SSH login from 123.212.190.200 (KR/Korea, Republic of/-): 5 in the last 300 secs - Tue Aug 30 11:32:24 2011 210.115.62.120 # lfd: (sshd) Failed SSH login from 210.115.62.120 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Sep 3 11:52:54 2011 117.17.1.94 # lfd: (sshd) Failed SSH login from 117.17.1.94 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sun Sep 4 13:15:08 2011 114.203.87.124 # lfd: (sshd) Failed SSH login from 114.203.87.124 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Sep 5 18:15:37 2011 203.236.203.2 # lfd: (sshd) Failed SSH login from 203.236.203.2 (KR/Korea, Republic of/shinpoong.co.kr): 5 in the last 300 secs - Tue Sep 6 17:45:45 2011 222.122.13.156 # lfd: (sshd) Failed SSH login from 222.122.13.156 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Sep 7 23:18:10 2011 183.110.214.46 # lfd: (sshd) Failed SSH login from 183.110.214.46 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Sep 14 15:28:14 2011 210.112.121.241 # lfd: (sshd) Failed SSH login from 210.112.121.241 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Sep 19 07:09:10 2011 115.41.239.142 # lfd: (sshd) Failed SSH login from 115.41.239.142 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Sep 24 16:39:31 2011 222.122.161.9 # lfd: (sshd) Failed SSH login from 222.122.161.9 (KR/Korea, Republic of/pslogis.co.kr): 5 in the last 300 secs - Sun Sep 25 18:09:32 2011 211.118.104.11 # lfd: (sshd) Failed SSH login from 211.118.104.11 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Sep 26 19:07:51 2011 59.11.92.23 # lfd: (sshd) Failed SSH login from 59.11.92.23 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Oct 17 18:22:00 2011 211.174.123.131 # lfd: (sshd) Failed SSH login from 211.174.123.131 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Nov 9 06:35:30 2011 58.227.192.244 # lfd: (sshd) Failed SSH login from 58.227.192.244 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Nov 14 11:21:24 2011 222.122.20.217 # lfd: (sshd) Failed SSH login from 222.122.20.217 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Nov 21 07:36:16 2011 211.224.108.50 # lfd: (sshd) Failed SSH login from 211.224.108.50 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sun Nov 27 21:12:45 2011 211.240.2.85 # lfd: (sshd) Failed SSH login from 211.240.2.85 (KR/Korea, Republic of/-): 5 in the last 300 secs - Thu Dec 8 17:58:12 2011 116.127.121.117 # lfd: (sshd) Failed SSH login from 116.127.121.117 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Dec 24 12:34:51 2011 117.111.183.67 # lfd: (sshd) Failed SSH login from 117.111.183.67 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Dec 28 05:08:29 2011 121.78.55.106 # lfd: (sshd) Failed SSH login from 121.78.55.106 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Jan 4 23:50:46 2012 123.142.109.156 # lfd: (sshd) Failed SSH login from 123.142.109.156 (KR/Korea, Republic of/-): 5 in the last 300 secs - Tue Jan 10 00:33:24 2012 61.38.186.131 # lfd: (sshd) Failed SSH login from 61.38.186.131 (KR/Korea, Republic of/-): 5 in the last 300 secs - Tue Jan 17 09:27:15 2012 61.109.154.251 # lfd: (sshd) Failed SSH login from 61.109.154.251 (KR/Korea, Republic of/-): 5 in the last 300 secs - Tue Jan 17 14:51:59 2012 1.234.20.68 # lfd: (sshd) Failed SSH login from 1.234.20.68 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Jan 30 17:31:43 2012 1.234.20.87 # lfd: (sshd) Failed SSH login from 1.234.20.87 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Jan 30 18:25:37 2012 61.253.249.157 # lfd: (sshd) Failed SSH login from 61.253.249.157 (KR/Korea, Republic of/-): 5 in the last 300 secs - Thu Feb 2 07:25:47 2012 14.206.5.22 # lfd: (sshd) Failed SSH login from 14.206.5.22 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Feb 4 12:53:06 2012 211.255.24.167 # lfd: (sshd) Failed SSH login from 211.255.24.167 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sat Feb 11 08:49:55 2012 222.122.20.81 # lfd: (sshd) Failed SSH login from 222.122.20.81 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sun Feb 19 17:44:24 2012 203.252.154.194 # lfd: (sshd) Failed SSH login from 203.252.154.194 (KR/Korea, Republic of/-): 5 in the last 300 secs - Fri Feb 24 07:46:59 2012 211.53.111.243 # lfd: (sshd) Failed SSH login from 211.53.111.243 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Mar 5 18:57:53 2012 219.255.134.96 # lfd: (sshd) Failed SSH login from 219.255.134.96 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Mar 14 22:52:17 2012 210.92.142.225 # lfd: (sshd) Failed SSH login from 210.92.142.225 (KR/Korea, Republic of/-): 5 in the last 300 secs - Tue Mar 20 19:14:44 2012 222.237.78.139 # lfd: (sshd) Failed SSH login from 222.237.78.139 (KR/Korea, Republic of/222-237-78-139.tongkni.co.kr): 5 in the last 300 secs - Mon Mar 26 17:52:57 2012 61.43.139.78 # lfd: (sshd) Failed SSH login from 61.43.139.78 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Apr 2 15:29:54 2012 211.189.132.5 # lfd: (sshd) Failed SSH login from 211.189.132.5 (KR/Korea, Republic of/-): 5 in the last 300 secs - Mon Apr 2 22:59:24 2012 222.122.20.145 # lfd: (sshd) Failed SSH login from 222.122.20.145 (KR/Korea, Republic of/-): 5 in the last 300 secs - Wed Apr 4 00:04:47 2012 123.215.30.134 # lfd: (sshd) Failed SSH login from 123.215.30.134 (KR/Korea, Republic of/-): 5 in the last 300 secs - Sun Apr 8 02:23:23 2012 211.108.69.148 # lfd: (sshd) Failed SSH login from 211.108.69.148 (KR/Korea, Republic of/-): 5 in the last 300 secs - Tue Apr 10 00:00:22 2012 222.232.53.113 # lfd: (sshd) Failed SSH login from 222.232.53.113 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Thu May 10 13:09:46 2012 61.42.104.238 # lfd: (sshd) Failed SSH login from 61.42.104.238 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Sat May 19 07:45:28 2012 112.221.237.28 # lfd: (sshd) Failed SSH login from 112.221.237.28 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Fri Jun 8 07:12:04 2012 61.250.123.88 # lfd: (sshd) Failed SSH login from 61.250.123.88 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Sat Jun 9 02:55:28 2012 211.232.114.100 # lfd: (sshd) Failed SSH login from 211.232.114.100 (KR/Korea, Republic of/-/-/static.211-232-114-100.nexg.net): 5 in the last 300 secs - Thu Jun 14 01:45:21 2012 222.112.181.150 # lfd: (sshd) Failed SSH login from 222.112.181.150 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Thu Jun 21 11:29:35 2012 121.254.179.138 # lfd: (sshd) Failed SSH login from 121.254.179.138 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Thu Jul 5 20:33:25 2012 220.85.73.53 # lfd: (sshd) Failed SSH login from 220.85.73.53 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Sat Jul 21 16:11:12 2012 211.53.134.227 # lfd: (sshd) Failed SSH login from 211.53.134.227 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Mon Jul 23 01:17:25 2012 210.112.121.206 # lfd: (sshd) Failed SSH login from 210.112.121.206 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Tue Jul 24 03:13:48 2012 211.202.2.109 # lfd: (sshd) Failed SSH login from 211.202.2.109 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Thu Jul 26 19:22:41 2012 61.33.182.248 # lfd: (sshd) Failed SSH login from 61.33.182.248 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Mon Jul 30 16:44:05 2012 211.233.38.131 # lfd: (sshd) Failed SSH login from 211.233.38.131 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Thu Aug 2 00:37:19 2012 121.125.72.180 # lfd: (sshd) Failed SSH login from 121.125.72.180 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Wed Aug 22 15:22:52 2012 211.53.134.238 # lfd: (sshd) Failed SSH login from 211.53.134.238 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Sun Aug 26 20:11:38 2012 124.3.241.190 # lfd: (sshd) Failed SSH login from 124.3.241.190 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Fri Aug 31 04:37:53 2012 222.114.39.171 # lfd: (sshd) Failed SSH login from 222.114.39.171 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Sun Sep 2 11:35:46 2012 222.231.33.227 # lfd: (sshd) Failed SSH login from 222.231.33.227 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Mon Sep 3 19:51:18 2012 222.231.33.164 # lfd: (sshd) Failed SSH login from 222.231.33.164 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Tue Sep 11 10:06:45 2012 101.79.68.142 # lfd: (sshd) Failed SSH login from 101.79.68.142 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Sun Sep 16 23:39:12 2012 211.194.140.100 # lfd: (sshd) Failed SSH login from 211.194.140.100 (KR/Korea, Republic of/-/-/-): 5 in the last 300 secs - Wed Sep 26 04:39:12 2012 211.119.115.147 # lfd: (sshd) Failed SSH login from 211.119.115.147 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Mon Oct 1 20:44:36 2012 121.125.69.125 # lfd: (sshd) Failed SSH login from 121.125.69.125 (KR/Korea, Republic of/11/Seoul/-): 5 in the last 300 secs - Fri Oct 5 15:26:54 2012

Going thru all of the countries in the log, Korea is the biggest repeat offender. At the same time, I don't want to block legitimate SAMP players AND I've met a Korean only once or twice in the years Ive been playing SAMP. I have to ask...are there a lot of South Korean SAMPers?

[[MM]18240[FMB]]

Is this why the forums were down for about half hour?

[tiernantheman]

It appears this user is from South-Korea. http://forum.sa-mp.com/member.php?u=162996

[Alcatraz Gaming]

That was why the forums was down for me

@Kaisersouse, not a-lot, i think there are less than 50 koreans in the forums. However, it's up to you to block the whole South Korea from SA-MP

[kaisersouse]

No this has nothing to do with sa-mp.com, and is not a reason anything went down (look at the dates).

[Erik_Wood]

Im korean and i play SAMP but im at the EU zone sometimes people from South Korea cant get in servers due to connection problems and their ping that happen to me lnce when i was in Korea

[Emmet_]

It's probably a proxy.

[Mark™]

I suggest you block root logins, change your sshd port number to something else of your choice other than 22, use key authentication method,instead of password one. This would significantly make your server more secure to these kind of login attacks.