Bad rcon attemps...
#1

Well i saw this today:
Quote:

[17:04:33] BAD RCON ATTEMPT BY: 176.195.219.145
[17:10:17] BAD RCON ATTEMPT BY: 176.195.219.145
[17:21:51] BAD RCON ATTEMPT BY: 176.195.219.145
[17:27:47] BAD RCON ATTEMPT BY: 176.195.219.145
[17:33:38] BAD RCON ATTEMPT BY: 176.195.219.145
[17:39:31] BAD RCON ATTEMPT BY: 176.195.219.145
[17:45:27] BAD RCON ATTEMPT BY: 176.195.219.145
[17:51:27] BAD RCON ATTEMPT BY: 176.195.219.145
[17:57:29] BAD RCON ATTEMPT BY: 176.195.219.145
[18:03:33] BAD RCON ATTEMPT BY: 176.195.219.145
[18:09:42] BAD RCON ATTEMPT BY: 176.195.219.145
[18:15:52] BAD RCON ATTEMPT BY: 176.195.219.145
[18:16:30] BAD RCON ATTEMPT BY: 79.106.109.238
[18:22:01] BAD RCON ATTEMPT BY: 176.195.219.145
[18:28:11] BAD RCON ATTEMPT BY: 176.195.219.145
[18:34:23] BAD RCON ATTEMPT BY: 176.195.219.145
[18:40:38] BAD RCON ATTEMPT BY: 176.195.219.145
[18:46:54] BAD RCON ATTEMPT BY: 176.195.219.145
[18:53:13] BAD RCON ATTEMPT BY: 176.195.219.145
[18:59:40] BAD RCON ATTEMPT BY: 176.195.219.145
[19:06:15] BAD RCON ATTEMPT BY: 176.195.219.145
[19:12:49] BAD RCON ATTEMPT BY: 176.195.219.145
[19:19:19] BAD RCON ATTEMPT BY: 176.195.219.145
[19:25:44] BAD RCON ATTEMPT BY: 176.195.219.145
[19:32:15] BAD RCON ATTEMPT BY: 176.195.219.145
[19:38:45] BAD RCON ATTEMPT BY: 176.195.219.145
[19:45:18] BAD RCON ATTEMPT BY: 176.195.219.145
[19:51:53] BAD RCON ATTEMPT BY: 176.195.219.145
[19:58:24] BAD RCON ATTEMPT BY: 176.195.219.145
[20:05:00] BAD RCON ATTEMPT BY: 176.195.219.145
[20:11:38] BAD RCON ATTEMPT BY: 176.195.219.145
[20:18:16] BAD RCON ATTEMPT BY: 176.195.219.145
[20:24:55] BAD RCON ATTEMPT BY: 176.195.219.145
[20:31:36] BAD RCON ATTEMPT BY: 176.195.219.145
[20:38:21] BAD RCON ATTEMPT BY: 176.195.219.145
[20:45:06] BAD RCON ATTEMPT BY: 176.195.219.145
[20:51:51] BAD RCON ATTEMPT BY: 176.195.219.145
[20:58:59] BAD RCON ATTEMPT BY: 176.195.219.145
[21:06:04] BAD RCON ATTEMPT BY: 176.195.219.145
[21:12:56] BAD RCON ATTEMPT BY: 176.195.219.145
[21:19:51] BAD RCON ATTEMPT BY: 176.195.219.145
[21:26:49] BAD RCON ATTEMPT BY: 176.195.219.145
[21:33:50] BAD RCON ATTEMPT BY: 176.195.219.145
[21:40:53] BAD RCON ATTEMPT BY: 176.195.219.145
[21:47:57] BAD RCON ATTEMPT BY: 176.195.219.145
[21:55:00] BAD RCON ATTEMPT BY: 176.195.219.145
[22:02:09] BAD RCON ATTEMPT BY: 176.195.219.145
[22:09:19] BAD RCON ATTEMPT BY: 176.195.219.145
[22:16:30] BAD RCON ATTEMPT BY: 176.195.219.145
[22:23:42] BAD RCON ATTEMPT BY: 176.195.219.145
[22:30:53] BAD RCON ATTEMPT BY: 176.195.219.145
[06:59:40] BAD RCON ATTEMPT BY: 176.195.219.145
[07:06:51] BAD RCON ATTEMPT BY: 176.195.219.145
[07:14:05] BAD RCON ATTEMPT BY: 176.195.219.145
[07:21:22] BAD RCON ATTEMPT BY: 176.195.219.145
[07:28:39] BAD RCON ATTEMPT BY: 176.195.219.145
[07:36:02] BAD RCON ATTEMPT BY: 176.195.219.145
[07:43:28] BAD RCON ATTEMPT BY: 176.195.219.145
[07:50:56] BAD RCON ATTEMPT BY: 176.195.219.145
[07:58:27] BAD RCON ATTEMPT BY: 176.195.219.145
[08:06:01] BAD RCON ATTEMPT BY: 176.195.219.145
[08:13:30] BAD RCON ATTEMPT BY: 176.195.219.145
[08:21:04] BAD RCON ATTEMPT BY: 176.195.219.145
[08:28:39] BAD RCON ATTEMPT BY: 176.195.219.145
[08:36:18] BAD RCON ATTEMPT BY: 176.195.219.145
[08:44:00] BAD RCON ATTEMPT BY: 176.195.219.145
[08:51:40] BAD RCON ATTEMPT BY: 176.195.219.145
[08:59:23] BAD RCON ATTEMPT BY: 176.195.219.145
[09:07:04] BAD RCON ATTEMPT BY: 176.195.219.145
[09:14:48] BAD RCON ATTEMPT BY: 176.195.219.145
[09:22:34] BAD RCON ATTEMPT BY: 176.195.219.145
[09:30:20] BAD RCON ATTEMPT BY: 176.195.219.145
[09:38:18] BAD RCON ATTEMPT BY: 176.195.219.145
[09:46:18] BAD RCON ATTEMPT BY: 176.195.219.145
[09:54:22] BAD RCON ATTEMPT BY: 176.195.219.145
[10:02:26] BAD RCON ATTEMPT BY: 176.195.219.145
[10:10:29] BAD RCON ATTEMPT BY: 176.195.219.145
[10:18:40] BAD RCON ATTEMPT BY: 176.195.219.145
[10:26:42] BAD RCON ATTEMPT BY: 176.195.219.145
[10:34:46] BAD RCON ATTEMPT BY: 176.195.219.145
[10:42:51] BAD RCON ATTEMPT BY: 176.195.219.145
[10:51:01] BAD RCON ATTEMPT BY: 176.195.219.145
[10:59:27] BAD RCON ATTEMPT BY: 176.195.219.145
[11:07:54] BAD RCON ATTEMPT BY: 176.195.219.145
[11:16:24] BAD RCON ATTEMPT BY: 176.195.219.145
[11:24:41] BAD RCON ATTEMPT BY: 176.195.219.145
[11:32:58] BAD RCON ATTEMPT BY: 176.195.219.145
[11:41:17] BAD RCON ATTEMPT BY: 176.195.219.145
[11:49:35] BAD RCON ATTEMPT BY: 176.195.219.145
[11:58:06] BAD RCON ATTEMPT BY: 176.195.219.145
[12:06:39] BAD RCON ATTEMPT BY: 176.195.219.145
[12:15:04] BAD RCON ATTEMPT BY: 176.195.219.145
[12:23:34] BAD RCON ATTEMPT BY: 176.195.219.145
[12:32:09] BAD RCON ATTEMPT BY: 176.195.219.145
[12:40:36] BAD RCON ATTEMPT BY: 176.195.219.145
[12:49:10] BAD RCON ATTEMPT BY: 176.195.219.145
[12:57:43] BAD RCON ATTEMPT BY: 176.195.219.145
[13:06:28] BAD RCON ATTEMPT BY: 176.195.219.145
[13:15:08] BAD RCON ATTEMPT BY: 176.195.219.145
[13:23:47] BAD RCON ATTEMPT BY: 176.195.219.145
[13:32:22] BAD RCON ATTEMPT BY: 176.195.219.145
[13:41:01] BAD RCON ATTEMPT BY: 176.195.219.145
[13:49:41] BAD RCON ATTEMPT BY: 176.195.219.145
[13:58:27] BAD RCON ATTEMPT BY: 176.195.219.145
[14:07:13] BAD RCON ATTEMPT BY: 176.195.219.145
[14:15:58] BAD RCON ATTEMPT BY: 176.195.219.145
[14:24:42] BAD RCON ATTEMPT BY: 176.195.219.145
[14:33:35] BAD RCON ATTEMPT BY: 176.195.219.145
[14:42:35] BAD RCON ATTEMPT BY: 176.195.219.145
[14:51:34] BAD RCON ATTEMPT BY: 176.195.219.145
[15:00:38] BAD RCON ATTEMPT BY: 176.195.219.145
[15:09:32] BAD RCON ATTEMPT BY: 176.195.219.145
[15:18:45] BAD RCON ATTEMPT BY: 176.195.219.145
[15:27:53] BAD RCON ATTEMPT BY: 176.195.219.145
[15:36:57] BAD RCON ATTEMPT BY: 176.195.219.145
[15:45:57] BAD RCON ATTEMPT BY: 176.195.219.145

the server is locked so how do i insure that the person, who try to get my RCON pass, stops?

EDIT: any good ideas would be good... :/
Reply
#2

It's the remote rcon. Stalkers *cough* Hackers take advantage of that.
Add this to the server .cfg and everything will be fixed.
Код:
rcon 0
Reply
#3

great thanks

EDIT: It seems to work, thanks again
Reply
#4

A rusky was trying to break into your RCON from what I see. IP-Ban him too.
Reply
#5

range ban: 176.195.219.xx
Reply
#6

Alright, I'm on to something.. Yesterday, a friend of mines was experiencing exactly this, the same IP. His server IP is just known by friends and is not posted in public, anywhere. Maybe the SA-MP forum admins can check if it's anyone on this forums? It would be good if this is investigated further.
Reply
#7

Set the rcon 0 in your server.cfg
Reply
#8

Set it to ban after 3 attempts to /rcon
Reply
#9

Maybe it's not the same person.
Have you thought about RCON hack + VPN application
Which is used as VPN,also cracks SAMP RCON Passwords ?
Reply
#10

Quote:
Originally Posted by jotan.
Посмотреть сообщение
Maybe it's not the same person.
Have you thought about RCON hack + VPN application
Which is used as VPN,also cracks SAMP RCON Passwords ?
I never said it's one person, or just one computer.. I don't know anything about the IP, just that it's from Moscow > Russia, and it's ISP, but isn't it just a little strange that 2 persons (I don't know if anyone else had/has this) are attacked from the exact same IP? I know this is the internet, but hey..
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)