SA-MP Forums

Go Back   SA-MP Forums > SA-MP Server > Server Support

Reply
 
Thread Tools Display Modes
Old 14/05/2013, 09:34 PM   #1
Jstylezzz
High-roller
 
Jstylezzz's Avatar
 
Join Date: Sep 2011
Location: Netherlands
Posts: 1,860
Reputation: 1571
Default Bad RCON attempts - servers getting 'attacked' by the same IP

Hi all

I noticed 2 people, including a friend of mines, are getting the bad RCON attempt message all the time, and it seems to be coming from 1 IP. Now, all I found out is that it's coming from Moscow > Russia, but I can't say wether it's a individual or a network used by people to do these things. I was wondering, are any of you guys experiencing the same? I'm curious because the 2 persons in question are not related to eachother, but the IP and method used by the RCON 'hackers', if you will, are exactly the same.

Check

The first post

And the second one

The server of the second person, is hosted on his own computer, so it's not the case the 'hackers' are bruteforcing on a company or something, I guess..
Now, am I thinking too much and is this just coincidence and shouldn't we pay attention to it, or are more people experiencing this? I haven't seen it myself yet.

(I know this can be solved by turning off the RCON in the server.cfg, but like I said, I just want to check if there are more people facing this.)

(If this post is too irrelevant, moderators, please remove it. Thank you )

EDIT: So now there are four persons in total, confirmed, who are attacked by this IP. Check the post a little further and a post on the second page.

Last edited by Jstylezzz; 15/05/2013 at 01:28 PM.
Jstylezzz is offline   Reply With Quote
Old 14/05/2013, 09:36 PM   #2
punklord
Gangsta
 
Join Date: Jan 2013
Posts: 598
Reputation: 353
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

Yeah,Im curious too..Epic Weirdness..Im still getting that BAD RCON LOGIN Msgs... *_*
punklord is offline   Reply With Quote
Old 14/05/2013, 09:41 PM   #3
Kitten
High-roller
 
Join Date: Jul 2010
Location: United States
Posts: 2,178
Reputation: 339
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

Russians. (Ip traced it )
Kitten is offline   Reply With Quote
Old 14/05/2013, 10:06 PM   #4
[L]azy[H]aze
Huge Clucker
 
[L]azy[H]aze's Avatar
 
Join Date: Apr 2013
Location: Ireland/latvia
Posts: 445
Reputation: 34
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

Yeh happens to me allot
[L]azy[H]aze is offline   Reply With Quote
Old 14/05/2013, 10:10 PM   #5
punklord
Gangsta
 
Join Date: Jan 2013
Posts: 598
Reputation: 353
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

Quote:
Originally Posted by Kefir View Post
Yeh happens to me allot
Same I.P?
punklord is offline   Reply With Quote
Old 14/05/2013, 10:10 PM   #6
kaisersouse
High-roller
 
kaisersouse's Avatar
 
Join Date: Jun 2006
Location: Subaru Forester
Posts: 2,791
Reputation: 1011
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

BLOCK THE IP RANGE AT THE FIREWALL AND BE DONE WITH IT
__________________
Life is like a box of cheap-ass no cocoa garbage dollar-store chocolate.
kaisersouse is offline   Reply With Quote
Old 14/05/2013, 10:14 PM   #7
[L]azy[H]aze
Huge Clucker
 
[L]azy[H]aze's Avatar
 
Join Date: Apr 2013
Location: Ireland/latvia
Posts: 445
Reputation: 34
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

Quote:
Originally Posted by PunkLorD View Post
Same I.P?
yes the same.
[L]azy[H]aze is offline   Reply With Quote
Old 14/05/2013, 10:14 PM   #8
punklord
Gangsta
 
Join Date: Jan 2013
Posts: 598
Reputation: 353
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

How peculiar indeed?
punklord is offline   Reply With Quote
Old 14/05/2013, 10:15 PM   #9
Astralis
Guest
 
Posts: n/a
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

2 IP's doin' it all day.
  Reply With Quote
Old 14/05/2013, 10:17 PM   #10
kaisersouse
High-roller
 
kaisersouse's Avatar
 
Join Date: Jun 2006
Location: Subaru Forester
Posts: 2,791
Reputation: 1011
Default Re: Bad RCON attempts - servers getting 'attacked' by the same IP

All CIDR ranges for that entire ISP:
Quote:
212.48.128.0/19
89.20.128.0/19
109.170.0.0/17
79.120.0.0/17
213.141.128.0/19
176.192.0.0/14
Block those and they'll have to get a new ISP to continue getting to your server
__________________
Life is like a box of cheap-ass no cocoa garbage dollar-store chocolate.
kaisersouse is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[Tool/Web/Other] [Android]SA-MP App - Query and send RCON commands to your servers R@f Tools and Files 131 14/07/2017 12:31 AM
[Android]SA-MP App - Query and send RCON commands to your servers R@f Everything and Nothing 25 05/06/2012 12:35 AM
Servers Too Unstable To Be True (RCON) BP13 Server Support 7 22/09/2009 08:46 PM


All times are GMT. The time now is 11:40 PM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.