SRCDS Steam group

SRCDS.com Forums › Source Dedicated Server › SRCDS - Windows v
Is cblock FAILED?

Thread Modes
Is cblock FAILED?
bob7 Offline
Member
**
Posts: 93
Threads: 36
Joined: Aug 2009
Reputation: 0
#1
06-05-2010, 12:54 AM (This post was last modified: 06-05-2010, 12:56 AM by bob7.)
I report one famous type of server attack aka RCon crash.It occured today in one of my private servers (see the log below for more information).What is frustrate me is the fact that the server has zblock 4.4 , cblock(which supposed to stop such attacks!!!)and servsecurity installed.Here is the log:


"L 06/04/2010 - 14:56:11: "aMaziNg.<17><STEAM_0:1:11339915><TERRORIST>" triggered "Planted_The_Bomb"
L 06/04/2010 - 14:56:12: "Deadly.W|<15><STEAM_0:1:19932528><CT>" killed "raNNNdy@BusteD@aka@Vlaka!<20><STEAM_0:0:25411757> <TERRORIST>" with "deagle" (headshot)
L 06/04/2010 - 14:56:15: "Deadly.W|JULIAvsDOUVLI<13><STEAM_0:0:21102754><CT >" say "se 5 pefti"
L 06/04/2010 - 14:56:16: "Deadly.W|JULIAvsDOUVLI<13><STEAM_0:0:21102754><CT >" say "o server"
L 06/04/2010 - 14:56:18: "aMaziNg.<17><STEAM_0:1:11339915><TERRORIST>" killed "Deadly.W|<15><STEAM_0:1:19932528><CT>" with "glock" (headshot)
L 06/04/2010 - 14:56:19: "aMaziNg.<17><STEAM_0:1:11339915><TERRORIST>" killed "Deadly.W|NeCropolisGR<19><STEAM_0:1:28968410><CT> " with "glock" (headshot)
L 06/04/2010 - 14:56:20: "Deadly.W|JULIAvsDOUVLI<13><STEAM_0:0:21102754><CT >" say "apo ton osiak'"
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:25: rcon from "85.75.95.200:13613": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:26: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27: rcon from "85.75.95.200:13615": Bad Password
L 06/04/2010 - 14:56:27:

Then,the server crashed and the log stopped writing.Notice also that the "bad rcon password" commands LAST ONLY 2 SECONDS,as a result,i think that it's a script and no a single-spamming command that a mad man typed at his console,otherwise the attack would last for more seconds.So wtf?Does clock has a security hole or is happening something else here?Please reply.
Find
Reply
Glazz Offline
Junior Member
*
Posts: 15
Threads: 1
Joined: May 2010
Reputation: 0
#2
06-05-2010, 01:29 AM
Hmm that is very strange, i use servsecurity and the rcon exploit never happened again, are you sure you have servsecurity as long with nativetools installed on your server? If yes, send the dump file to the servsecurity team so they can see what happened there...

- G l a z z
Find
Reply
bob7 Offline
Member
**
Posts: 93
Threads: 36
Joined: Aug 2009
Reputation: 0
#3
06-05-2010, 02:15 AM
(06-05-2010, 01:29 AM)Glazz Wrote:  Hmm that is very strange, i use servsecurity and the rcon exploit never happened again, are you sure you have servsecurity as long with nativetools installed on your server? If yes, send the dump file to the servsecurity team so they can see what happened there...

- G l a z z

Speaking of servsecurity, I am wondering if servsecurity and cblock can work well together.Also I have to say that at servsecurity.cfg i have set the cvar "servsecurity_commandblocker from 1 to 0,because I could'nt restart the server with "rcon quit" command.So is this the reason for that?Anyway,if it is so,can i enable commandblocker WITHOUT disabling the "rcon quit" command?Is there a version of servsecurity that has this feature?I had installed servsecurity 0.8.3 from http://addons.eventscripts.com
Find
Reply
Glazz Offline
Junior Member
*
Posts: 15
Threads: 1
Joined: May 2010
Reputation: 0
#4
06-05-2010, 03:11 AM
(06-05-2010, 02:15 AM)bob7 Wrote:  
(06-05-2010, 01:29 AM)Glazz Wrote:  Hmm that is very strange, i use servsecurity and the rcon exploit never happened again, are you sure you have servsecurity as long with nativetools installed on your server? If yes, send the dump file to the servsecurity team so they can see what happened there...

- G l a z z

Speaking of servsecurity, I am wondering if servsecurity and cblock can work well together.Also I have to say that at servsecurity.cfg i have set the cvar "servsecurity_commandblocker from 1 to 0,because I could'nt restart the server with "rcon quit" command.So is this the reason for that?Anyway,if it is so,can i enable commandblocker WITHOUT disabling the "rcon quit" command?Is there a version of servsecurity that has this feature?I had installed servsecurity 0.8.3 from http://addons.eventscripts.com

For the _restart and quit commands i edited the servsecurity.py, and removed those two commands from the file.
I don't use cBlock anymore, but i think they can work well together, but try removing cblock and test yourself the rcon exploit on your server.
Find
Reply
loopyman Offline
Thats Me!
*****
Posts: 2,440
Threads: 73
Joined: May 2009
Reputation: 33
#5
06-05-2010, 05:06 AM (This post was last modified: 06-05-2010, 05:07 AM by loopyman.)
sv_rcon_banpenalty - Number of minutes to ban users who fail rcon authentication.
sv_rcon_maxfailures - Max number of times a user can fail rcon authentication before being banned.
sv_rcon_minfailures - Number of times a user can fail rcon authentication in sv_rcon_minfailuretime before being banned.
sv_rcon_minfailuretime - Number of seconds to track failed rcon authentications.

These commands are helpful to prevent this attack.. Simply set a banpenalty of 5 minutes and 3 to 5 failures.

By default the banpenalty is not used.
An example to auto ban users for 5 mins who fail rcon validation 3-5 times within 30 seconds would be:
Code:
sv_rcon_banpenalty 5
sv_rcon_maxfailures 5
sv_rcon_minfailures 3
sv_rcon_minfailuretime 30
Looking for a game server? Visit fullfrag.com and pick one up as low as $2.50 / mo!
Website Find
Reply
bob7 Offline
Member
**
Posts: 93
Threads: 36
Joined: Aug 2009
Reputation: 0
#6
06-05-2010, 07:32 AM
Thank you very much,SRCDS the BEST !!! Rolleyes
Find
Reply


Forum Jump:


Users browsing this thread: 4 Guest(s)