Strange log !!!

Need help? Post your questions here.

Moderator: moderators

Re: Strange log !!!

Postby GJ51 » Fri Jul 20, 2012 7:05 pm

Well there we have it. Now we get the final clue that explains the problem. Classic. :mrgreen:

Call your ISP and get a new external IP address, then change and update your xxxx.subsonic.org redirect from the network settings in ss.
Last edited by GJ51 on Fri Jul 20, 2012 7:37 pm, edited 1 time in total.
Gary J

http://bios-mods.com
http://www.maplegrovepartners.com
http://theaverageguy.tv/category/tagpodcasts/cyberfrontiers/
User avatar
GJ51
 
Posts: 3492
Joined: Wed Oct 20, 2010 11:58 pm
Location: Western New York

Re: Strange log !!!

Postby bushman4 » Fri Jul 20, 2012 7:18 pm

I have had the problem. It went away when the idiot who had my server set up on their device either stopped using subsonic or removed my server's details from his list.

In my case I did not have to guess what the problem was... I watched the traffic come in, watched it change to different IP's (after I tried to block the first one) and watched it consistently fail. I tracked the IP address back to the phone's data service provider and even tried to get them to shut the guys phone off, to no avail.

It's the nature of the internet. Every problem is not solvable... as I pointed out, this "problem" has multiple possible solutions, none of which are any good. It's a fact of life that, if you expose a service to the "firm white underbelly of the internet" (rotten.com) someone will try to exploit it.

Case and point: map the RDP (remote desktop protocol) port of 3389 through your firewall and into your PC. This gives you the incredible added benefit of being able to remote control your home PC from outside your network. Now turn on logon failure auditing and go to bed.

In the morning, most likely, you will see a huge list of failed logins in the log for the "administrator" "Guest" and other common usernames. That is because you showed up on some script kiddie's port scan as "open to RDP," and there is some program probing to see if you were dumb enough to also leave the password extra simple.

But does that mean that there is something "wrong" with remote desktop? No. How do you make the messages go away? Stop sharing the remote desktop port. But then you lose the abilities that RDP gives you...

Catch 22... open a service and someone will try to exploit it. To stop the exploitation attempts, close the service. Rinse/repeat.

NB: I'm trying to be educational in a funny, tongue-in-cheek sort of way. Please don't take any offense, as none is intended.

But what you are asking for is, quite literally, impossible.

Glenn
Glenn Sullivan
Subsonic 6.1.6 (Unraid Docker)
90 regular Subsonic Users

Library as of 2024-10-28:
4,527 artists
19,996 albums
282,151 songs
10201.40 GB
41,583 hours
User avatar
bushman4
 
Posts: 874
Joined: Thu Dec 02, 2010 1:47 pm
Location: Massachusetts, USA

Re: Strange log !!!

Postby BrianDelShasta » Sat Jul 21, 2012 6:09 pm

muvipix,
If you're willing to switch to to a different tcp port your problem will cease. Make sure you keep the ron.subsonic.org address disabled to, I think that auto-redirects to whatever port you're running on.
BrianDelShasta
 
Posts: 116
Joined: Tue Jun 03, 2008 4:45 am
Location: USA

Previous

Return to Help

Who is online

Users browsing this forum: No registered users and 33 guests