Is someone trying to hack my Shoutcast server?

LiquidLounge · 26th November 2018, 09:46

This line has appeared several times in my log today:

[SRC 46.161.27.8:2295 sid=1] SHOUTcast 1 source connection denied for user ( /*à Cookie). Bad password: mstshash=Administr

Each time the port is different.

Thx

aeh

KoralCurt · 18th September 2022, 00:55

Of course, it's suspicious activity, especially if it has appeared on your home screen multiple times. However, I'm not sure if someone is trying to hack your device or any of your accounts or if it's just an attempt to send and spread many viruses.

Paul Webster · 18th September 2022, 09:51

This is probably someone running an exploit kit to see what they can find.
Probably you are a random target.

this particular exploit is not against Shoutcast servers and, apart from logging, is not going to cause a problem for your Shoutcast.

If you run RDP and have it exposed to Internet then it could be a problem.

I suggest you treat it as a reminder to check what can be reached from Internet and things like default password, patches etc.

See also
https://github.com/olipo186/Git-Auto-Deploy/issues/221

NJK · 18th September 2022, 11:26

could also be a netcrawler , but in any case don't worry about it if your computer is protected by a firewall.
Seen this years ago already in my stats when i was still streaming.

KoralCurt · 19th September 2022, 15:56

However, I'm not sure if someone is trying to hack your device or any of your accounts or if it's just an attempt to send and spread many viruses.

[Link removed , points towards a forum about hacking with guides on how to
~NJK]

26th November 2018, 09:46	#1
LiquidLounge Junior Member Join Date: Sep 2015 Posts: 4	Is someone trying to hack my Shoutcast server? This line has appeared several times in my log today: [SRC 46.161.27.8:2295 sid=1] SHOUTcast 1 source connection denied for user ( /*à Cookie). Bad password: mstshash=Administr Each time the port is different. Thx aeh

18th September 2022, 11:26	#4
NJK FRISIAN Join Date: Sep 2003 Location: in a house Posts: 16,463	could also be a netcrawler , but in any case don't worry about it if your computer is protected by a firewall. Seen this years ago already in my stats when i was still streaming. latest version of Winamp DSP Plug V2.41 Language Packs

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

18th September 2022, 00:55	#2
KoralCurt Junior Member Join Date: Sep 2022 Posts: 2	Of course, it's suspicious activity, especially if it has appeared on your home screen multiple times. However, I'm not sure if someone is trying to hack your device or any of your accounts or if it's just an attempt to send and spread many viruses.

18th September 2022, 09:51	#3
Paul Webster Junior Member Join Date: Nov 2010 Posts: 8	This is probably someone running an exploit kit to see what they can find. Probably you are a random target. this particular exploit is not against Shoutcast servers and, apart from logging, is not going to cause a problem for your Shoutcast. If you run RDP and have it exposed to Internet then it could be a problem. I suggest you treat it as a reminder to check what can be reached from Internet and things like default password, patches etc. See also https://github.com/olipo186/Git-Auto-Deploy/issues/221

19th September 2022, 15:56	#5
KoralCurt Junior Member Join Date: Sep 2022 Posts: 2	However, I'm not sure if someone is trying to hack your device or any of your accounts or if it's just an attempt to send and spread many viruses. [Link removed , points towards a forum about hacking with guides on how to ~NJK]