Page 1 of 1

Refused connection with hostname.....

Posted: August 5th, 2020, 10:48 am
by SeparateFiction
I am continually seeing WARNING messages on my Sab account such as below (can't work out how to attach a picture).

This does not seem legit at all - any ideas what is going on?

This is happening during idle. When I do download something then it connects and maxes out no issues there.



Refused connection with hostname "ww. wujieliulan. com" from 27.211.180.120>Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit /537.36 (KHTML, like Gecko) Chrome /45.0.2454.101 Safari/537.36

Refused connection with hostname "ww. epochtimes. com" from 112.80.137.164>Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit /537.36 (KHTML, like Gecko) Chrome /45.0.2454.101 Safari/537.36

Refused connection with hostname "ww. minghui. org" from 123.160.235.178>Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit /537.36 (KHTML, like Gecko) Chrome /45.0.2454.101 Safari/537.36

Refused connection with hostname "ww. 123cha. com" from 150.255.11.43>Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit /537.36 (KHTML, like Gecko) Chrome /45.0.2454.101 Safari/537.36

Re: Refused connection with hostname.....

Posted: August 5th, 2020, 11:01 am
by sander
This means:
* your SABnzbd is reachable from Internet, probably with no password set. NB: Even I can access your sab web interface! :o
* scanners / robots are approaching that SABnzbd interface

Things you should do: set a password on SABnzbd!
Things you could additionally do: put SABnzbd on a less known port: not 8080, but ... 8765, or 8642

Re: Refused connection with hostname.....

Posted: August 5th, 2020, 11:09 am
by SeparateFiction
Thanks for coming back to me - I will most certainly add a password !!

Looks like these scanners / robots from random websites are attempting to connect. What are they trying to achieve exactly?