SABnzbd Forums

I have two Usenet servers, and just noticed a third server has been added where the host name is an IP address. How could this have happened? Hopefully I was not hacked. The port is 9781.

Someone or something added it to SABnzbd. If your SABnzbd is reachable from Internet without password ... anybody can do that.

You can check your sabnzbd.log for a line like this:

2020-11-23 15:03:00,167::INFO::[config:857] Writing settings to INI file /home/sander/.sabnzbd/sabnzbd.ini

and grep for the specific IP address filled out so that you can see when it was filled out:

2020-11-23 15:05:33,585::INFO::[config:857] Writing settings to INI file /home/sander/.sabnzbd/sabnzbd.ini
2020-11-23 15:05:34,078::DEBUG::[newswrapper:46] Retrieving server address information for 144.44.44.44
2020-11-23 15:05:35,080::INFO::[downloader:515] 1@144.44.44.44: Initiating connection
2020-11-23 15:05:35,082::INFO::[downloader:515] 2@144.44.44.44: Initiating connection
2020-11-23 15:05:35,082::DEBUG::[downloader:123] 144.44.44.44: Re-using address 144.44.44.44
2020-11-23 15:05:35,083::INFO::[downloader:515] 3@144.44.44.44: Initiating connection

Thank you. I had deleted the server before seeing your message, so maybe that is why i cannot find it in the log? I checked previous logs though and did not find it there. However, I found another IP that is similar to what you posted and a port that begins with 9.
I don't mind sharing via PM but nue how much to share in post.