<p>If the server is allowing remote connections to the rpc port (usually 8332) and they have <code>rpcallowip</code> set so that your IP address is allowed (e.g. it's set to 0.0.0.0/0), then yes, you can connect to the server and transfer all of the Bitcoin from the server to an address.</p>

CC BY-SA 3.0
2017-07-23T13:57:50.750Z
Thank you!~  could you give some advice about secure wallet server?
jiejie
CC BY-SA 3.0
2017-07-23T17:51:54.627Z
Use a firewall to only allow connections to the rpcport and to your ssh port from specific IP addresses. Make sure that the only other ports that are open and accessible from outside are the ports for services you are actually providing. Then use `-rpcallowip` to allow only your IP address(es) to access the RPC server. This way you have two layers of protection against attempts to get into the RPC server. You should also secure your ssh by using only ssh key authentication. Don't use passwords.
Ava Chow
CC BY-SA 3.0
2017-07-22T16:16:42.767Z
2017-07-22T16:16:42.767Z
Ava Chow
<p>I don't know if this can be done.
Thanks!</p>

CC BY-SA 3.0
2017-07-22T15:26:04.993Z
`rpcallowip` should be used to only accept trusted outside connections, otherwise DoS and brute force vulnerabilities would be possible if only rpcuser and rpcpassword were required. Thankfully, the default is to only allow from localhost.
m1xolyd1an
<bitcoind><wallet-security>
If i have rpcuser and rpcpassword of a remote bitcoin server,can i transfer that server's bitcoin to other address?
jiejie
# If i have rpcuser and rpcpassword of a remote bitcoin server,can i transfer that server's bitcoin to other address?

(Asked by: username_0 on 2017-07-22)

I don't know if this can be done.
Thanks!

**Tags:** bitcoind, wallet-security

> **Comments:**
> **username_1**: `rpcallowip` should be used to only accept trusted outside connections, otherwise DoS and brute force vulnerabilities would be possible if only rpcuser and rpcpassword were required. Thankfully, the default is to only allow from localhost.  

---

## 1 answers

### Answer by username_2 on 2017-07-22. Score: 1 | Accepted answer

If the server is allowing remote connections to the rpc port (usually 8332) and they have `rpcallowip` set so that your IP address is allowed (e.g. it's set to 0.0.0.0/0), then yes, you can connect to the server and transfer all of the Bitcoin from the server to an address.

> **Comments:**
> **username_0**: Thank you!~  could you give some advice about secure wallet server?  
> **username_2**: Use a firewall to only allow connections to the rpcport and to your ssh port from specific IP addresses. Make sure that the only other ports that are open and accessible from outside are the ports for services you are actually providing. Then use `-rpcallowip` to allow only your IP address(es) to access the RPC server. This way you have two layers of protection against attempts to get into the RPC server. You should also secure your ssh by using only ssh key authentication. Don't use passwords.  

---

