DDOS attack? - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: DDOS attack? (/showthread.php?tid=245055)

---

DDOS attack? - Raz0r1000 - 29.03.2011

Is this the beginning of a possible DDOS/BOT attack?? I am testing this on my home server, and these mysterious lines appear in the Black console window. (Not the first time this happened either)

My LOG:

SA-MP Dedicated Server
----------------------
v0.3c R2, ©2005-2011 SA-MP Team

[21:15:57] filterscripts = "" (string)
[21:15:57]
[21:15:57] Server Plugins
[21:15:57] --------------
[21:15:57] Loading plugin: streamer
[21:15:57]

*** Streamer Plugin v2.5.2 by Incognito loaded ***

[21:15:57] Loaded.
[21:15:57] Loading plugin: sscanf
[21:15:57]

[21:15:57] ===============================

[21:15:57] sscanf plugin loaded.

[21:15:57] © 2009 Alex "******" Cole

[21:15:57] ===============================

[21:15:57] Loaded.
[21:15:57] Loaded 2 plugins.

[21:15:57]
[21:15:57] Filter Scripts
[21:15:57] ---------------
[21:15:57] Loaded 0 filter scripts.

[21:15:57] ____|||||-------------------------|||||____
[21:15:57] Weed_'s Lsrcnr - EDIT BY ( Raz0r1000 )
[21:15:57] LS-RCR - Los Santos Roleplay/Cops/Robbers
[21:15:57] ____|||||-------------------------|||||____
[21:15:57] Number of vehicle models: 106
[06:31:12] Incoming connection: 5.111.51.112:59988
[06:31:12] [join] Raz0r1000 has joined the server (0:5.111.51.112)
[06:31:13] Raz0r1000(0) Has Joined Los Santos Cops 'n Robbers v1.0
[15:41:57] Incoming connection: 89.109.106.49:3574
[15:42:03] Incoming connection: 89.109.106.49:3569
[15:42:09] Incoming connection: 89.109.106.49:3567
[15:42:15] Incoming connection: 89.109.106.49:3579
[15:42:21] Incoming connection: 89.109.106.49:3571
[15:42:27] Incoming connection: 89.109.106.49:3578
[16:11:23] Incoming connection: 78.29.178.59:56705
[16:11:29] Incoming connection: 78.29.178.59:56706
[16:11:35] Incoming connection: 78.29.178.59:56707
[16:11:41] Incoming connection: 78.29.178.59:56708
[16:13:13] [chat] [Raz0r1000]: lol
[16:13:25] [chat] [Raz0r1000]: lolz

---

Re: DDOS attack? - Mike Garber - 29.03.2011

Probably people loosing connection, if it doesn't continue.

---

Re: DDOS attack? - SchurmanCQC - 29.03.2011

I dont see any reason to be deleting my 100th post mods...


I said: You could try blocking/banning those IPs if you think they're the ones giving you trouble.

---

Re: DDOS attack? - Mauzen - 29.03.2011

5 connections in 30 seconds? This is no DDOS for sure, as this would be far beyond 5000 connections in 3 seconds.

Well, both ips are connecting frequently every 6 seconds, this could be the automatic reconnect right after you joined the server and have an invalid version for example.

The most hacking attempts are using a lot more connections as I said, so I dont think this is dangerous.

---

Re: DDOS attack? - Raz0r1000 - 29.03.2011

Okay guys, thanks for the info.

---