Server sendo atacado -
ViniBnT - 24.09.2017
Galera o que estб rolando й o seguinte, uma pessoa ameaзou a derrubar meu servidor e logo depois disso o server comeзou a cair toda hora.
Tenho uma host da Heavy, que nгo й das melhores. Tem alguma coisa dentro do meu alcance que eu posso fazer, ou isso й sу com a Host?
PHP код:
----------
Loaded log file: "server_log.txt".
----------
SA-MP Dedicated Server
----------------------
v0.3.7-R2, (C)2005-2015 SA-MP Team
[20:32:20] password = "" (string)
[20:32:20]
[20:32:20] Server Plugins
[20:32:20] --------------
[20:32:20] Loading plugin: crashdetect.so
[20:32:20] CrashDetect v4.18.1 is OK.
[20:32:20] Loaded.
[20:32:20] Loading plugin: streamer.so
[20:32:20]
*** Streamer Plugin v2.9.1 by Incognito loaded ***
[20:32:20] Loaded.
[20:32:20] Loaded 2 plugins.
[20:32:20]
[20:32:20] Ban list
[20:32:20] --------
[20:32:20] Loaded: samp.ban
[20:32:20]
[20:32:20]
[20:32:20] Filterscripts
[20:32:20] ---------------
[20:32:20] Loading filterscript 'anti-cheat.amx'...
[20:32:20]
[20:32:20] [DOF] Current file: AntiCheat.cfg
[20:32:20] Hostname=(null)
[20:32:20] Gametext=(null)
[20:32:20] Mapname=(null)
[20:32:20] Language=(null)
[20:32:20] FakeKill=3
[20:32:20] CommandCheck=false
[20:32:20] CallbackFlood=true
[20:32:20] AC_VERSION=11
[20:32:20] * 1 sections, 8 entries
[20:32:20]
[20:32:20] > www.heavyhost.com.br <
[20:32:20] _______________
[20:32:20] |\ Anti-Cheat /| Desenvolvido para os clientes HeavyHost
[20:32:20] | \ Basico / | ## ## ###### ### ## ## ## ##
[20:32:20] | \ SAMP / | ## ## ## ## ## ## ## ## ##
[20:32:20] | \ v1.1 / | ####### #### ####### ## ## ###
[20:32:20] | \ / | ## ## ## ## ## ## ## ###
[20:32:20] | \ / | ## ## ###### ## ## # ###
[20:32:20] |______\/______| �2015-2017 Fernando Miranda
[20:32:20] > <
[20:32:20] Loading filterscript 'familia.amx'...
[20:32:20] Loaded 2 filterscripts.
[20:32:20]
---------------------------------------------------------
[20:32:20] Server Ligado: [24/09/2017 20:32:20]
[20:32:20] ---------------------------------------------------------
[20:32:20] -----------------------------
[20:32:20] GM by : Vini_BnT
[20:32:20] -----------------------------
[20:32:20] [BNT]: 31 Orgs Carregadas
[20:32:21] [BNT]: 407 Casas Carregadas
[20:32:21] [BNT]: 12 Empresas Carregadas
[20:32:21] [BNT]: 24 Empresas Especiais Carregadas
[20:32:21] [BNT]: 130 Carros Carregados
[20:32:21] [BNT]: Informa��es das organiza��es foram carregadas.
[20:32:25]
[20:32:25]
[20:32:25] - = Brasil New Time - BNT ! = -
[20:32:25] ________________
[20:32:25] BNT - RPG
[20:32:25]
[20:32:25] Number of vehicle models: 100
[20:33:26] [connection] 181.191.108.174:26556 requests connection cookie.
[20:33:27] [connection] incoming connection: 181.191.108.174:26556 id: 0
[20:33:28] [join] XXX_TENTACION has joined the server (0:181.191.108.174)
[20:33:37] XXX_TENTACION Entrou no Servidor
[20:33:37] XXX_TENTACION has logged in.
[20:35:00] [connection] 189.114.98.199:54870 requests connection cookie.
[20:35:01] [connection] 189.114.98.199:54870 requests connection cookie.
[20:35:02] [connection] incoming connection: 189.114.98.199:54870 id: 1
[20:35:04] [join] luis_thief has joined the server (1:189.114.98.199)
[20:35:24] luis_thief Entrou no Servidor
[20:35:24] luis_thief has logged in.
[20:35:52] [connection] 177.72.147.94:29284 requests connection cookie.
[20:35:53] [connection] incoming connection: 177.72.147.94:29284 id: 2
[20:35:54] [join] lukinhasgtr has joined the server (2:177.72.147.94)
[20:36:11] lukinhasgtr Entrou no Servidor
[20:36:11] lukinhasgtr has logged in.
[20:36:54] [connection] 181.93.223.116:55872 requests connection cookie.
[20:36:55] [connection] incoming connection: 181.93.223.116:55872 id: 3
[20:36:56] [join] smily_123 has joined the server (3:181.93.223.116)
[20:37:09] smily_123 Entrou no Servidor
[20:37:09] smily_123 has logged in.
[20:37:15] [connection] 177.204.229.82:62616 requests connection cookie.
[20:37:16] [connection] 177.204.229.82:62616 requests connection cookie.
[20:37:17] [connection] incoming connection: 177.204.229.82:62616 id: 4
[20:37:18] [join] Copyright has joined the server (4:177.204.229.82)
[20:37:19] [connection] 187.94.206.242:56542 requests connection cookie.
[20:37:20] [connection] 187.94.206.242:56542 requests connection cookie.
[20:37:21] [connection] incoming connection: 187.94.206.242:56542 id: 5
[20:37:22] [join] MBappe_xD has joined the server (5:187.94.206.242)
[20:37:42] [part] MBappe_xD has left the server (5:1)
[20:37:43] Copyright Entrou no Servidor
[20:37:43] Copyright has logged in.
[20:38:16] [part] Copyright has left the server (4:1)
[20:39:17] [connection] 189.105.45.153:58514 requests connection cookie.
[20:39:27] [connection] 179.95.74.204:51301 requests connection cookie.
[20:39:28] [connection] 179.95.74.204:51301 requests connection cookie.
[20:39:48] Kicking 189.105.45.153 because they didn't logon to the game.
[20:39:59] Kicking 179.95.74.204 because they didn't logon to the game.
[20:40:08] [connection] 170.80.52.6:63536 requests connection cookie.
[20:40:09] [connection] 170.80.52.6:63536 requests connection cookie.
[20:40:40] Kicking 170.80.52.6 because they didn't logon to the game.
[20:40:47] [connection] 179.95.74.204:60904 requests connection cookie.
[20:41:01] [connection] 189.105.45.153:53240 requests connection cookie.
[20:41:06] [connection] 181.191.108.174:26589 requests connection cookie.
[20:41:14] [connection] 177.72.147.94:29386 requests connection cookie.
[20:41:18] Kicking 179.95.74.204 because they didn't logon to the game.
[20:41:32] [connection] 191.205.225.188:64873 requests connection cookie.
[20:41:32] Kicking 189.105.45.153 because they didn't logon to the game.
[20:41:33] [connection] 191.205.225.188:64873 requests connection cookie.
[20:41:34] [connection] 177.204.229.82:59764 requests connection cookie.
[20:41:37] Kicking 181.191.108.174 because they didn't logon to the game.
[20:41:46] Kicking 177.72.147.94 because they didn't logon to the game.
----------
Loaded log file: "server_log.txt".
----------
SA-MP Dedicated Server
----------------------
v0.3.7-R2, ©2005-2015 SA-MP Team
[20:42:03] password = "" (string)
[20:42:03]
[20:42:03] Server Plugins
[20:42:03] --------------
[20:42:03] Loading plugin: crashdetect.so
[20:42:03] CrashDetect v4.18.1 is OK.
[20:42:03] Loaded.
[20:42:03] Loading plugin: streamer.so
[20:42:03]
*** Streamer Plugin v2.9.1 by Incognito loaded ***
[20:42:03] Loaded.
[20:42:03] Loaded 2 plugins.
[20:42:03]
[20:42:03] Ban list
[20:42:03] --------
[20:42:03] Loaded: samp.ban
[20:42:03]
[20:42:03]
[20:42:03] Filterscripts
[20:42:03] ---------------
[20:42:03] Loading filterscript 'anti-cheat.amx'...
[20:42:03]
[20:42:03] [DOF] Current file: AntiCheat.cfg
[20:42:03] Hostname=(null)
[20:42:03] Gametext=(null)
[20:42:03] Mapname=(null)
[20:42:03] Language=(null)
[20:42:03] FakeKill=3
[20:42:03] CommandCheck=false
[20:42:03] CallbackFlood=true
[20:42:03] AC_VERSION=11
[20:42:03] * 1 sections, 8 entries
[20:42:03]
[20:42:03] > www.heavyhost.com.br <
[20:42:03] _______________
[20:42:03] |\ Anti-Cheat /| Desenvolvido para os clientes HeavyHost
[20:42:03] | \ Basico / | ## ## ###### ### ## ## ## ##
[20:42:03] | \ SAMP / | ## ## ## ## ## ## ## ## ##
[20:42:03] | \ v1.1 / | ####### #### ####### ## ## ###
[20:42:03] | \ / | ## ## ## ## ## ## ## ###
[20:42:03] | \ / | ## ## ###### ## ## # ###
[20:42:03] |______\/______| �2015-2017 Fernando Miranda
[20:42:03] > <
[20:42:03] Loading filterscript 'familia.amx'...
[20:42:03] Loaded 2 filterscripts.
[20:42:03]
---------------------------------------------------------
[20:42:03] Server Ligado: [24/09/2017 20:42:03]
[20:42:03] ---------------------------------------------------------
[20:42:03] -----------------------------
[20:42:03] GM by : Vini_BnT
[20:42:03] -----------------------------
[20:42:03] [BNT]: 31 Orgs Carregadas
[20:42:03] [BNT]: 407 Casas Carregadas
[20:42:03] [BNT]: 12 Empresas Carregadas
[20:42:03] [BNT]: 24 Empresas Especiais Carregadas
[20:42:03] [BNT]: 130 Carros Carregados
[20:42:03] [BNT]: Informa��es das organiza��es foram carregadas.
[20:42:07]
[20:42:07]
[20:42:07] - = Brasil New Time - BNT ! = -
[20:42:07] ________________
[20:42:07] BNT - RPG
[20:42:07]
[20:42:07] Number of vehicle models: 100
[20:42:21] [connection] 191.205.225.188:64874 requests connection cookie.
[20:42:22] [connection] incoming connection: 191.205.225.188:64874 id: 0
[20:42:23] [join] Kadu_Nascimento has joined the server (0:191.205.225.188)
[20:42:37] Kadu_Nascimento Entrou no Servidor
[20:42:37] Kadu_Nascimento has logged in.
[20:42:51] [chat] [Kadu_Nascimento]: so e
[20:43:55] [connection] 189.105.45.153:54648 requests connection cookie.
[20:43:56] [connection] incoming connection: 189.105.45.153:54648 id: 1
[20:43:56] [join] Loser_007 has joined the server (1:189.105.45.153)
[20:44:04] [connection] 181.191.108.174:26666 requests connection cookie.
[20:44:05] [connection] incoming connection: 181.191.108.174:26666 id: 2
[20:44:06] [join] XXX_TENTACION has joined the server (2:181.191.108.174)
[20:44:08] Loser_007 Entrou no Servidor
[20:44:08] Loser_007 has logged in.
[20:44:14] XXX_TENTACION Entrou no Servidor
[20:44:14] XXX_TENTACION has logged in.
[20:44:28] [chat] [Kadu_Nascimento]: laou
[20:44:35] [chat] [Loser_007]: aew manow vc e de qual org
Alguem pode me ajudar?
Re: Server sendo atacado -
C4rtm4n - 24.09.2017
Vocк tem alguma ideia de como essa pessoa esta fazendo isso.? verifica se nгo tem algum bug no seu servidor que ele descobriu e ta usando para derrubar.
Re: Server sendo atacado -
WLSF - 25.09.2017
Boa noite colega, tudo bem?
Eu dei uma breve olhada no log, e acho que vocк estб querendo dizer que o seu servidor estб sofrendo ataques DDoS, й isso mesmo?
Se for isso, existem algumas maneiras de vocк conseguir atrasar isso via cуdigo, ainda mais se for DoS simples, mas como no seu caso imagino que seja DDoS, talvez o mais recomendado seria trocar de host e ir para algo mais potente, imagino que essa possibilidade nгo seja cotбvel, mas acho que й oque vocк poderia fazer para melhorar o problema em questгo.
Re: Server sendo atacado -
ViniBnT - 25.09.2017
Eu postei aqui pra saber se o melhor a fazer й realmente trocar de Host ou se teria algo pra fazer no meu cуdigo pra evitar isso. Eu acho que nгo nenhum bug no servidor, pois pelo que eu vi, eles nem entram no servidor, o cara simplismente falou pra mim que ia derrubar o server atй eu trocar de host. Entгo a soluзгo realmente й trocar de Host, nгo a mais nada a fazer?
Re: Server sendo atacado -
connork - 25.09.2017
Este erro geralmente й causado por algum loop infinito no game-mode ou filter-scripts.
Re: Server sendo atacado -
ViniBnT - 25.09.2017
Vc quer dizer que nгo й um ataque e sim um erro? Mas й muito estranho, logo apуs as ameзas o servidor comeзar a cair sem parar.
Re: Server sendo atacado -
zCyan - 25.09.2017
Amigo, seu GM й base BPG certo? nгo tenho certeza, mais acho que esse GM tem um bug no /sms, quando vocк digita /sms, o servidor desliga. Tente Verificar
Re: Server sendo atacado -
C4rtm4n - 25.09.2017
Se o seu servidor for GF
https://sampforum.blast.hk/showthread.php?tid=641164
Re: Server sendo atacado -
RDM - 25.09.2017
Aparentemente й um ataque, estгo explorando alguma vulnerabilidade, pode ser de seu gm ou mais critica como uma vulnerabilidade do proprio samp, vocк tem acesso ao servidor vps ao qual seu servidor samp estб rodando ? se sim capture o trafego na porta usando do tcpdump se puder me passar em qual port seu servidor estб usando eu posso criar o comando para vocк fazer a captura !
Re: Server sendo atacado -
ViniBnT - 25.09.2017
Eles derrubaram pelo bug do SMS, mas eu consertei e mesmo depois disso eles derrubaram parece que de outra maneira! No meu servidor quando vc aperta F, executa 3 comandos, sгo comandos pra entrar nos locais e sair dos locais, ou seja se o player ficar apertando F, ele vai flodar esses 3 comandos, serб que isso pode fazer derrubar o server?