Strange attack
#1

During the last two days I see strange attacks on two 0.3d-R2-800p servers. Some of players are just being "dropped" out of server, log doesnt save anything special when they get dropped, except "has left the server". After that all of dropped ones are trying to get back on the server.

In server log:
[16:58:11] Incoming connection: 85.238.122.188:1938
[16:58:13] Incoming connection: 178.94.141.63:4094
[16:58:23] Incoming connection: 82.58.20.253:3481
[16:58:24] Incoming connection: 46.203.22.239:1055
[16:58:31] Incoming connection: 89.23.105.83:2151
[16:58:32] Incoming connection: 95.133.166.70:4252
[16:58:35] Incoming connection: 2.92.113.62:49429
[16:58:46] Incoming connection: 81.163.184.63:2636
[16:58:50] Incoming connection: 178.137.98.193:2498
[16:58:53] Incoming connection: 87.228.17.138:1872
[16:58:55] Incoming connection: 91.124.28.49:59799
[16:58:55] Incoming connection: 188.124.233.173:3223
[16:58:56] Incoming connection: 85.26.241.4:34134
[16:59:02] Incoming connection: 188.230.107.226:57094
[16:59:03] Incoming connection: 85.26.241.4:44592
[16:59:03] Incoming connection: 46.203.22.239:1056
[16:59:04] Incoming connection: 92.127.112.144:2263
[16:59:05] Incoming connection: 178.94.141.63:4101
[16:59:06] Incoming connection: 109.252.170.193:14669
[16:59:09] Incoming connection: 87.117.190.72:4652
[16:59:10] Incoming connection: 62.84.112.189:51146
[16:59:11] Incoming connection: 94.242.150.107:24917
[16:59:11] Incoming connection: 109.174.112.58:7823
[16:59:12] Incoming connection: 212.164.26.72:1602
but it's real players, not bots...

All this time I've been checking all connections, package stats, been checking if something goes wrong in traffic on both servers. But havent find anything. Whatever it could be, it looks more like SAMP or mod's exploit which makes server getting laggy and dropps half of players.

CPU usage is okay during these drops, RAM usage is average either. Anybody could help what could it be, how to find what makes this problem out? Some kind of debug mods for SAMP are existing for example?
Reply
#2

This is not a attack, this is the people who have a bad network connection, or your server is not accepting connections.
Reply
#3

On the server uplink 1Gbps. I doubt that a player with a bad connection could throw another 200 players.
Reply
#4

and how to test it?
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)