24.08.2017, 08:38
Hi,
My server is currently under attack by many IP addresses with 2-3 attempts before it changes to another IP address. There is no logical order in these addresses since they come from all over the world and are not being used often. The flood sends about 25,000 entries per 30 seconds.
Looks like this (will spare you the whole server log):
OVH does not seem to filter this attack so I'd have to do some manual settings. Would it be wise to limit port 7777, if yes, what limit? I personally don't feel it would help since these IPs change every 2-3 connections. High quantity but low speed?
Thank you in advance.
Best Regards,
Shifty
My server is currently under attack by many IP addresses with 2-3 attempts before it changes to another IP address. There is no logical order in these addresses since they come from all over the world and are not being used often. The flood sends about 25,000 entries per 30 seconds.
Looks like this (will spare you the whole server log):
Code:
[08:35:07] [connection] 180.53.10.43:5317 requests connection cookie. [08:35:07] [connection] 180.53.10.43:5317 requests connection cookie. [08:35:07] [connection] 180.109.142.86:28818 requests connection cookie. [08:35:07] [connection] 180.109.142.86:28818 requests connection cookie. [08:35:07] [connection] 180.109.142.86:28818 requests connection cookie. [08:35:07] [connection] 180.138.182.178:33497 requests connection cookie. [08:35:07] [connection] 180.138.182.178:33497 requests connection cookie. [08:35:07] [connection] 180.138.182.178:33497 requests connection cookie. [08:35:07] [connection] 201.202.58.249:64015 requests connection cookie. [08:35:07] [connection] 201.202.58.249:64015 requests connection cookie. [08:35:07] [connection] 201.202.58.249:64015 requests connection cookie. [08:35:07] [connection] 180.12.133.109:5634 requests connection cookie. [08:35:07] [connection] 180.12.133.109:5634 requests connection cookie. [08:35:07] [connection] 180.12.133.109:5634 requests connection cookie. [08:35:07] [connection] 180.210.149.1:3156 requests connection cookie. [08:35:07] [connection] 180.210.149.1:3156 requests connection cookie. [08:35:07] [connection] 180.210.149.1:3156 requests connection cookie. [08:35:07] [connection] 180.27.186.140:7803 requests connection cookie. [08:35:07] [connection] 180.27.186.140:7803 requests connection cookie. [08:35:07] [connection] 180.26.211.50:47748 requests connection cookie. [08:35:07] [connection] 180.26.211.50:47748 requests connection cookie. [08:35:07] [connection] 180.26.211.50:47748 requests connection cookie. [08:35:07] [connection] 186.225.37.101:42100 requests connection cookie. [08:35:07] [connection] 186.225.37.101:42100 requests connection cookie. [08:35:07] [connection] 181.48.28.244:49448 requests connection cookie. [08:35:07] [connection] 181.48.28.244:49448 requests connection cookie. [08:35:07] [connection] 181.48.28.244:49448 requests connection cookie. [08:35:07] [connection] 190.138.129.148:60795 requests connection cookie. [08:35:07] [connection] 190.138.129.148:60795 requests connection cookie. [08:35:07] [connection] 190.138.129.148:60795 requests connection cookie. [08:35:07] [connection] 180.171.132.173:16306 requests connection cookie. [08:35:07] [connection] 180.171.132.173:16306 requests connection cookie. [08:35:07] [connection] 180.171.132.173:16306 requests connection cookie. [08:35:07] [connection] 186.66.87.222:58254 requests connection cookie. [08:35:07] [connection] 186.66.87.222:58254 requests connection cookie. [08:35:07] [connection] 186.66.87.222:58254 requests connection cookie. [08:35:07] [connection] 181.59.192.168:23342 requests connection cookie. [08:35:07] [connection] 181.59.192.168:23342 requests connection cookie. [08:35:07] [connection] 181.59.192.168:23342 requests connection cookie. [08:35:07] [connection] 180.75.145.6:38294 requests connection cookie. [08:35:07] [connection] 180.75.145.6:38294 requests connection cookie. [08:35:07] [connection] 180.75.145.6:38294 requests connection cookie. [08:35:07] [connection] 186.132.114.186:45174 requests connection cookie. [08:35:07] [connection] 186.132.114.186:45174 requests connection cookie. [08:35:07] [connection] 186.132.114.186:45174 requests connection cookie. [08:35:07] [connection] 186.76.119.142:55739 requests connection cookie. [08:35:07] [connection] 186.76.119.142:55739 requests connection cookie. [08:35:07] [connection] 186.76.119.142:55739 requests connection cookie. [08:35:07] [connection] 200.206.23.190:27831 requests connection cookie. [08:35:07] [connection] 200.206.23.190:27831 requests connection cookie. [08:35:07] [connection] 190.103.103.216:37961 requests connection cookie. [08:35:07] [connection] 190.103.103.216:37961 requests connection cookie. [08:35:07] [connection] 190.103.103.216:37961 requests connection cookie. [08:35:07] [connection] 186.49.243.192:5296 requests connection cookie. [08:35:07] [connection] 186.49.243.192:5296 requests connection cookie. [08:35:07] [connection] 186.49.243.192:5296 requests connection cookie. [08:35:07] [connection] 190.134.120.250:18458 requests connection cookie. [08:35:07] [connection] 190.134.120.250:18458 requests connection cookie. [08:35:07] [connection] 190.134.120.250:18458 requests connection cookie. [08:35:07] [connection] 186.159.155.144:27958 requests connection cookie. [08:35:07] [connection] 186.159.155.144:27958 requests connection cookie. [08:35:07] [connection] 186.159.155.144:27958 requests connection cookie. [08:35:07] [connection] 180.65.90.173:20046 requests connection cookie. [08:35:07] [connection] 180.65.90.173:20046 requests connection cookie. [08:35:07] [connection] 180.65.90.173:20046 requests connection cookie. [08:35:07] [connection] 190.63.12.8:35390 requests connection cookie. [08:35:07] [connection] 190.63.12.8:35390 requests connection cookie. [08:35:07] [connection] 190.63.12.8:35390 requests connection cookie. [08:35:07] [connection] 180.203.42.76:61745 requests connection cookie. [08:35:07] [connection] 180.203.42.76:61745 requests connection cookie. [08:35:07] [connection] 180.203.42.76:61745 requests connection cookie. [08:35:07] [connection] 180.85.28.142:26529 requests connection cookie. [08:35:07] [connection] 180.85.28.142:26529 requests connection cookie. [08:35:07] [connection] 180.85.28.142:26529 requests connection cookie. [08:35:07] [connection] 200.104.118.236:11252 requests connection cookie. [08:35:07] [connection] 200.104.118.236:11252 requests connection cookie. [08:35:07] [connection] 200.104.118.236:11252 requests connection cookie. [08:35:07] [connection] 180.21.203.170:48983 requests connection cookie. [08:35:07] [connection] 180.21.203.170:48983 requests connection cookie. [08:35:07] [connection] 180.21.203.170:48983 requests connection cookie. [08:35:07] [connection] 181.44.79.53:14838 requests connection cookie. [08:35:07] [connection] 181.44.79.53:14838 requests connection cookie. [08:35:07] [connection] 181.44.79.53:14838 requests connection cookie. [08:35:07] [connection] 190.115.28.191:42545 requests connection cookie. [08:35:07] [connection] 190.115.28.191:42545 requests connection cookie. [08:35:07] [connection] 190.115.28.191:42545 requests connection cookie. [08:35:07] [connection] 186.144.166.230:5864 requests connection cookie. [08:35:07] [connection] 186.144.166.230:5864 requests connection cookie. [08:35:07] [connection] 186.144.166.230:5864 requests connection cookie. [08:35:07] [connection] 186.69.253.48:7000 requests connection cookie. [08:35:07] [connection] 186.69.253.48:7000 requests connection cookie. [08:35:07] [connection] 186.69.253.48:7000 requests connection cookie. [08:35:07] [connection] 181.61.97.112:14418 requests connection cookie. [08:35:07] [connection] 181.61.97.112:14418 requests connection cookie. [08:35:07] [connection] 181.61.97.112:14418 requests connection cookie. [08:35:07] [connection] 180.3.113.50:25556 requests connection cookie. [08:35:07] [connection] 180.3.113.50:25556 requests connection cookie. [08:35:07] [connection] 180.3.113.50:25556 requests connection cookie. [08:35:07] [connection] 201.196.190.190:23359 requests connection cookie. [08:35:07] [connection] 180.54.99.90:39458 requests connection cookie. [08:35:07] [connection] 190.24.244.24:15908 requests connection cookie.
Thank you in advance.
Best Regards,
Shifty