Server crash by flood attack.
#1

There was a flood attack going on for 7 minutes.

Small piece of the server log:
Code:
[08:03:16] Incoming connection: 61.158.160.212:2901
[08:03:17] Incoming connection: 61.158.160.212:5304
[08:03:17] Incoming connection: 61.158.160.212:2903
[08:03:17] Incoming connection: 218.29.89.227:18735
[08:03:18] [join] [BoT]s0nicTz_354 has joined the server (20:61.158.160.212)
[08:03:18] Incoming connection: 218.29.89.227:18736
[08:03:18] [join] [BoT]s0nicTz_2046 has joined the server (21:61.158.160.212)
[08:03:18] [part] [BoT]s0nicTz_2046 has left the server (21:2)
[08:03:18] [join] [BoT]s0nicTz_6045 has joined the server (22:61.158.160.212)
[08:03:18] [part] [BoT]s0nicTz_6045 has left the server (22:2)
[08:03:19] [join] [BoT]s0nicTz_20231 has joined the server (23:218.29.89.227)
[08:03:19] [join] [BoT]s0nicTz_38910 has joined the server (24:218.29.89.227)
[08:03:19] [part] [BoT]s0nicTz_38910 has left the server (24:2)
The full log from start untill the crash: http://pastebin.com/Qeeh6ihU

After 7 minutes the SA-MP server crashed. I have crashdetect installed - nothing was printed.
I also have an limitation under OnPlayerConnect which prevents max connections from an IP to 2.

My question is now how why the SA-MP server crashes and how to effectively block such floods.

Another question: Lets say we ban the attacker's IPs via rcon while there is an attack going on, would this stop it?
Reply
#2

I have been attacked with flood, but i have solved the problem.
Just add those ips in the ban file or find a way to stop them to enter on the server
Reply
#3

Try Floodcontrol by Ryder
https://sampforum.blast.hk/showthread.php?tid=320649
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)