SA-MP Forums

Go Back   SA-MP Forums > SA-MP Scripting and Plugins > Scripting Help

Reply
 
Thread Tools Display Modes
Old 01/09/2018, 09:10 AM   #1
3417512908
Big Clucker
 
3417512908's Avatar
 
Join Date: Feb 2018
Location: China
Posts: 123
Reputation: 14
Default it's server attack?

i found something from my server_log.txt:
Code:
[12:41:14] [connection] incoming connection: 123.249.81.206:54807 id: 13
[12:41:16] [connection] incoming connection: 123.249.81.206:54808 id: 13
[12:41:18] [connection] incoming connection: 123.249.81.206:54809 id: 13
[12:41:32] [connection] incoming connection: 123.249.81.206:54810 id: 13
[12:41:35] [connection] incoming connection: 123.249.81.206:54811 id: 13
[12:41:37] [connection] incoming connection: 123.249.81.206:54812 id: 13
[12:41:44] [connection] incoming connection: 123.249.81.206:54813 id: 13
[12:41:47] [connection] incoming connection: 123.249.81.206:54814 id: 13
[12:41:48] [connection] incoming connection: 123.249.81.206:54815 id: 13
[12:41:51] [connection] incoming connection: 123.249.81.206:54816 id: 13
[12:41:54] [connection] incoming connection: 123.249.81.206:54817 id: 13
[12:42:08] [connection] incoming connection: 123.249.81.206:54818 id: 13
[12:42:12] [connection] incoming connection: 123.249.81.206:54819 id: 13
[12:42:19] [connection] incoming connection: 123.249.81.206:54820 id: 13
[12:42:23] [connection] incoming connection: 123.249.81.206:54821 id: 13
[12:42:25] [connection] incoming connection: 123.249.81.206:54822 id: 13
[12:42:29] [connection] incoming connection: 123.249.81.206:54823 id: 13
[12:42:42] [connection] incoming connection: 123.249.81.206:54824 id: 13
[12:42:43] [connection] incoming connection: 123.249.81.206:54825 id: 13
[12:42:52] [connection] incoming connection: 123.249.81.206:54826 id: 13
[12:43:04] [connection] incoming connection: 123.249.81.206:54827 id: 13
[12:43:07] [connection] incoming connection: 123.249.81.206:54828 id: 13
[12:43:23] [connection] incoming connection: 123.249.81.206:54829 id: 13
[12:43:26] [connection] incoming connection: 123.249.81.206:54830 id: 13
[12:43:31] [connection] incoming connection: 123.249.81.206:54831 id: 13
[12:43:34] [connection] incoming connection: 123.249.81.206:54832 id: 13
[12:43:48] [connection] incoming connection: 123.249.81.206:54833 id: 13
[12:44:03] [connection] incoming connection: 123.249.81.206:54834 id: 13
[12:44:22] [connection] incoming connection: 123.249.81.206:54835 id: 13
[12:44:25] [connection] incoming connection: 123.249.81.206:54836 id: 13
[12:44:28] [connection] incoming connection: 123.249.81.206:54837 id: 13
[12:44:29] [connection] incoming connection: 123.249.81.206:54838 id: 13
[12:44:41] [connection] incoming connection: 123.249.81.206:54839 id: 13
[12:44:45] [connection] incoming connection: 123.249.81.206:54840 id: 13
[12:44:54] [connection] incoming connection: 123.249.81.206:54841 id: 13
[12:44:59] [connection] incoming connection: 123.249.81.206:54842 id: 13
[12:45:03] [connection] incoming connection: 123.249.81.206:54843 id: 13
[12:45:08] [connection] incoming connection: 123.249.81.206:54844 id: 13
[12:45:08] [connection] incoming connection: 123.249.81.206:54845 id: 13
[12:45:11] [connection] incoming connection: 123.249.81.206:54846 id: 13
[12:45:17] [connection] incoming connection: 123.249.81.206:54847 id: 13
[12:45:22] [connection] incoming connection: 123.249.81.206:54848 id: 13
[12:45:27] [connection] incoming connection: 123.249.81.206:54849 id: 13
[12:45:33] [connection] incoming connection: 123.249.81.206:54850 id: 13
[12:45:42] [connection] incoming connection: 123.249.81.206:54851 id: 13
[12:45:45] [connection] incoming connection: 123.249.81.206:54852 id: 13
[12:45:48] [connection] incoming connection: 123.249.81.206:54853 id: 13
look like someone attack my server...which way he used?
3417512908 is offline   Reply With Quote
Old 01/09/2018, 09:22 AM   #2
3417512908
Big Clucker
 
3417512908's Avatar
 
Join Date: Feb 2018
Location: China
Posts: 123
Reputation: 14
Default Re: it's server attack?

anyone here?
3417512908 is offline   Reply With Quote
Old 01/09/2018, 09:30 AM   #3
Hunud
Huge Clucker
 
Hunud's Avatar
 
Join Date: Jun 2016
Location: Right here.
Posts: 486
Reputation: 57
Default Re: it's server attack?

Yes, It's attack on your server.

The best way to prevent this is a protection against bots or limit IP per connection and range ban his IP.
Hunud is offline   Reply With Quote
Old 01/09/2018, 11:26 AM   #4
MAOREM
Little Clucker
 
MAOREM's Avatar
 
Join Date: Jul 2018
Location: Italy
Posts: 6
Reputation: 0
Default Re: it's server attack?

Quote:
Originally Posted by Hunud View Post
Yes, It's attack on your server.

The best way to prevent this is a protection against bots or limit IP per connection and range ban his IP.
It's not an attack and there is no need to limit IPs in this case.

The IP who is trying to connect is still the same. It looks like it is a bot attack because the IP re-connects every 3/4 seconds.

Maybe the client has not a good connection to connect, so it repeats the connection many times.

Attacks or DDOS attacks are showed with: "[warning] dropping a split packet from client"
MAOREM is offline   Reply With Quote
Old 01/09/2018, 11:32 AM   #5
3417512908
Big Clucker
 
3417512908's Avatar
 
Join Date: Feb 2018
Location: China
Posts: 123
Reputation: 14
Default Re: it's server attack?

thank for your reply
3417512908 is offline   Reply With Quote
Old 01/09/2018, 11:33 AM   #6
Lokii
Huge Clucker
 
Join Date: Sep 2017
Posts: 375
Reputation: 92
Default Re: it's server attack?

Just limit ip connections

PHP Code:
public OnPlayerConnect(playerid)
{
    new 
ip[16], ip2[16], count 0;
    if(
IsPlayerNPC(playerid)) return 1;
    
GetPlayerIp(playeridipsizeof(ip));
    for(new 
0GetPlayerPoolSize(); <= ji++)
    {
        if(!
IsPlayerConnected(i) || IsPlayerNPC(i)) continue;
        
GetPlayerIp(iip2sizeof(ip2));
        if(!
strcmp(ipip2))
        {
            
count ++;
            if(
count 3)
            {
                
Kick(playerid);
                
count --;
            }
        }
    }
    return 
1;

__________________
Lokii is offline   Reply With Quote
Old 01/09/2018, 01:06 PM   #7
alanhutch
Huge Clucker
 
alanhutch's Avatar
 
Join Date: Nov 2010
Location: Florence, Italy. Reputation: 9999
Posts: 363
Reputation: 8
Default Re: it's server attack?

Just limit the gap between two connections in server.cfg with minconnectiontime
alanhutch is offline   Reply With Quote
Old 01/09/2018, 02:27 PM   #8
RogueDrifter
High-roller
 
RogueDrifter's Avatar
 
Join Date: Dec 2017
Location: SA-MP Drifting world.
Posts: 1,193
Reputation: 420
Default Re: it's server attack?

Quote:
Originally Posted by MAOREM View Post
Attacks or DDOS attacks are showed with: "[warning] dropping a split packet from client"
Tf no it doesn't?

And i recommend following what @alanhutch said, it's the easiest way, you also got a callback that records these incoming connections Here

It could also be lag on that client's side, this shouldn't even affect your server in any way regardless.
__________________
Quote:
Originally Posted by Andy
My anti cheat is still relevant *puts shades on* https://github.com/RogueDrifter/Anti_cheat_pack

[Github]:Link [Gists]:Link [Forum]:Link [Server]:Link [Discord]:Link

RogueDrifter is offline   Reply With Quote
Old 06/09/2018, 03:29 PM   #9
sonn51280
Big Clucker
 
sonn51280's Avatar
 
Join Date: Jun 2017
Location: Vietnamese
Posts: 72
Reputation: 0
Default Re: it's server attack?

Raknet Bot member not attack/ddos
sonn51280 is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
HELP - Attack on my server! SukMathcuck Scripting Help 2 06/10/2015 07:54 PM
Server Attack HydraHumza Server Support 6 19/02/2015 04:07 AM
DoS attack to server Parlianment Русский/Russian 16 06/12/2014 11:20 AM
attack my server MasterDnx Scripting Help 2 25/07/2014 02:24 PM
[HELP] My Server did another Attack chenza Server Support 2 05/03/2009 03:13 PM


All times are GMT. The time now is 04:57 PM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.