Half-Life и Adrenaline Gamer форум
http://aghl.ru/forum/

DDoS Attack server ?
http://aghl.ru/forum/viewtopic.php?f=12&t=2629		 Страница 1 из 1
Автор:  abdobiskra [ 24 янв 2017, 22:28 ]
Заголовок сообщения:  DDoS Attack server ?
Hi
I think that the servers are exposed to attacks deprivation in abundance these days (bcz has lag & ping 500 up :( ) do not know who and how to protect servers
I am looking for the best way to protect it

btw i have 9 plugins in metamod :
▼ 
and start server :
Цитата:
ulimit -c unlimited && ./hlds_run -debug -game valve +log on +maxplayers 16 -autoupdate +map bootbox +port 27018 +pingboost 2
OS = CentOS
Автор:  Lev [ 24 янв 2017, 22:36 ]
Заголовок сообщения:  Re: doss attack server ?
Check stats and dp_secplrinfo.
Автор:  abdobiskra [ 24 янв 2017, 22:40 ]
Заголовок сообщения:  Re: DDoS Attack server ?
stats:
Код:
] stats
CPU   In    Out   Uptime  Users   FPS    Players
97.24  0.00  0.00     218     0   60.29       0
dp_secplrinfo.
▼ 

Now it works normally when I use these commands do you require when the problem occurred?
Автор:  Lev [ 24 янв 2017, 22:45 ]
Заголовок сообщения:  Re: DDoS Attack server ?
Also dp_ipsessions.

abdobiskra писал(а):
do you require when the problem occurred?
Sure, otherwise no much sense.
Автор:  abdobiskra [ 24 янв 2017, 22:53 ]
Заголовок сообщения:  Re: DDoS Attack server ?
dp_ipsessions.

▼ 

Lev писал(а):
Sure, otherwise no much sense.
Well, I can not now because the problem comes from time to time will enclose the results when they occur
Автор:  Lev [ 24 янв 2017, 23:02 ]
Заголовок сообщения:  Re: DDoS Attack server ?
Use code tag - it will properly format text.
abdobiskra писал(а):
97.24
It is a lot of CPU usage, but doesn't looks like there is a lot of players.
Автор:  abdobiskra [ 24 янв 2017, 23:08 ]
Заголовок сообщения:  Re: DDoS Attack server ?
Now!:
stats:
Код:
CPU   In    Out   Uptime  Users   FPS    Players
100.62  0.00  0.00       1     0   68.00       0

dp_secplrinfo.

▼ 

dp_ipsessions.

Код:
System Flood Level: 1.0000
Connectionless IP Sessions:
 IP Address      Started             Duration PPS    MaxPPS PeakPPS State
 213.111.238.79  24-01-2017 18:03:18    00:08    0.0    0.2     1.1 Idle
 105.100.57.23   24-01-2017 18:03:22    00:05    0.3    0.3     1.4 Active
 37.52.194.238   24-01-2017 18:03:20    00:07    0.0    0.2     0.7 Idle
 151.238.105.68  24-01-2017 18:03:16    00:12    0.0    0.2     0.5 Idle
 178.76.221.73   24-01-2017 18:03:23    00:03    0.1    0.2     2.5 Active
 78.160.13.154   24-01-2017 18:03:26    00:00    0.0    0.0     0.0 Active
 108.61.78.147   24-01-2017 18:03:16    00:12    0.0    0.6     2.0 Idle
 105.106.91.214  24-01-2017 18:03:13    00:15    0.0    0.3     0.5 Active
 78.179.255.166  24-01-2017 18:03:25    00:02    0.2    0.2     1.0 Active
 85.76.147.70    24-01-2017 18:02:58    00:28    0.0    0.5     2.3 Idle
 178.172.250.13  24-01-2017 18:02:58    00:28    0.0    0.7     1.2 Idle

Posted after 6 minutes 49 seconds:
Lev писал(а):
It is a lot of CPU usage, but doesn't looks like there is a lot of players.

Yes, there are multiple servers in VPS

Вложение:
16118353_1717196468610076_399985247_n.jpg
16118353_1717196468610076_399985247_n.jpg [ 10.94 КБ | Просмотров: 2886 ]
Автор:  Lev [ 25 янв 2017, 03:17 ]
Заголовок сообщения:  Re: DDoS Attack server ?
Nothing really bad. Beside that CPU usage is high, In/Out is zero. And it looks like you just restarted the server, so, data may be not gathered yet.
And only that player is suspicious:
abdobiskra писал(а):
Код:
00  Crv_Tco'03                       X X .   00:20
Didn't passed fake players checks and probably has UTF in name. But all of this also doesn't means much.
Автор:  abdobiskra [ 25 янв 2017, 22:23 ]
Заголовок сообщения:  Re: DDoS Attack server ?
Lev писал(а):
Nothing really bad. Beside that CPU usage is high, In/Out is zero. And it looks like you just restarted the server, so, data may be not gathered yet.
yes i restart it the CPU same value and i extinguished 2 servers of 5 | the problem occurs from time to time ... that's what makes me doubt by a large margin as the attacks on the servers
I'm wondering what are the best way to overcome this problem ?

Lev писал(а):
And only that player is suspicious:
abdobiskra писал(а):
Код:
00  Crv_Tco'03                       X X .   00:20
Didn't passed fake players checks and probably has UTF in name. But all of this also doesn't means much.
Yes I agree with you sometimes be a problem, but I wonder how the abolition of the names of this type of server (UTF or Long name also)
Автор:  Lev [ 26 янв 2017, 02:49 ]
Заголовок сообщения:  Re: DDoS Attack server ?
Not sure what you can do. Monitor what leads to high ping/loads. May be this is network, may be server itself. Watch for connections, UDP floods.
Страница 1 из 1 Часовой пояс: UTC + 5 часов [ Летнее время ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/