How can I stop this?

adeDXadeDX Posts: 3Player
edited May 2017 in Server Support
Hey Community,

I play with my friend and in the second round a Lvl 1 Player joined the lobby. But he wouldn't play with us.... I do not want to impersonate anyone but I think he makes it with intent.

here the logs:
[2174.22] ScriptLog: INFORMATION: Soldier "skl***" wants to join the server.
[2174.22] ScriptLog: INFORMATION: Initializing player profile management object for player skliros
[2174.32] Log: From address is 46.103.********
[2174.35] Log: PunkBuster Server: New Connection (slot #3) 46.103.***** [?] "skli***" (seq 8198197)
[2174.36] Log: PunkBuster Server: Player GUID Computed 0000000000000007656*******(VALID) (slot #3) 46.103.34.78:55611 skliros
[2175.75] ScriptLog: Steam profile init started with total data of 7644
[2175.88] ScriptLog: User authenticated and soldier "skl***" profile updated, LvlXP: 0 Honor level:0
[2175.89] ScriptLog: Player "skli****" successfully logged in.
[2175.89] ScriptLog: INFORMATION: Player is authorized (or non-authorized LAN server) - going to playerwaiting.
[2175.89] ScriptLog: skliros (Steam ID 7656********) leaving authorize player for Spectating
[2178.83] ScriptLog: "skliros" changed to team name: Team ID: 0
[2178.89] ScriptLog: [RoleChange] skliros set fireteam role to 0 2017/05/09 - 02:40:57
[2187.19] ScriptLog: Playing Objective Anims.
[2200.11] ScriptLog: "ade***" killed "Antho******" with damage: AADmgType_M4A1Rifle KilledPawn.Weapon:'AAWeap_M16A4Rifle_2' at time: 2017/05/09 - 02:41:18
[2208.01] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.01] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_4 46.103.34.78:50689 05/09/17 02:41:26
[2208.05] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.05] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_5 46.103.34.78:50689 05/09/17 02:41:26
[2208.08] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.08] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_6 46.103.34.78:50689 05/09/17 02:41:26
[2208.11] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.11] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_7 46.103.34.78:50689 05/09/17 02:41:26
[2208.15] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.15] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_8 46.103.34.78:50689 05/09/17 02:41:26
[2208.18] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.18] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_9 46.103.34.78:50689 05/09/17 02:41:26
[2208.21] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.21] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_10 46.103.34.78:50689 05/09/17 02:41:26
[2208.25] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.25] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_11 46.103.34.78:50689 05/09/17 02:41:26
[2208.28] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.28] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_12 46.103.34.78:50689 05/09/17 02:41:26
[2208.31] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.31] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_13 46.103.34.78:50689 05/09/17 02:41:26
[2208.35] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.35] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_14 46.103.34.78:50689 05/09/17 02:41:26
[2208.38] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.38] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_15 46.103.34.78:50689 05/09/17 02:41:26
[2208.41] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.41] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_16 46.103.34.78:50689 05/09/17 02:41:26
[2208.45] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.45] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_17 46.103.34.78:50689 05/09/17 02:41:26
[2208.48] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.48] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_18 46.103.34.78:50689 05/09/17 02:41:26
[2208.51] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.51] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_19 46.103.34.78:50689 05/09/17 02:41:26
[2208.55] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
[2208.55] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_20 46.103.34.78:50689 05/09/17 02:41:26
[2208.58] NetComeGo: Open TheWorld 05/09/17 02:41:26 46.103.34.78
...
...
[2274.25] NetComeGo: Open TheWorld 05/09/17 02:42:32 46.103.34.78
[2274.25] NetComeGo: Close TcpNetDriver_0 IpNetConnectionAASteam_1988 46.103.34.78:50689 05/09/17 02:42:32

How can I safe the Server?

Comments

  • [EF]=JAY=[EF]=JAY= Posts: 107Player
    Hello

    You seem to be implying that this ip was deliberately trying to hack/spam your server.

    I have noticed this happening really often on my server.

    I actually contacted some of the players whos ip was doing that, and it seems its a steam bug not a ddos attack.

    I also havnt noticed any adverse effect on the server, it just stops after 30-50 seconds.


    Jay

    Steam Name:[EF]=Jay=
    [EF] =Elite Fighters=
    Server IP:82.255.178.154:7778
    b_560_95_1.png
  • adeDXadeDX Posts: 3Player
    Ok tanks for your answer. It crashs my server after 10-20 seconds. i can't join the server after this. The easiest way was to reinstall the server. He closed an opens the tcp 1988 times before it crashs the server. It is possible to make a script that blocked this after "xx" times or so? Please let me know if you have a solution.
  • L0rdDamianL0rdDamian Posts: 683Player
    [EF]=JAY= wrote: »
    Hello

    You seem to be implying that this ip was deliberately trying to hack/spam your server.

    I have noticed this happening really often on my server.

    I actually contacted some of the players whos ip was doing that, and it seems its a steam bug not a ddos attack.

    I also havnt noticed any adverse effect on the server, it just stops after 30-50 seconds.


    Jay

    Don't think this one is a bug though, 1988 connections within 6 seconds is a deliberate attack. As long the exploit is alive I don't think there is anything we can do about it. This one is for the AA Devs and Valve.
  • adeDXadeDX Posts: 3Player
    edited May 2017
    Its possible to make a script, that detect too many connection trys and block it instant? Its not the first time I see attacks on our server. If someone knows exactly how these attacks work, we might find a solution to this.
    The most time only 2-4 people was on my server. I thought this is not interesting to this "art" of people. Why they attack not the full servers? Probably they can't...but why not???
  • [EF]=JAY=[EF]=JAY= Posts: 107Player
    adeDX wrote: »
    Ok tanks for your answer. It crashs my server after 10-20 seconds. i can't join the server after this. The easiest way was to reinstall the server. He closed an opens the tcp 1988 times before it crashs the server. It is possible to make a script that blocked this after "xx" times or so? Please let me know if you have a solution.

    To stop it you need to close the server wait about 5 minutes all connections time out and then its ok no need to reinstall.

    Is this a home server or a rented one? i still think its a problem with steam connections and nothing maliicious. If it causes your server to crash maybe your hardware or you network cannot handle it.


    Btw it happend to me again today (the server dosnt crash) just a few hundred connections maybe a thousand attempts and then it stops.

    Good Luck

    Jay


    Steam Name:[EF]=Jay=
    [EF] =Elite Fighters=
    Server IP:82.255.178.154:7778
    b_560_95_1.png
Sign In or Register to comment.