Linux What kind of attack is? (DDG)

[Pretx]

Hello @Don Daniello.

My friend receives attack today, 2 times in the same way. What kind of attack is? 400 players online, reached 1400 in 1 second.
http://prntscr.com/7v41il
then:
http://prntscr.com/7v43ws
You can connect to ssh, scp and phpmyadmin but not the website and otserver.

In the ssh console and Screen there is nothing unusual. (players cant login, and only you can see how each players begin to disconnect.)

You can explain what happens?

IP: 198.27.98.106

 

[ghettobird]

Hello @Don Daniello.

My friend receives attack today, 2 times in the same way. What kind of attack is? 400 players online, reached 1400 in 1 second.
http://prntscr.com/7v41il
then:
http://prntscr.com/7v43ws
You can connect to ssh, scp and phpmyadmin but not the website and otserver.

In the ssh console and Screen there is nothing unusual. (players cant login, and only you can see how each players begin to disconnect.)

You can explain what happens?

Eximia.org
IP: 198.27.98.106

I had this kind of attack before, I recommend restarting the server, if players can login after you restarted then it's a bug in your server being abused. If not then it's a DDOS attck, however I highly doubt it if you're using DDG Hosting Service.

 

[Pretx]

Ok. Can be a xploit. I will try to check the Sources Files. THX. (yeah after restart the server, all players can connect and access to website too).


@ghettobird @Don Daniello @MartyX
I use a Cast System With Otxserver. Is posible use the magebomb(or any another bot in version 8.6) To connect a infinite numbers of Spectators in a "Cast Open" with password or wihtout password?

 

[ghettobird]

Ok. Can be a xploit. I will try to check the Sources Files. THX.

@ghettobird @Don Daniello @MartyX
I use a Cast System With Otxserver. Is posible use the magebomb(or any another bot in version 8.6) To connect a infinite numbers of Spectators in a "Cast Open" with password or wihtout password?

actually I think your problem may be in talkactions, a talkaction that doesn't have exhaust time may be abused...

Or maybe it's a movements bug, I remember when I tried pheonixia (don't remember the exact name, but it's the one zackata made) when I stepped on a tile OTs just froze, and then I found an enormous amount of players online when I had 127.0.0.1 as my IP in config.lua

Oh and also don't tag people for no reason here, I think it's against the rules you can only tag people who replied, or have something to do with what you posted. (in your case, the 2 gentlemen you tagged don't really have anything to do with what you posted so I suggest that you wouldn't tag them again unless they post )

 

[Pretx]

A movement can cause that too?
All talkactions have exhaust.
I will try to check all scripts.

Thx.

 

[MartyX]

Ok. Can be a xploit. I will try to check the Sources Files. THX. (yeah after restart the server, all players can connect and access to website too).


@ghettobird @Don Daniello @MartyX
I use a Cast System With Otxserver. Is posible use the magebomb(or any another bot in version 8.6) To connect a infinite numbers of Spectators in a "Cast Open" with password or wihtout password?

is possible limite spectators to 20 - 30 - 40 or spectators required and is possible add password for to cast

 

[Pretx]

@up

Today the problem happened again.
cast system is not the problem. today, i spend all day with a clean sources (wihtout cast [Otx 2.x.S]). I Check and remove almost all my scripts and just let the basic. Maybe... some syn attack on vulnerable port?

 

[Starfish]

account manager login packet spam?