[SKC]Whiskey Posted June 4, 2009 Share Posted June 4, 2009 For the last two weeks our server has been going down almost every other day. We havent changed anything to our configuration or scripts in the last 2 months. I checked the logs. As you can see everyone's ping skyrockets just before the crash. It doesnt go completely down since the logs still mention the remote admin trying to connect. Any idea what could be causing this? The serverhost (serverffs.com) assured me it isnt a problem on his side. [20:22:54] ADMINCHAT: skc: Kicking [sGA]Mikk For High Ping: 545.4 - Max: 500[20:22:54] ADMINCHAT: skc: Kicking sanja(haa) For High Ping: 555.6 - Max: 500 [20:22:54] ADMINCHAT: skc: Kicking [sKC]Fresh For High Ping: 547.5 - Max: 500 [20:22:55] ADMINCHAT: skc: Kicking MrDedFlanders For High Ping: 549 - Max: 500 [20:22:55] ADMINCHAT: skc: Kicking [sKC]ViRuS For High Ping: 559.6 - Max: 500 [20:22:57] KICK: '[sGA]Mikk' kicked from server by Remote Admin 'skc' (ID: 0) [20:22:57] KICK: 'MrDedFlanders' kicked from server by Remote Admin 'skc' (ID: 0) [20:22:57] KICK: '[sKC]ViRuS' kicked from server by Remote Admin 'skc' (ID: 0) [20:22:58] KICK: 'sanja(haa)' kicked from server by Remote Admin 'skc' (ID: 0) [20:22:58] KICK: '[sKC]Fresh' kicked from server by Remote Admin 'skc' (ID: 0) [20:25:23] MAPS: Race "chanel9" has finished. [00:38:43] ADMINQUIT: 'skc' timed out from Remote Administration (ID: 0) [00:38:48] ADMINJOIN: 'skc' connected to Remote Administration (IP Address: 88.175.105.55 <> ID: 0) [00:38:48] ADMINCHAT: skc: BROADCAST skc JOIN Multi Theft Auto mIRC Admin v4.15 by Aeron [00:38:50] ADMINCHAT: skc: MTASA:PRS:1.3 Script Reactivated [00:38:53] ADMINJOIN: 'skcmap2066838102' connected to Remote Administration (IP Address: 85.17.139.136 <> ID: 1) [00:39:03] ADMINQUIT: 'skcmap2066838102' timed out from Remote Administration (ID: 1) [01:25:07] ADMINQUIT: 'skc' timed out from Remote Administration (ID: 0) [01:25:12] ADMINJOIN: 'skc' connected to Remote Administration (IP Address: 88.175.105.55 <> ID: 0) [01:25:21] ADMINQUIT: 'skc' timed out from Remote Administration (ID: 0) [01:25:27] ADMINJOIN: 'skc' connected to Remote Administration (IP Address: 88.175.105.55 <> ID: 0) [01:25:27] ADMINCHAT: skc: BROADCAST skc JOIN Multi Theft Auto mIRC Admin v4.15 by Aeron [01:25:29] ADMINCHAT: skc: MTASA:PRS:1.3 Script Reactivated [01:25:32] ADMINJOIN: 'skcmap1094453431' connected to Remote Administration (IP Address: 85.17.139.136 <> ID: 1) [01:25:41] ADMINQUIT: 'skcmap1094453431' timed out from Remote Administration (ID: 1) [19:41:45] ADMINQUIT: 'skc' timed out from Remote Administration (ID: 0) [19:42:01] ADMINJOIN: 'skc' connected to Remote Administration (IP Address: 88.175.105.55 <> ID: 0) [19:42:02] ADMINCHAT: skc: BROADCAST skc JOIN Multi Theft Auto mIRC Admin v4.15 by Aeron [19:42:03] ADMINCHAT: skc: MTASA:PRS:1.3 Script Reactivated [19:42:06] ADMINJOIN: 'skcmap762194626' connected to Remote Administration (IP Address: 85.17.139.136 <> ID: 1) [19:42:15] ADMINQUIT: 'skcmap762194626' timed out from Remote Administration (ID: 1) Link to comment
DemonSeed Posted June 5, 2009 Share Posted June 5, 2009 That looks very simillar to a DDOS attack. And where are the scripts hosted? With serverffs as well? Link to comment
[SKC]Whiskey Posted June 5, 2009 Author Share Posted June 5, 2009 Scripts are hosted by PYGSteriK. I send the logs to serverffs and they think its a DDOS attack as well. The problem is that we gotta catch that POS while he's attacking in order to do something about it. Link to comment
DemonSeed Posted June 7, 2009 Share Posted June 7, 2009 Yeah I have become quite familar with that problem since it happens on my host a lot, or used to. Link to comment
Recommended Posts