Yeah, I saw that query spam, but looks just like monitoring and in private IP space. There's also packets from 95.154.85.178, which look a little odd because of the huge asymmetry- it sent ~800KB to the server on port 27028, and only got around 15KB back. The packets themselves look psuedorandom, and there are two different source ports in use.
That's the only other thing in there that raised my eyebrows. On Mon, Oct 5, 2015 at 11:14 AM, Calvin J <[email protected]> wrote: > Another question, what makes him think there is an attack at all? I see that > someone is monitoring the server via a local IP (10.55.56.61) on HLSW. And > if the query limit settings aren't turned up a bit it will show timeouts on > HLSW for 3-5 second intervals. > > I have a feeling this is not an attack at all and he's just being timed out > by the server due to sv_max_queries_sec. > > Try setting sv_max_queries_sec to 10 or 15 and see if that resolves the > timeouts. > > On 10/5/2015 1:44 PM, Nathaniel Theis wrote: > > What's the IP and port the attack's targetting? I assume the IP is > 95.154.113.83? > > On Mon, Oct 5, 2015 at 10:30 AM, Roland Mondek <[email protected]> wrote: > > Are you from Slovakia ? > > > > Dňa 5.10.2015, o 19:20, Левинчук Федор <[email protected]> napísal: > > another link > https://yadi.sk/d/BjQQ09btjXnpz > > > 06.10.2015, 03:12, "Ilyas" <[email protected]>: > > You must to change sharing options to "Anyone who is given the link to > the file or folder can access it " > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers > > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers > > > > -- > Calvin Judy > Founder & CEO > PH#: (843) 410-8486 > Mail: [email protected] > > _______________________________________________ > Csgo_servers mailing list > [email protected] > https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers _______________________________________________ Csgo_servers mailing list [email protected] https://list.valvesoftware.com/cgi-bin/mailman/listinfo/csgo_servers
