A
Admincraftā€¢2y ago
Shadow

Someone is ddosing my Oracle Free Tier server... HOW???

What do I do about this?
35 Replies
Admincraft Meta
Admincraft Metaā€¢2y ago
Thanks for asking your question!
Make sure to provide as much helpful information as possible such as logs/what you tried and what your exact issue is
Make sure to mark solved when issue is solved!!!
/close !close !solved !answered
Requested by mow_cat#0
ProGamingDk
ProGamingDkā€¢2y ago
u cant do much about it remake instance and hope for a new ip, then get tcpshield
Philipp
Philippā€¢2y ago
I am curious what kind of attack did they use
Shadow
ShadowOPā€¢2y ago
they will get the new ip, it might be whitelisted but its not private and they know where to get it šŸ˜”
ProGamingDk
ProGamingDkā€¢2y ago
"then get tcpshield"
Philipp
Philippā€¢2y ago
what kind of ddos was it depending on that you can try diffrent stuff
Shadow
ShadowOPā€¢2y ago
does it cost anything?
ProGamingDk
ProGamingDkā€¢2y ago
not its free tier
Shadow
ShadowOPā€¢2y ago
well, mad connection loss issues, and they made the server lag and crash due to watchdog error
ProGamingDk
ProGamingDkā€¢2y ago
thats not a ddos atleast in the normal sense
Philipp
Philippā€¢2y ago
any thing in the console
ProGamingDk
ProGamingDkā€¢2y ago
!Logs
Carl-bot
Carl-botā€¢2y ago
Please check your server log for errors from your plugins.
If you need further help understanding the errors, please send us the whole log file. Where can I find the server log? Logs are stored in <server_directory>/logs/. Search for a file explorer in your server's management interface and navigate to that directory. Once you've opened that up, search for the latest.log file. Some providers have a separate page for logs and may hide the "logs" folder. On Aternos: ā€¢ Go to https://aternos.org/log/. On Minehut and server.pro: ā€¢ Go to the "files" tab in the left menu. ā€¢ Navigate to the root directory of your server. ā€¢ From there navigate to /logs/latest.log. What should I do with the log? ā€¢ First of all, read it! I mean, that's what you do all the time when you run a server, isn't it? Try to locate any errors that have anything to do with the issue you are facing. ā€¢ If you got the latest.log file or created a .txt file with the necessary errors you can upload these directly to the channel, but we prefer if you upload them to https://mclo.gs/. ā€¢ If you have trouble downloading the log file, copy/paste the text to a paste service (like mclogs). Copy the link that it gives you and send it to us. (Don't worry, McLogs hides your users' IPs.)
Admincraft Canned Responses
Shadow
ShadowOPā€¢2y ago
nothing unusual
Philipp
Philippā€¢2y ago
did you check if there were a lot of new connection attemps on the server directly
ProGamingDk
ProGamingDkā€¢2y ago
mind just sending it
Shadow
ShadowOPā€¢2y ago
lemme go unzip the log
ProGamingDk
ProGamingDkā€¢2y ago
use mclo.gs to paste
Shadow
ShadowOPā€¢2y ago
Shadow
ShadowOPā€¢2y ago
nothing seen before the crash has been unusual for the server where might i find info on setting up tcpshield for oracle free tier?
ProGamingDk
ProGamingDkā€¢2y ago
it only matters if u get a new ip but just follow the normal tcpshield setup guide
Shadow
ShadowOPā€¢2y ago
why is that? ohhh wait
Philipp
Philippā€¢2y ago
doesnt oracle have firewall option in the web gui does that filter on their edge the you could even reuse the old ip if you firewall it correct
Shadow
ShadowOPā€¢2y ago
it just stops them from seeing the ip idk that sounds like a bandaid that could accidentally fall off eventually
ProGamingDk
ProGamingDkā€¢2y ago
no thats not all it does it uses a protected cname of theirs that has antiddos so if they ddos it its pointless but less normal players through
Shadow
ShadowOPā€¢2y ago
i had a mini stroke but why would this not protect the original ip?
ProGamingDk
ProGamingDkā€¢2y ago
philip go take a nap and pet noobbot because its not one of theirs the ddosers already have ur ip so they can just attack it
Shadow
ShadowOPā€¢2y ago
if i get a new ip, its also not tcpshield's its just another oracle ip only difference is they would have a hard time guessing it
ProGamingDk
ProGamingDkā€¢2y ago
the one u send to players will be protected if u use a domain -.-
Philipp
Philippā€¢2y ago
is my English that bad šŸ˜¢ :petN00bBot:
Shadow
ShadowOPā€¢2y ago
hm
ProGamingDk
ProGamingDkā€¢2y ago
nap (said from a dane to a german dude)
Shadow
ShadowOPā€¢2y ago
ill try it out, but deleting this instance and making a new one will be difficult because the server is very alive atm
ProGamingDk
ProGamingDkā€¢2y ago
if it keep getting ddosed and crashed
Shadow
ShadowOPā€¢2y ago
also if i need to own my own domain to do this, unfortunately i do not

Did you find this page helpful?