VPS Protection for Remote Shutdown

[gago117]

Well, this incident happened the third time. So I am sure that it is an attack.


Situation:

The server is online for hours, then suddenly, I can't connect to RDP, and my players QQ that the server is down.


After an hour or 2, the RDP access returns back.. I type my username and password... then wow, all of the applications running were closed.. then the Event Tracker will pop-up.. "What is the cause of shutdown?" I am sure that I was attacked.



Question:

Any ideas about this happening? How can I protect myself for such attacks?





Thanks in advance, I need an answer as soon as possible. :D

[MentaL]

[Evilness]

Tell your vps host to be more secure.

[SecretsOThePast]

Well, this incident happened the third time. So I am sure that it is an attack.


Situation:

The server is online for hours, then suddenly, I can't connect to RDP, and my players QQ that the server is down.


After an hour or 2, the RDP access returns back.. I type my username and password... then wow, all of the applications running were closed.. then the Event Tracker will pop-up.. "What is the cause of shutdown?" I am sure that I was attacked.



Question:

Any ideas about this happening? How can I protect myself for such attacks?





Thanks in advance, I need an answer as soon as possible. :D

I think this has nothing to do with security. Your host was down, they rebooted it, it came back up.

Find a different vps provider, chances are they're terrible.

[Joe9099]

You with SWVPS?

[Anju]

Updates of the VPS could be doing this (not sure). Maybe you need to change the configuration in the sleep/shutdown/etc..

[gago117]

Well they aren't responding to the tickets at this moment.


The recent thing I have done is upgraded the RAM. Maybe that's the cause of it.

[gago117]

The problem still persists!! The system reboots..


Is there any thing you guys can suggest that I should check? :D

[SecretsOThePast]

The problem still persists!! The system reboots..


Is there any thing you guys can suggest that I should check? :D

You should get a new provider if they haven't responded to a ticket within an hour.

[randy1234]

swvps is cheap - bad service. , they do reply to tickets its just very slow.

@SecretsOThePast not all VPS Providers are always available they have working hours they are not robots

[gago117]

I will observe again for today. If it crashes again, I GIVE UP!! :P

[GzFKoron]

I highly doubt its an attack, if your with SWVPS then they have gone downhill, they used to be such an excellent VPS provider now they are rubbish.

[gago117]

I don't use SWVPS.


Well, I have a feeling of being DDOSed.


Based on observing the server behavior.

-The server lost connectivity, thus the players got disconnected.
-Then after 15 minutes, Gunz was online again.
-Then after an hour it lost connectivity again and never came back.



Ideas?

[Vusion]

I don't use SWVPS.


Well, I have a feeling of being DDOSed.


Based on observing the server behavior.

-The server lost connectivity, thus the players got disconnected.
-Then after 15 minutes, Gunz was online again.
-Then after an hour it lost connectivity again and never came back.



Ideas?

Microsoft Network Monitor, DL it, run it. And check the IP with many income's, that should be the DDoS'rs IP.

[Joe9099]

Guys im also having this problem now, my VPS goes offline for like a few minutes, then comes back online, then maybe 30 mins later does the same thing for around a hour or so...

Then the following day it will do the same. It has only started doing it this week and it's as if the whole connection to the VPS gets knocked offline.

The thing is that the processes and shit are still running fine when the connection to VPS is re-established...
I have contacted support on my VPS provider, still no reply though >.>, is this some type of attack?

[Vusion]

Guys im also having this problem now, my VPS goes offline for like a few minutes, then comes back online, then maybe 30 mins later does the same thing for around a hour or so...

Then the following day it will do the same. It has only started doing it this week and it's as if the whole connection to the VPS gets knocked offline.

The thing is that the processes and shit are still running fine when the connection to VPS is re-established...
I have contacted support on my VPS provider, still no reply though >.>, is this some type of attack?

A DDoS, a heavy one. It somehow lags the VPS as much as possible, then the VPS can't handle RDP connections, but the processes are still running but can't handle any users(your server), once he stops, you can manage to connect through RDP, and your users will be able to connect to your server again as if nothing happened.

[Joe9099]

Yep, and stopping a ddos is near impossible >.>

[SecretsOThePast]

@SecretsOThePast not all VPS Providers are always available they have working hours they are not robots

Any decent datacenter will be staffed 24/7 to handle downtimes and other ticket-related issues.

Chances are your datacenter took your VPS offline to stop the DDoS attack from affecting other people on the same node/machine.

Such is the glory of having an actual datacenter to handle your issues, as opposed to a virtual environment only.. and having dedicated hardware never hurts either :P

[Vusion]

Yep, and stopping a ddos is near impossible >.>

It can happen from a DoS also, I forgot to mention that. Use CSF firewall, DG uses it since Kyuma told them about it. But you need to search for a tutorial to run it on Windows.

[Joe9099]

It can happen from a DoS also, I forgot to mention that. Use CSF firewall, DG uses it since Kyuma told them about it. But you need to search for a tutorial to run it on Windows.

Ye man i was looking at that, thanks buddy