Raised This Month: $ Target: $400
 0% 

[Any] Paranoia IP Tracker


Post New Thread Reply   
 
Thread Tools Display Modes
DarthNinja
SourceMod Plugin Approver
Join Date: Mar 2009
Location: PreThinkHook()
Old 07-20-2012 , 22:54   Re: [Any] Paranoia IP Tracker
Reply With Quote #31

The intent of this plugin is to store a list of IP addresses associated with a SteamID.

This is useful if your webserver is attacked by a single client (I have had DoS attacks, and people trying to brute force admin logins for my forums), or if your srcds installs are attacked via various methods.

It is also useful for seeing if more then one player plays from the same IP (ban evading), or if one account connects from a lot of IPs (dynamic IP address). This is especially useful for trade servers where someone might connect several accounts in order to run a scam.

If you don't think collecting data that you might need at some point is a good idea, then I really have nothing else to say to you.
__________________

Last edited by DarthNinja; 07-20-2012 at 22:55.
DarthNinja is offline
Hunter S. Thompson
Senior Member
Join Date: Jun 2012
Old 07-21-2012 , 02:10   Re: [Any] Paranoia IP Tracker
Reply With Quote #32

Quote:
Originally Posted by Dr. McKay View Post
The listdeaths exploit did in fact crash the server.

Lag exploits are denying service, so they're DoS attacks.

Sure, you can write a DoS script in SourcePawn. Good luck uploading that to a server you want to attack though.

This plugin exists to log IP addresses. Nothing more, nothing less. If you don't think it's useful, don't use it.
The Listdeaths exploit was patched a long, long time ago. And DoS attacks such as ASA/AS2 spamming can be easily prevented by writing your own plugin for it.

And why would I need to upload it to a server I want to attack? If I had access to the server via FTP then I can just drop a rootkit on it, or furthermore root the entire box. What I was referring to, is using the Sockets extension in conjunction with a timer set to repeat to repeatedly open and close a connection to the server. This is in fact the definition of a DoS attack, is it not? Hell, I can take it a step further and have it send an incomplete header to an server running an apache or otherwise affected service effectively utilizing the SlowLoris DoS attack method.

SourcePawn can be used for evil, just as any other language.

Quote:
Originally Posted by DarthNinja
The intent of this plugin is to store a list of IP addresses associated with a SteamID.

This is useful if your webserver is attacked by a single client (I have had DoS attacks, and people trying to brute force admin logins for my forums), or if your srcds installs are attacked via various methods.

It is also useful for seeing if more then one player plays from the same IP (ban evading), or if one account connects from a lot of IPs (dynamic IP address). This is especially useful for trade servers where someone might connect several accounts in order to run a scam.

If you don't think collecting data that you might need at some point is a good idea, then I really have nothing else to say to you.
In my opinion, this isn't THAT useful. While you've stated some good points, and I myself may incorporate this plugin when and if I get a TF2 server, it's nulled by the fact that you can install 3rd party software that does this job, and much, much more. Take IPTables for an example; used by someone who knows how to use it, it's more effective than any firewall, and can mitigate attacks quite effectively.

If you're having trouble with downtime on your site, then I suggest CloudFlare; and with the bruteforcing, you can easily stop this by applying a maximum retry value.
Hunter S. Thompson is offline
Dr. McKay
Sir Dr. SourceMod Plugin Approver Esq. Ltd. M.D. PhD
Join Date: Aug 2011
Location: Atlantis
Old 07-21-2012 , 03:21   Re: [Any] Paranoia IP Tracker
Reply With Quote #33

Quote:
Originally Posted by Hunter S. Thompson View Post
The Listdeaths exploit was patched a long, long time ago.
Actually, less than a month ago. The first time, it was just "hidden".

I wouldn't personally use this plugin. However, there are those that will, and they are who this is for. You may think there is a better way, but people have their preferences.
__________________
Dr. McKay is offline
Smarmy
Senior Member
Join Date: Mar 2012
Old 07-21-2012 , 04:04   Re: [Any] Paranoia IP Tracker
Reply With Quote #34

What does it matter, I think he listed the DoS thing as a single use case. You use it for what you find it useful for, jeez.

If you don't see a use for it, don't download it.
Smarmy is offline
step
Senior Member
Join Date: May 2010
Old 08-31-2012 , 03:38   Re: [Any] Paranoia IP Tracker
Reply With Quote #35

Excellent plugin. Thanks, DarthNinja.
step is offline
DarthNinja
SourceMod Plugin Approver
Join Date: Mar 2009
Location: PreThinkHook()
Old 08-31-2012 , 11:12   Re: [Any] Paranoia IP Tracker
Reply With Quote #36

Quote:
Originally Posted by step View Post
Excellent plugin. Thanks, DarthNinja.

__________________
DarthNinja is offline
s.m.a.c head
Senior Member
Join Date: Apr 2012
Location: Liverpool
Old 07-11-2013 , 02:48   Re: [Any] Paranoia IP Tracker
Reply With Quote #37

from what i read this has nothing to do with dos or DDoS attacks or any form of attacks it merely saves IPs along with steam ids
SO
what should my database.cfg look like

i did it like this is it correct ?
Quote:
"paranoiaip"
{
"driver" "sqlite"
"database" "paranoiaip"
}




OK i used this in database.cfg and it worked

Quote:
"paranoiaip"
{
"driver" "sqlite"
"host" "localhost"
"database" "paranoiaip"
"user" "root"
"pass" ""
//"timeout" "0"
//"port" "0"
}
ok its loaded and i presume working but where does it store the IP list >????

I look and see paranoiaip.sq3 but it has nothing in it


"pass" "do i need my password for my server here ?"

///////////////////////////////EDIT/////////////////////////////////////////////////////////
i get this in console if it helps ?


Quote:
L 07/11/2013 - 07:25:07: [ParanoiaIPTracker.smx] [Paranoia IP Tracker v1.0.1] Online and connected to database!
[Paranoia IP Tracker v1.0.1] Online and connected to database!
L 07/11/2013 - 07:25:08: [ParanoiaIPTracker.smx] SQL Error: near "AUTO_INCREMENT": syntax error
L 07/11/2013 - 07:25:08: [ParanoiaIPTracker.smx] SQL Error: near "AUTO_INCREMENT": syntax error
L 07/11/2013 - 07:25:08: [ParanoiaIPTracker.smx] SQL Error: near "SET": syntax error
Connection to Steam servers successful.
VAC secure mode is activated.

Last edited by s.m.a.c head; 07-11-2013 at 05:24.
s.m.a.c head is offline
Dr. McKay
Sir Dr. SourceMod Plugin Approver Esq. Ltd. M.D. PhD
Join Date: Aug 2011
Location: Atlantis
Old 07-11-2013 , 08:47   [Any] Paranoia IP Tracker
Reply With Quote #38

It doesn't support SQLite.
__________________
Dr. McKay is offline
s.m.a.c head
Senior Member
Join Date: Apr 2012
Location: Liverpool
Old 07-11-2013 , 15:43   Re: [Any] Paranoia IP Tracker
Reply With Quote #39

Quote:
Originally Posted by Dr. McKay View Post
It doesn't support SQLite.
ok thanks so what should i write in database.cfg ?

Quote:
"paranoiaip"
{
"driver" "?????"
"host" "??????"
"database" "??????"
"user" "?????"
"pass" "?????"
//"timeout" "0"
//"port" "0"
}
i guess this ?
Quote:
"driver" "mysql"
"host" "localhost"
"database" "paranoiaip"
doesnt work either I give up

Last edited by s.m.a.c head; 07-11-2013 at 17:23.
s.m.a.c head is offline
jpwanabe
Veteran Member
Join Date: Mar 2010
Old 07-12-2013 , 23:13   Re: [Any] Paranoia IP Tracker
Reply With Quote #40

Any change of a web page to interface with this being added?
jpwanabe is offline
Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 22:16.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode