[Graffiti]

Hello! Today my server ddos other servers.

My IP server: 185.77.150.78:27617
OS: Ubunta
Game: CS:GO
SourceMod: 1.7.1


Log:

############################################# #############################
# Portscan detected from host 185.77.150.78 #
############################################# #############################

time protocol src_ip src_port dest_ip dest_port
---------------------------------------------------------------------------
Fri Mar 20 08:21:40 2015 TCP 185.77.150.78 27617 => 138.201.112.177 15921
Fri Mar 20 08:22:44 2015 TCP 185.77.150.78 27617 => 138.201.154.199 40417
Fri Mar 20 08:22:17 2015 TCP 185.77.150.78 27617 => 138.201.75.6 30971
Fri Mar 20 08:24:50 2015 TCP 185.77.150.78 27617 => 136.243.75.94 16995
Fri Mar 20 08:239 2015 TCP 185.77.150.78 27617 => 138.201.44.44 6261
Fri Mar 20 08:22:03 2015 TCP 185.77.150.78 27617 => 138.201.190.76 59403
Fri Mar 20 08:245 2015 TCP 185.77.150.78 27617 => 213.239.235.106 59403
Fri Mar 20 08:23:50 2015 TCP 185.77.150.78 27617 => 136.243.122.195 4872
Fri Mar 20 08:21:59 2015 TCP 185.77.150.78 27617 => 138.201.106.133 29618
Fri Mar 20 08:22:06 2015 TCP 185.77.150.78 27617 => 78.46.206.132 2746
Fri Mar 20 08:24:21 2015 TCP 185.77.150.78 27617 => 138.201.114.18 7652
Fri Mar 20 08:23:20 2015 TCP 185.77.150.78 27617 => 138.201.5.83 60825
Fri Mar 20 08:23:18 2015 TCP 185.77.150.78 27617 => 88.198.42.10 39350

List all plugins:

"Players Votes" (1.5.0) by The Resident, pZv!
"Jailbreak Warden" (3.0.3) by ecca & Graffiti
"Map Nominations" (1.7.1-dev+5162) by AlliedModders LLC
"Admin File Reader" (1.7.1-dev+5162) by AlliedModders LLC
"Sound Commands" (1.7.1-dev+5162) by AlliedModders LLC
"Basic Comm Control" (1.7.1-dev+5162) by AlliedModders LLC
"Knife Upgrade" (2.5.2) by Klexen
"MapChooser" (1.7.1-dev+5162) by AlliedModders LLC
"Basic Info Triggers" (1.7.1-dev+5162) by AlliedModders LLC
"BuyZone Simulator" (1.2.1) by KawMAN
"Flashlight" (1.3.1) by Mitch
"Reserved Slots" (1.7.1-dev+5162) by AlliedModders LLC
"Rock The Vote" (1.7.1-dev+5162) by AlliedModders LLC
"SourceBans" (1.4.11) by SourceBans Development Team
"Jailbreak Team Balance" (3.0. by databomb
"Anti-Flood" (1.7.1-dev+5162) by AlliedModders LLC
"Fun Commands" (1.7.1-dev+5162) by AlliedModders LLC
"SwapTeam" (1.2.6) by Rogue - Originally by MistaGee
"Last Request: Circle of Doom" (1.0.2) by Jason Bourne & Kolapsicle
"Last Request: HE Battle" (1.0.1) by Jason Bourne & Kolapsicle
"Client Preferences" (1.7.1-dev+5162) by AlliedModders LLC
"SM_Hosties v2" (2.1.3b2) by databomb & dataviruset & comando & Bara
"Admin Help" (1.7.1-dev+5162) by AlliedModders LLC
"Advertisements" (0.6) by Tsunami
"NotifyMOTD" (0.2) by Wilczek, KaOs, Bacardi
"Basic Commands" (1.7.1-dev+5162) by AlliedModders LLC
"Last Request: Backstabs" (1.0.3) by Jason Bourne & Kolapsicle & Bara
"SM Franug CSGO Sprays" (1.4.1) by Franc1sco Steam: franug
"[LR] Spray Contest" (1.3) by Graffiti
"Last Request: Gun Golf" (1.0.12) by CoMaNdO & Bara
"[CS:S] Block Radio" (2.0.2) by TimeBomb
"Last Request: Hp Fight" (1.0.20) by EGood & Bara
"Last Request: Nade Fight" (2. by Franc1sco (Plugin) & TimeBomb (LR)
"Names RUS" (1.2) by Graffiti
"Player Commands" (1.7.1-dev+5162) by AlliedModders LLC
"Last Request: Shotgun Wars (sample)" (1.0.17) by databomb & dataviruset
"entity.smx" entity.smx
"Fun Votes" (1.7.1-dev+5162) by AlliedModders LLC
"Warden menu for Jail" (1.4) by Graffiti
"Admin loggin" (1.0) by vIr-Dan
"Last Request: Max Damage" (1.0.3) by Jason Bourne & Kolapsicle
"AbNeR ResetScore" (1.4) by AbNeR_CSS
"CT Ban" (1.6.1.1) by databomb
"Basic Chat" (1.7.1-dev+5162) by AlliedModders LLC
"[CSGO] Block "Saved Player" Text" (1.0.0) by Mitch
"Basic Votes" (1.7.1-dev+5162) by AlliedModders LLC
"Admin Menu" (1.7.1-dev+5162) by AlliedModders LLC
"Web Shortcuts CS:GO version" (2.2) by Franc1sco franug and James "sslice" Gray

Please, help

[asherkin]

Archive a copy of your entire server install right now. Do not pass go, do not collect $200. Archive it all right now. If it turns out to be a plugin, we need a copy.

What extensions are you running? If you're running sockets, try and unload it and see what plugins SourceMod says need it.

EDIT: Please also send me an archive of just your plugins directory privately, I can check them all very quickly.

[Phaiz]

Curious to see how this unfolds.

[Graffiti]

Sent plugins PM asherkin

[maningrey]

"entity.smx" entity.smx <---- curious