i think someone was ddosing my server

[killerowmbat]

hey guys I had this come up on my admin panel is this someone DDOSIng my server or someone hacking

(14:16:06) | 121.223.3.201:54540/76561198059109787/Bubblz disconnecting: Exception
UnauthorizedAccessException: Access to the path "C:\Program Files (x86)\Steam\steamapps\common\Rust\cfg\client.cfg" is denied.
System.IO.FileStream..ctor (System.String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, Boolean anonymous, FileOptions options)
System.IO.FileStream..ctor (System.String path, FileMode mode, FileAccess access, FileShare share)
(wrapper remoting-invoke-with-check) System.IO.FileStream:.ctor (string,System.IO.FileMode,System.IO.FileAccess,System.IO.FileShare)
System.IO.StreamWriter..ctor (System.String path, Boolean append, System.Text.Encoding encoding, Int32 bufferSize)
System.IO.StreamWriter..ctor (System.String path, Boolean append, System.Text.Encoding encoding)
(wrapper remoting-invoke-with-check) System.IO.StreamWriter:.ctor (string,bool,System.Text.Encoding)
System.IO.File.WriteAllText (System.String path, System.String contents, System.Text.Encoding encoding)
System.IO.File.WriteAllText (System.String path, System.String contents)
ConVar.Global.writecfg ()
System.Reflection.MonoMethod.Invoke (System.Object obj, BindingFlags invokeAttr, System.Reflection.Binder binder, System.Object[] parameters, System.Globalization.CultureInfo culture)
Rethrow as TargetInvocationException: Exception has been thrown by the target of an invocation.
System.Reflection.MonoMethod.Invoke (System.Object obj, BindingFlags invokeAttr, System.Reflection.Binder binder, System.Object[] parameters, System.Globalization.CultureInfo culture)
System.Reflection.MethodBase.Invoke (System.Object obj, System.Object[] parameters)
ConsoleSystem+Index+<BuildFunctions>c__AnonStorey34.<>m__29 (.Arg arg)
ConsoleSystem+Run.Internal (.Arg arg, Boolean bWantReply)
UnityEngine.Debug:LogException(Exception)
Run:Internal(Arg, Boolean)
SystemRealm:Normal(RunOptions, String, Object[])
SystemRealm:Normal(String, Object[])
Client:SaveConfigs()
Client:LateUpdate()

[elix]

If you saw that appear in your logs 45 million times you could call it a DDoS.

That's probably just a bug.

[killerowmbat]

it only came up when this player left and this player alreadys has one VAC ban

[elix]

"464 day(s) since last ban"

From the looks of the exception, it looks like that's a client crash and your log is just getting the error message, basically. Or there's a server bug where it's doing something wrong. Look at the very first line of the error, not counting the line reporting the time of the event and the guy's Steam ID/etc.:

[QUOTE]UnauthorizedAccessException: Access to the path "C:\Program Files (x86)\Steam\steamapps\common\Rust\cfg\client.cfg" is denied.[/QUOTE]
That's the default location of the client.cfg file for the [I]game client[/I] on a 64bit Windows machine, not the server. I'm not a dev so I can't say for sure, but I feel this indicates one of two things:
- The player's game crashed and you just got the crash message, which for some reason included a problem trying to access the default client.cfg file, or
- The server has code from the client somewhere in it where it doesn't belong and by some random chance this player did something that happened to trip that code, it tried to read a client file when it's the server and its files don't live where the game client's files do, and as a result it kicked the player off.

And, after having typed that out, it seems to me that if the server had a failure trying to read a file, it'd probably kick [I]everyone[/I] off and crash instead of kicking off just one player, so it's probably just the player's game crashing for whatever reason and the server being told about it.

But it's definitely not a DDoS. The first D stands for "distributed" and [I]one event[/I] is by definition not a distributed attack.

[Missing User]

if i were in you i'd get in touch with the fbi this definitely looks like a major hacking attempt. dont listen to elix he is a troll.

[mrknifey]

[QUOTE=DEADINSIDE;50597535]if i were in you i'd get in touch with the fbi this definitely looks like a major hacking attempt. dont listen to elix he is a troll.[/QUOTE]

where DID you come from? :)

[Missing User]

[QUOTE=mrknifey;50598472]where DID you come from? :)[/QUOTE]

im a cia employee, i recently got fired for leaking federal secrets so now i have time to post on facepunch