Hello Forum,
as the title already says, my FiveM-Server is doing portscans, as my hoster (and partner) said. Recenty my hoster started to receive abuse messages from other hosters, saying they detected portscans from my server.
I would say the issue is caused by a script. But I’m unsure if it is even possible to build a portscanner in the FiveM-Lua Environment. I would suggest it’s a JavaScript based script, but there I’m only using the mysql-async lib. .NET resources are not present serverside.
I’m wondering how i can solve this or firstly find the cause?
Again I’m not thinking its caused by FiveM directly!
The abuse messages look something like this:
On 21 Nov 03:41, root@monitoring2.rz1.hetzner.de wrote:
> ##########################################################################
> # Portscan detected from host 84.MY.SERVER.IP #
> ##########################################################################
>
> time protocol src_ip src_port dest_ip dest_port
> ---------------------------------------------------------------------------
> Sun Nov 21 03:41:18 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.220.216 17223
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.187.211 20844
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.236.82 26042
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.2.80 21358
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.127.210 37955
> Sun Nov 21 03:41:21 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.210.220 35992
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.238.225 6234
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.254.37 35373
> Sun Nov 21 03:41:23 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.4.16 58540
> Sun Nov 21 03:41:21 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.249.116 61464
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.60.208 9670
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.156.159 49154
> Sun Nov 21 03:40:55 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.219.192 17959
> Sun Nov 21 03:40:56 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.150.186 51229
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.104.239 40528
> Sun Nov 21 03:41:11 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.229.190 21229
> Sun Nov 21 03:41:13 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.130.186 47374
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.133.26 60478
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.63.240 533
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 78.47.183.20 40211
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.188.103 44763
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.161.209 35484
> Sun Nov 21 03:41:06 2021 TCP 84.MY.SERVER.IP 30120 => 78.47.197.72 16018
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.41.159 24319
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.130.121 53782
> Sun Nov 21 03:41:23 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.50.47 55497
> Sun Nov 21 03:41:13 2021 TCP 84.MY.SERVER.IP 30120 => 88.198.76.23 8235
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.63.192 19841
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.64.136 30345
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 88.198.174.210 52219
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.123.162 55218
> Sun Nov 21 03:41:13 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.32.162 53587
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.163.208 19860
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.178.231 17685
> Sun Nov 21 03:41:06 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.170.21 4560
> Sun Nov 21 03:41:18 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.124.109 42221
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.194.40 4186
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.69.144 4186
> Sun Nov 21 03:41:15 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.172.41 31130
> Sun Nov 21 03:41:19 2021 TCP 84.MY.SERVER.IP 30120 => 78.46.158.149 4318
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.243.97 26684
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.140.236 22148
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.238.173 63636
> Sun Nov 21 03:41:21 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.205.247 22455
> Sun Nov 21 03:41:00 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.28.197 4811
> Sun Nov 21 03:41:13 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.240.202 22604
> Sun Nov 21 03:41:09 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.113.148 10217
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.58.189 63852
> Sun Nov 21 03:41:11 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.197.97 1327
> Sun Nov 21 03:41:13 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.46.136 2930
> Sun Nov 21 03:41:23 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.26.71 48402
> Sun Nov 21 03:41:17 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.28.74 13024
> Sun Nov 21 03:41:06 2021 TCP 84.MY.SERVER.IP 30120 => 88.198.163.157 46665
> Sun Nov 21 03:41:17 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.120.179 50002
> Sun Nov 21 03:40:57 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.29.123 17199
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.236.77 1662
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.234.169 25452
> Sun Nov 21 03:41:17 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.222.214 29292
> Sun Nov 21 03:41:07 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.72.94 59629
> Sun Nov 21 03:41:20 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.238.120 36269
> Sun Nov 21 03:40:59 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.45.53 17092
> Sun Nov 21 03:40:50 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.130.137 3845
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.252.29 16401
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.89.156 54876
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.85.187 4510
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.66.96 62386
> Sun Nov 21 03:40:59 2021 TCP 84.MY.SERVER.IP 30120 => 213.239.237.255 62375
> Sun Nov 21 03:41:00 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.124.74 22070
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.122.124 62908
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.58.196 3036
> Sun Nov 21 03:41:20 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.64.172 17238
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 88.198.240.82 51433
> Sun Nov 21 03:41:11 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.244.199 3538
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.80.182 26315
> Sun Nov 21 03:41:17 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.76.185 4187
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 188.34.172.95 3150
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.241.99 23936
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 78.46.124.202 14382
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 78.47.9.250 26953
> Sun Nov 21 03:41:00 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.209.128 15261
> Sun Nov 21 03:41:21 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.32.235 6931
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.220.159 20649
> Sun Nov 21 03:40:56 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.196.168 11658
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.83.124 49687
> Sun Nov 21 03:41:05 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.131.47 7839
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.208.143 30
> Sun Nov 21 03:41:09 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.115.138 25214
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 188.34.225.190 40142
> Sun Nov 21 03:40:55 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.240.194 4996
> Sun Nov 21 03:40:55 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.22.135 10751
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.42.207 20433
> Sun Nov 21 03:40:58 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.63.203 35502
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.141.253 44516
> Sun Nov 21 03:41:15 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.81.31 36478
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 168.119.215.249 27303
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.255.174 24967
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.244.40 36409
> Sun Nov 21 03:40:50 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.154.225 57897
> Sun Nov 21 03:40:57 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.161.220 25003
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.127.0 50497
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.66.93 60484
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.43.205 14383
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.35.179 39080
> Sun Nov 21 03:41:19 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.46.110 64494
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.136.236 8407
> Sun Nov 21 03:40:58 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.130.174 7166
> Sun Nov 21 03:41:16 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.157.241 40084
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.150.174 59016
> Sun Nov 21 03:41:11 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.63.198 49906
> Sun Nov 21 03:41:20 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.48.219 2604
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.244.179 12966
> Sun Nov 21 03:41:11 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.251.193 822
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.21.224 54162
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.160.100 48201
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.107.197 63828
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.118.230 26387
> Sun Nov 21 03:40:54 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.93.172 37080
> Sun Nov 21 03:41:23 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.48.70 52307
> Sun Nov 21 03:41:23 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.202.34 3776
> Sun Nov 21 03:40:52 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.235.10 18162
> Sun Nov 21 03:40:59 2021 TCP 84.MY.SERVER.IP 30120 => 88.198.181.255 44867
> Sun Nov 21 03:41:20 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.65.51 46317
> Sun Nov 21 03:41:07 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.146.238 62459
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.127.77 31105
> Sun Nov 21 03:41:05 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.9.251 37391
> Sun Nov 21 03:40:54 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.100.64 10338
> Sun Nov 21 03:41:01 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.120.10 30803
> Sun Nov 21 03:41:20 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.250.107 52917
> Sun Nov 21 03:40:55 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.159.184 16432
> Sun Nov 21 03:41:21 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.18.135 40023
> Sun Nov 21 03:41:21 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.28.16 3121
> Sun Nov 21 03:41:06 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.160.168 59805
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.128.1 3642
> Sun Nov 21 03:40:55 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.90.55 61916
> Sun Nov 21 03:41:18 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.239.105 14531
> Sun Nov 21 03:41:09 2021 TCP 84.MY.SERVER.IP 30120 => 78.47.115.84 17969
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.55.191 29749
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.159.101 35789
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.226.173 46996
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.139.230 19582
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.254.28 6432
> Sun Nov 21 03:41:18 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.118.212 52838
> Sun Nov 21 03:41:00 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.50.122 50405
> Sun Nov 21 03:40:51 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.182.175 56401
> Sun Nov 21 03:41:18 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.104.50 57425
> Sun Nov 21 03:41:08 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.146.121 12669
> Sun Nov 21 03:40:54 2021 TCP 84.MY.SERVER.IP 30120 => 94.130.62.75 2596
> Sun Nov 21 03:41:10 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.249.116 31938
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 88.198.154.184 21051
> Sun Nov 21 03:41:00 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.201.34 20203
> Sun Nov 21 03:41:17 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.68.241 24346
> Sun Nov 21 03:41:06 2021 TCP 84.MY.SERVER.IP 30120 => 65.108.212.108 28802
> Sun Nov 21 03:41:01 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.207.135 48228
> Sun Nov 21 03:41:15 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.41.36 63412
> Sun Nov 21 03:41:14 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.147.95 40264
> Sun Nov 21 03:41:19 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.115.181 43957
> Sun Nov 21 03:41:22 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.174.248 59161
> Sun Nov 21 03:41:09 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.233.118 33533
> Sun Nov 21 03:40:59 2021 TCP 84.MY.SERVER.IP 30120 => 91.107.191.184 32439
> Sun Nov 21 03:40:49 2021 TCP 84.MY.SERVER.IP 30120 => 78.46.12.70 39732
> Sun Nov 21 03:40:53 2021 TCP 84.MY.SERVER.IP 30120 => 78.46.12.70 39732
> Sun Nov 21 03:41:11 2021 TCP 84.MY.SERVER.IP 30120 => 65.109.171.187 62413
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.163.0 38611
> Sun Nov 21 03:41:12 2021 TCP 84.MY.SERVER.IP 30120 => 5.75.251.81 40151
> Sun Nov 21 03:41:07 2021 TCP 84.MY.SERVER.IP 30120 => 142.132.140.255 42132
> Sun Nov 21 03:40:59 2021 TCP 84.MY.SERVER.IP 30120 => 167.233.233.250 60333
> Sun Nov 21 03:41:19 2021 TCP 84.MY.SERVER.IP 30120 => 128.140.86.214 34358
> Sun Nov 21 03:41:18 2021 TCP 84.MY.SERVER.IP 30120 => 49.13.236.78 54576