I have been using traccar for months, now my vps provider send me the message "You can see from this list that there were over 100,000 active connections to your VPS.", all coming from about 200 distinct ip's... My traccar server monitors only 5 devices on port 5001, and my vps provider es VPSDIME.
I suppose this is some kind of attack to port 5001 with the attacker thinking there is some other service on port 5001, my idea is to simple change to other port, maybe 16501.
Another idea is to make database.ignoreUnknown=true and database.registerUnknown=false, but this will affect only database operation, not network connections.
Any other action that I should take ? How to block all connections from this ip's ?
Thanks in advance.
Maybe it's not an attack. With only 3 devices my server also crashed after a few months. Just because of the large connection timeouts.
Check the "Setting connection timeout in Traccar" section here:
https://www.traccar.org/optimization/
You can also check the wrapper log of your server and look for "too many open files". (opt/traccar/logs)
I have been using traccar for months, now my vps provider send me the message "You can see from this list that there were over 100,000 active connections to your VPS.", all coming from about 200 distinct ip's... My traccar server monitors only 5 devices on port 5001, and my vps provider es VPSDIME.
I suppose this is some kind of attack to port 5001 with the attacker thinking there is some other service on port 5001, my idea is to simple change to other port, maybe 16501.
Another idea is to make database.ignoreUnknown=true and database.registerUnknown=false, but this will affect only database operation, not network connections.
Any other action that I should take ? How to block all connections from this ip's ?
Thanks in advance.