Server being hit with mass spoofed logins

So, my server, legendsmc.dyndns.org, is currently being hit with a massive.... like... spoofed login attack.

I typically have 10-30 players online, I now have 105 online, my max set. The logins are all from the same IP's. I began banning those IP's, but they just end up rotating to a new set.

Other than white list, anything I can do to combat this? It is not actually messing my server up. No lag or anything, but it is quite annoying....

i don't want to have to implement a whitelist, any alternatives?

 

isn't there a max-connections setting in server.properties or bukkit.yml?
You could use NoCheatPlus to throttle the maximum amount of logins every second.
There are definitly plugins to prevent people logging in multiple times from the same IP.

And are you using online mode? You need to set online-mode=true for a safe server

 

I have bukkit.yml set to monitor connection logs, called connection throttle. Perhaps i will turn it up, currently at 4000 ms.

I also have nocheatplus, but do not know of an option for multiple log-ins... i will look it up thanks!

 

Code:

online-mode=true