Samp Exploit? Attack? What? - Printable Version

Samp Exploit? Attack? What? - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: Samp Exploit? Attack? What? (/showthread.php?tid=574924)

Samp Exploit? Attack? What? - Lumabd - 22.05.2015

Well... I am recibing an strange attack when i recibe this attack my server doesnt goes down... The ping refresh but the players were not aviable to connect to the server... My hoster say`s than are packets of 10 mb ... and are causing this... Recomendation? My hoster is tired blocking ips they change it and attacks again...

This doesn`t happends to me alone it happends to other communities too...

Sorry for bad english

http://imgur.com/BbdYj6H

We are in a NFO. (We was in OVH and it was a shit the server didnt respond there and the query dissapear for days...)

Re: Samp Exploit? Attack? What? - xF4Life - 22.05.2015

i have this same problem..

Re: Samp Exploit? Attack? What? - Beckett - 22.05.2015

Buy a host which has DDoS protection or wait for the attack to stop, there's nothing else you can do.

Re: Samp Exploit? Attack? What? - Crystallize - 22.05.2015

What are your VPS's specs or w/e you're using?
Though the other way either your script has the worst anti-cheat ever or it doesn't have one , I think this attack is using invisible bots

Re: Samp Exploit? Attack? What? - icra - 22.05.2015

If it's how Wizzard2H says,

just check in OnPlayerConnect if there's someone other connected with the same ip address and kick him if that's true.

Re: Samp Exploit? Attack? What? - Jake187 - 22.05.2015

http://www.soyoustart.com/ie/innovat.../game-servers/

http://www.availability.ovh/

Re: Samp Exploit? Attack? What? - Phaze - 22.05.2015

Are you using windows? I hope you know there is a windows bug where someone can drop your server with a slight packet attack. Easy fix for it ofc.

Re: Samp Exploit? Attack? What? - Xandelee - 24.05.2015

I have this problem too for months now, my hoster said its a bunch of botnets attacking, it doesn't happens with too much people it's almost like an unknown attack around here, it explore UDP + Samp security breaches to make your server frozen, ddos protection doesn't get these attacks because they are too small in scale and they Always says it's an problem with the aplication (layer 7 attack) and they doesn't cover that... and 40mb/s its suficient to freeze your server (explanation from my hoster) you can get ddos protection (that you problably already have) like i did several times and wasted my money and it will not work against this, it's something that need to be assorted especificaly for the SA-MP application (i believe), just don't know how.

(Before someone thinks its an ordinary bot attack the connections doesn't even show on server.log at all at least in my case)

Re: Samp Exploit? Attack? What? - Xandelee - 24.05.2015

The attack started here
There are international ips sending packets to my vps and the network is so slow that its almost frozen, ive already turned off samp because the ping scaled to 5000+, ddos protection don't do anything against that
http://postimg.org/image/jqwm3qmp1/
http://postimg.org/image/gdj9wunbd/

Re: Samp Exploit? Attack? What? - Jake187 - 25.05.2015

Quote:

Originally Posted by Xandelee

I have this problem too for months now, my hoster said its a bunch of botnets attacking, it doesn't happens with too much people it's almost like an unknown attack around here, it explore UDP + Samp security breaches to make your server frozen, ddos protection doesn't get these attacks because they are too small in scale and they Always says it's an problem with the aplication (layer 7 attack) and they doesn't cover that... and 40mb/s its suficient to freeze your server (explanation from my hoster) you can get ddos protection (that you problably already have) like i did several times and wasted my money and it will not work against this, it's something that need to be assorted especificaly for the SA-MP application (i believe), just don't know how.

(Before someone thinks its an ordinary bot attack the connections doesn't even show on server.log at all at least in my case)

As I recommended already http://www.soyoustart.com/ie/innovat.../game-servers/ these servers have special UDP filters made actually for SA-MP to detect legitimate traffic a whole lot better than the regular protection offered by OVH.