Flood attack - any ideas for protection?

Flood attack - any ideas for protection? - Printable Version

+- SA-MP Forums Archive (https://sampforum.blast.hk)
+-- Forum: SA-MP Server (https://sampforum.blast.hk/forumdisplay.php?fid=6)
+--- Forum: Server Support (https://sampforum.blast.hk/forumdisplay.php?fid=19)
+--- Thread: Flood attack - any ideas for protection? (/showthread.php?tid=581802)

Flood attack - any ideas for protection? - bobsona - 15.07.2015

Hello, this is the attack:

Code:

[15:44:19] [chat] [BlackBull]: ưƲƵƱƸƸƸƳƲƶ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƴưƸƸƲưƳƸƲ
[15:44:19] [chat] [BlackBull]: ƴƶƴưƲƴƵƶƱƷ[ƕ._   STOOOPFLOOD   _.Ն]Ƹ ƴƵƳƴƴƴƲƳƸ
[15:44:19] [chat] [BlackBull]: ƸƵƴƵƸƳƱƹƳƵ[ƕ._   STOOOPFLOOD   _.Ն]Ʊ ƲưƹƶƵƷƱƶƴ
[15:44:19] [chat] [BlackBull]: ƱưƱƸƹƹƹƹƸƸ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƱƱƳƲƷƴưƶƷ
[15:44:19] [chat] [BlackBull]: ƶƳƹƴƱƷƶƱưƵ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ưƷƲƸƲƷƶƴƶ
[15:44:19] [chat] [BlackBull]: ƹƲƵƷƱƶƱưƴƳ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƱƱƹưưƹƴƲƶ
[15:44:19] [chat] [BlackBull]: ƳƵƳưƸƱƹƱƲƸ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ưƹƹƴƹưƸƹƹ
[15:44:19] [chat] [BlackBull]: ƳƳƳƷƵƵưƸƱƹ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƲƴƳƸƷƷƱƲƸ
[15:44:19] [chat] [BlackBull]: ƳƸƴƹƶƵƹƷưƲ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƲƴƷƹƱƳƶƷư
[15:44:19] [chat] [BlackBull]: ƸƶƶƷƹƸƹƶƹƶ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƶƹƶƲƶƵƸƸƸ
[15:44:19] [chat] [BlackBull]: ƵƶƴƳƳƱƶƶƱƲ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƵƶƹƵƵƷƵƲƷ
[15:44:19] [chat] [BlackBull]: ƵƸƴƲƶƱƹƹƱƵ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƵưƲƱƲƴƱƸƸ
[15:44:19] [chat] [BlackBull]: ưƹƱƲƹƹƲưƲƳ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƶƸƶƵưƹƱƲư
[15:44:19] [chat] [BlackBull]: ƵƷƶƶƴƸưƶƸư[ƕ._   STOOOPFLOOD   _.Ն]ư ƸƱƶƴƶƱưƱƶ
[15:44:19] [chat] [BlackBull]: ƲƶƲƲƲƱƴƷƱƹ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƳƷưƶƸƶƵưƶ
[15:44:19] [chat] [BlackBull]: ƳƶƱƱƶƱưƹƲƹ[ƕ._   STOOOPFLOOD   _.Ն]Ƴ ưƷƶƱƱƶƳƴƷ
[15:44:19] [chat] [BlackBull]: ƵƸƴƱƲƲưƹƳƵ[ƕ._   STOOOPFLOOD   _.Ն]Ƹ ƵƸƸƱƵƹƸƸƷ
[15:44:19] [chat] [BlackBull]: ƲƷƲƴƳƴƳƹƵƴ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ƵƹưƶƴƷƵƸƶ
[15:44:19] [chat] [BlackBull]: ƳƵƴƴưƴưƵưƵ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƷƶƱƳƹƳƶƵƹ
[15:44:19] [chat] [BlackBull]: ƸƴưƹƸƵƸƱƲƱ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ưƴƳƳƶƸƵƵƵ
[15:44:19] [chat] [BlackBull]: ƱưưƴƶƸƹƷƸƲ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƷƴƶƳƴƲƵƳƸ
[15:44:19] [chat] [BlackBull]: ƱƴƲƵƶƸƱƹƲƶ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƹƸƳưƲƵƹƲƹ
[15:44:19] [chat] [BlackBull]: ƸƸƵƵƲƵƲƶƲƳ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ƶƲƵƲƹƹƳưƴ
[15:44:19] [chat] [BlackBull]: ƴƳƱƴƳưƷưưƹ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƴƵƷƵƹƹƲƹƳ
[15:44:19] [chat] [BlackBull]: ƸƹƹƱƳƴƲƸƸƳ[ƕ._   STOOOPFLOOD   _.Ն]Ƹ ƳƲƵƷƳưƷƶƲ
[15:44:19] [chat] [BlackBull]: ƵƳƳƴƸưƲƱƹƱ[ƕ._   STOOOPFLOOD   _.Ն]Ƴ ưƹƲưƶƹƴƳƷ
[15:44:19] [chat] [BlackBull]: ƲƱƱƵƹƸƸƸƷƵ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƳƷƵƳƱƳƵƷƹ
[15:44:19] [chat] [BlackBull]: ƶƶƲƸƷƸƸƱƴƶ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƹƴƳƵưƸƷƱƸ
[15:44:19] [chat] [BlackBull]: ƲƵƶƹƸƶƵưƸư[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƳƳƲưƵƳƶƱƳ
[15:44:19] [chat] [BlackBull]: ƲƷưƱƳƴƷƳƱƶ[ƕ._   STOOOPFLOOD   _.Ն]Ʊ ƲƶƲƲƴƲưƶƴ
[15:44:19] [chat] [BlackBull]: ƷƳƱƴƴưƵƲƹƲ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƹƵƱƷƶƲưưƱ
[15:44:19] [chat] [BlackBull]: ƲƱƱƱƴƸƳƵƶƶ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƴƲƹƲƱƴƲưư
[15:44:19] [chat] [BlackBull]: ƹưƸƹƸƸƸƲưƳ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƸƳƹƳưƶƳƶư
[15:44:19] [chat] [BlackBull]: ƵƷƷƲƲƸƷưƷƳ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƲƷƹƵƹƹưƸƶ
[15:44:19] [chat] [BlackBull]: ƶưƴƹƷƱƸƹưƱ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ưưƷƶƹƱƲƷƶ
[15:44:19] [chat] [BlackBull]: ƵƱưƵƵƱƹƷƹƱ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ƷƲƸƳƷƷƹƲư
[15:44:19] [chat] [BlackBull]: ƱƶƵƳƳƸƲƲƵƵ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƱƶƱƱƵưƸƱƳ
[15:44:19] [chat] [BlackBull]: ƹƳƹƸƵƵƴƹƶƳ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƶƹưƹƸƴƸƴƴ
[15:44:19] [chat] [BlackBull]: ƹƹƶƷƳƴƲƳƳƵ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƴƴƴƶƶưƹƷƸ
[15:44:19] [chat] [BlackBull]: ƶƳƱƱưƲƳƹƶư[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƱƶƸƸƷƹƲƳƶ
[15:44:19] [chat] [BlackBull]: ƷƲƱƹưƷƵƲƲƵ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƱƵưƶƲƳưƱƹ
[15:44:19] [chat] [BlackBull]: ƹƳƶƶƳƸƲƱƱƴ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƳƸƹƶƳƳƵưƶ
[15:44:19] [chat] [BlackBull]: ƲƲƵƹưưƲƱƳƱ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƹƵƲƷưƲưƹư
[15:44:19] [chat] [BlackBull]: ƵƲƲƵƹưƲƴƸƳ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƱƷƶƸƴƸƵƷƹ
[15:44:19] [chat] [BlackBull]: ƸƳƵƷƹƴƴưƴƶ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ƶƵƶƴƸƸƵƳƴ
[15:44:19] [chat] [BlackBull]: ƵƵƶƸƲƷƳƲƸƵ[ƕ._   STOOOPFLOOD   _.Ն]ư ƹƶưƸƱƴƲƶƴ
[15:44:19] [chat] [BlackBull]: ƱƸƲƶƲƲƸưƳƴ[ƕ._   STOOOPFLOOD   _.Ն]Ƴ ƹƷƵƹƴƶƷƱƸ
[15:44:19] [chat] [BlackBull]: ƲƷƶƲƳưƱƸƵƵ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƷƲƷƳƴƵƴƲư
[15:44:19] [chat] [BlackBull]: ƴƳƱƲƵƶƲƱƱƶ[ƕ._   STOOOPFLOOD   _.Ն]ư ƵưƵƶƸƵƲƸư
[15:44:19] [chat] [BlackBull]: ƵƴƴƹƸƲƵƹƴƸ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƶƲƷƸƸưƲƲƵ
[15:44:19] [chat] [BlackBull]: ƶƲƱƳưƶƶưƹƸ[ƕ._   STOOOPFLOOD   _.Ն]ư ƶưƳƸƹƶƷƳƵ
[15:44:19] [chat] [BlackBull]: ƹưưƲƳƵƴƷưƳ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƹƹƷƷƲƴƵƵƹ
[15:44:19] [chat] [BlackBull]: ƹƹƴƹƱƱƹƷƲƶ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƱƸƵƴƵƷƸƱƶ
[15:44:19] [chat] [BlackBull]: ƶƷƱƱưưƶƸƷƷ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƷƲưƶƶưƸƸƱ
[15:44:19] [chat] [BlackBull]: ƱƶưƵƳƸƵƲƶƵ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƹƲƲƵƱƶƵƲƷ
[15:44:19] [chat] [BlackBull]: ƲƵƲƴƷƳƳƱưƲ[ƕ._   STOOOPFLOOD   _.Ն]Ƹ ƶưƶƲƸƴƲƴƷ
[15:44:19] [chat] [BlackBull]: ƳƷƸƸưƸƳƸƳƴ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƲƱƳƶƴƱưƳƶ
[15:44:19] [chat] [BlackBull]: ƳƴƶƸƸƹƵưưƸ[ƕ._   STOOOPFLOOD   _.Ն]Ƴ ƸƲƵƶƵƹƶƸƱ
[15:44:19] [chat] [BlackBull]: ưƱƹƹƵƸƳƲƳƱ[ƕ._   STOOOPFLOOD   _.Ն]ư ƱƵƷƱƵưƶƳƱ
[15:44:19] [chat] [BlackBull]: ƱƶƹƴƶƱưưƵƲ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ƳƸƷƵƳƴƹƳƴ
[15:44:19] [chat] [BlackBull]: ƸƳƸƷưƷƱƶƵƷ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƷƶƵƸƱƱƶưƶ
[15:44:19] [chat] [BlackBull]: ƸƴƲƵưƲƵƶƳƸ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƸưưƴƷƸƵƲƴ
[15:44:19] [chat] [BlackBull]: ƳƲƶưƸƵƸƶưƹ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƳƸƵƳưƴƲƶƴ
[15:44:19] [chat] [BlackBull]: ưƶƳƵƴƹƳƵƶƶ[ƕ._   STOOOPFLOOD   _.Ն]Ʊ ƶưƸƷƴƴƵƷư
[15:44:19] [chat] [BlackBull]: ƳƶƶƴƸƴƹƷƶƴ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƵƳƷƵƳƲƵƲư
[15:44:19] [chat] [BlackBull]: ƲƲƴƲƷƹƹưƹƷ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƴƸƷƴƷƱƲƷƵ
[15:44:19] [chat] [BlackBull]: ƴưƲƶƶƴƷưƲƴ[ƕ._   STOOOPFLOOD   _.Ն]ư ƷƷƱƳƵƷƲƳƳ
[15:44:19] [chat] [BlackBull]: ƲƸƷƱƲƶƵƳƵƳ[ƕ._   STOOOPFLOOD   _.Ն]Ʋ ƵƸƸƵƳƳƲƷƴ
[15:44:19] [chat] [BlackBull]: ưƸƸƲƴƶƶƱƴƳ[ƕ._   STOOOPFLOOD   _.Ն]Ʊ ƱƹƹƵƶƸƵƸƸ
[15:44:19] [chat] [BlackBull]: ƷƸƴƳƵƴƱƹƴƸ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƷưƹƶƳƳƳƱƶ
[15:44:19] [chat] [BlackBull]: ƳƹưƱƲƹƱƹƵƱ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ƲƷƲƶƲƷƸƷƳ
[15:44:19] [chat] [BlackBull]: ƱưƶƵƳƲưƱƲƸ[ƕ._   STOOOPFLOOD   _.Ն]Ʒ ƶƷƹƴƶƲƹƶƹ
[15:44:19] [chat] [BlackBull]: ƱƲƲƹƱƹƳƳƳƱ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ưƲưƶƹưƱƶƵ
[15:44:19] [chat] [BlackBull]: ƴƴƶƶƲƸƱƸưƷ[ƕ._   STOOOPFLOOD   _.Ն]ƹ ƷƹƵƳƴƹưƷƳ
[15:44:19] [chat] [BlackBull]: ƴƸƷƸƴƸƸƱƷƷ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ƶƷƵƶƹƱưƹƷ
[15:44:19] [chat] [BlackBull]: ƳƲƲƹƷƴƵưƳƶ[ƕ._   STOOOPFLOOD   _.Ն]ƶ ƹƷƹƴƲƴƹƴƶ
[15:44:19] [chat] [BlackBull]: ƵƶƲƶƳƶƷưƱƴ[ƕ._   STOOOPFLOOD   _.Ն]Ʊ ƵƳƳƹƳƵƶƴƲ
[15:44:19] [chat] [BlackBull]: ƴƲưƴƶƷƵƷƵƷ[ƕ._   STOOOPFLOOD   _.Ն]ư ƵƵƶƵƹƱưưƱ
[15:44:19] [chat] [BlackBull]: ƳƹƱƲƳƵƳƲƵƹ[ƕ._   STOOOPFLOOD   _.Ն]Ƶ ưƷƲưƶƳƸƹƸ
[15:44:19] [chat] [BlackBull]: ƸƹƹƱƸƲƱƴƱƸ[ƕ._   STOOOPFLOOD   _.Ն]ƴ ưƴưƱƵƲƹưƴ

and etc... many requests per second.
Any ideas for protection? After the attack server crashed.

Re: Flood attack - any ideas for protection? - MBilal - 15.07.2015

You need to add Anti Chat Spam.

Re: Flood attack - any ideas for protection? - bobsona - 15.07.2015

Quote:

Originally Posted by MBilal

You need to add Anti Chat Spam.

I have... it kicks the player after 3 warns for spam, but in this case this doesn't help... I don't know why... I see this type of attack for first time...

Re: Flood attack - any ideas for protection? - LordxTyrion - 15.07.2015

/confirmed - its a new attack

Re: Flood attack - any ideas for protection? - MBilal - 15.07.2015

Then its bot attack maybe some people use bot to spam connections / also bot chat spam.

Re: Flood attack - any ideas for protection? - SickAttack - 15.07.2015

What is this attack about? Spamming messaging?

Re: Flood attack - any ideas for protection? - Michael B - 15.07.2015

Quote:

Originally Posted by SickAttack

What is this attack about? Spamming messaging?

Apparently yes. As far as I an see, is a player who is spamming, not a bot (maybe if I'm wrong). After a quick research, it sems that it sends a fake killing bot message / text spam.
As far as I saw, it it related with "raksamp" and uses some special commands in order to enable the cheat (it may have own console, or server side commands).

Re: Flood attack - any ideas for protection? - SickAttack - 15.07.2015

Quote:

Originally Posted by Michael B

Can't it just be prevented with adding an anti spam system?

Re: Flood attack - any ideas for protection? - J0sh... - 15.07.2015

Quote:

Originally Posted by LordxTyrion

/confirmed - its a new attack

Um, you would know that people have been doing this for a fair number of years now, it isn't new, and it isn't a attack, it's just spam, get a anti spam system and you're golden.

Re: Flood attack - any ideas for protection? - Michael B - 16.07.2015

Quote:

Originally Posted by SickAttack

Can't it just be prevented with adding an anti spam system?

The guy who has that problem stated that his server has an anti-spam system, therefore, the cheat may have methods to avoid getting disconnected from it.
So far I didn't encounter the cheat personally, so I am not experienced with it.

Re: Flood attack - any ideas for protection? - Jake187 - 16.07.2015

Quote:

Originally Posted by LordxTyrion

/confirmed - its a new attack

It's not a new attack this is extremely old and has been done for years this is why there is such things as anti-spam scripts.

Re: Flood attack - any ideas for protection? - Abagail - 16.07.2015

This is not an attack, it does not harm the server. Moreever more importantly it is a part of a spammer in a new ******(I can PM you the name if needed), you should be fine automatically banning the player if they type the words "STOOPFLOOD" as it is never really used otherwise(though you might want to check if they spam it).

Re: Flood attack - any ideas for protection? - Neavyy - 17.07.2015

-deleted-

Re: Flood attack - any ideas for protection? - Omirrow - 17.07.2015

Have you checked the IP addresses? If so, what are they like; for example if they are connecting from the same IP you can basically block them.

Re: Flood attack - any ideas for protection? - bobsona - 19.07.2015

I blocked that player by IP, but this type of attack crashed my server...
I said that I have anti-spam protection, it kicks the normal players for spam in the chat, but this player - not.
I don't know why.
I think that's new attack.

Re: Flood attack - any ideas for protection? - ]Rafaellos[ - 20.07.2015

This happens to me also, it seems that it does bypass Anti-Spam scripts so stop mention it.

Re: Flood attack - any ideas for protection? - hossa - 20.07.2015

Do some debug under OnPlayerText and see when he spams if the function is even called.

It would be f**ked up if it doesn't.