SA-MP Forums

SA-MP Forums (https://forum.sa-mp.com/index.php)
-   Server Support (https://forum.sa-mp.com/forumdisplay.php?f=19)
-   -   Servers are getting attacked (https://forum.sa-mp.com/showthread.php?t=665016)

Variable™ 19/03/2019 12:31 PM

Servers are getting attacked
 
Hello, what is this?
http://monitor.sacnr.com/server-1799831.html
http://monitor.sacnr.com/server-1807615.html
http://monitor.sacnr.com/server-1808632.html
Even my own server is attacked. Look at the 24h graphs in each server they're all messed up. Players see servers as offline while they're online and I don't understand how to solve this thing.

Edit: This server http://monitor.sacnr.com/server-1809072.html isn't getting attacked while all it's rivals including myself are getting attacked..

Logic_ 19/03/2019 12:54 PM

Re: Servers are getting attacked
 
This server needs to get blacklisted.

MustangV10 19/03/2019 01:08 PM

Re: Servers are getting attacked
 
Yes, there appears to be a query flood attack targeting all(?) servers. I saw someone made a post about it on the SA:MP forum yesterday, but it was deleted. I can only assume unaffected servers are filtering it in some way.

Hazon 19/03/2019 01:50 PM

Re: Servers are getting attacked
 
I've even see they have bots on the server you shown below. We got some jelaous bastards.

NeXTGoD 19/03/2019 02:38 PM

Re: Servers are getting attacked
 
the server that I play everyday is involved with this unfortunately (ง'̀-'́)ง

ColorHost-Kevin 19/03/2019 02:41 PM

Re: Servers are getting attacked
 
Yeah this seems to be happening quite frequently as of late from what i can tell. Very unfortunate but blockable.

Variable™ 19/03/2019 04:51 PM

Re: Servers are getting attacked
 
The masterlist was down some minutes ago.

nickdodd25 19/03/2019 05:29 PM

Re: Servers are getting attacked
 
Quote:

Originally Posted by ColorHost-Kevin (Post 4089574)
Very unfortunate but blockable.

How do you block such a wide range of spoofed ips??

Kalcor 20/03/2019 09:59 AM

Re: Servers are getting attacked
 
I've been trying to bait the attacker in to attacking my server, but it seems he is using a static list.

Try setting this in the server.cfg
Code:

sleep 1
Then restart the server. That will increase the speed of the raknet thread, which may help deal with the packet flood.

denNorske 20/03/2019 10:59 AM

Re: Servers are getting attacked
 
Quote:

Originally Posted by Kalcor (Post 4089708)
I've been trying to bait the attacker in to attacking my server, but it seems he is using a static list.

Try setting this in the server.cfg
Code:

sleep 1
Then restart the server. That will increase the speed of the raknet thread, which may help deal with the packet flood.

Let me know if you need any furhter logs or so.

Wouldn't lowering the sleep value (assuming it's higher as default) causing the server to send out UDP packets at a higher rate - such as we can see in reflection-attacks? We are basically responding to hosts that never asked for packets.

Idk much about thresholds for host providers, assuming they catch up on this.

EDIT: Readers; enabled the setting in the config; noticeable higher CPU load (+10-15%) but no noticable effect on the querying unfortunately. Combine this with my proxy which I'll release later and hope we can increase the responsiveness.


All times are GMT. The time now is 01:48 AM.

Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.