SA-MP Forums

Go Back   SA-MP Forums > SA-MP Server > Server Support

Reply
 
Thread Tools Display Modes
Old 19/03/2019, 12:31 PM   #1
Variable™
Gangsta
 
Join Date: Jul 2015
Posts: 802
Reputation: 175
Default Servers are getting attacked

Hello, what is this?
http://monitor.sacnr.com/server-1799831.html
http://monitor.sacnr.com/server-1807615.html
http://monitor.sacnr.com/server-1808632.html
Even my own server is attacked. Look at the 24h graphs in each server they're all messed up. Players see servers as offline while they're online and I don't understand how to solve this thing.

Edit: This server http://monitor.sacnr.com/server-1809072.html isn't getting attacked while all it's rivals including myself are getting attacked..
__________________
Discord | Website

Last edited by Variable™; 19/03/2019 at 12:38 PM. Reason: More info
Variable™ is offline   Reply With Quote
Old 19/03/2019, 12:54 PM   #2
Logic_
Banned
 
Join Date: Jun 2015
Posts: 1,514
Reputation: 305
Default Re: Servers are getting attacked

This server needs to get blacklisted.
Logic_ is offline   Reply With Quote
Old 19/03/2019, 01:08 PM   #3
MustangV10
Big Clucker
 
Join Date: Dec 2011
Posts: 65
Reputation: 26
Default Re: Servers are getting attacked

Yes, there appears to be a query flood attack targeting all(?) servers. I saw someone made a post about it on the SA:MP forum yesterday, but it was deleted. I can only assume unaffected servers are filtering it in some way.
MustangV10 is online now   Reply With Quote
Old 19/03/2019, 01:50 PM   #4
Hazon
Big Clucker
 
Hazon's Avatar
 
Join Date: May 2018
Location: Who cares ?
Posts: 123
Reputation: 11
Default Re: Servers are getting attacked

I've even see they have bots on the server you shown below. We got some jelaous bastards.
Hazon is offline   Reply With Quote
Old 19/03/2019, 02:38 PM   #5
NeXTGoD
Big Clucker
 
NeXTGoD's Avatar
 
Join Date: Jul 2018
Posts: 88
Reputation: 4
Default Re: Servers are getting attacked

the server that I play everyday is involved with this unfortunately (ง'̀-'́)ง
__________________
.

xSF Reborn:


.
NeXTGoD is offline   Reply With Quote
Old 19/03/2019, 02:41 PM   #6
ColorHost-Kevin
High-roller
 
ColorHost-Kevin's Avatar
 
Join Date: May 2011
Location: Hollywood,MD
Posts: 1,603
Reputation: 138
Default Re: Servers are getting attacked

Yeah this seems to be happening quite frequently as of late from what i can tell. Very unfortunate but blockable.
__________________
█| Colorhost Premium Web Hosting And Cheap SAMP Servers in US and NL! 100 Slots For $7.95! With Hosted tab for $25.35!
█| Offering Services to customers since 2009! - Now Supporting Direct Credit Card Payments and Bitcoin!
█| Check us out today! https://colorhost.co
ColorHost-Kevin is offline   Reply With Quote
Old 19/03/2019, 04:51 PM   #7
Variable™
Gangsta
 
Join Date: Jul 2015
Posts: 802
Reputation: 175
Default Re: Servers are getting attacked

The masterlist was down some minutes ago.
__________________
Discord | Website
Variable™ is offline   Reply With Quote
Old 19/03/2019, 05:29 PM   #8
nickdodd25
Huge Clucker
 
nickdodd25's Avatar
 
Join Date: Jan 2012
Location: Unknown
Posts: 445
Reputation: 109
Default Re: Servers are getting attacked

Quote:
Originally Posted by ColorHost-Kevin View Post
Very unfortunate but blockable.
How do you block such a wide range of spoofed ips??
__________________
Nick
nickdodd25 is offline   Reply With Quote
Old 20/03/2019, 09:59 AM   #9
Kalcor
SA-MP Developer
 
Join Date: Apr 2005
Posts: 1,015
Reputation: 2804
Lightbulb Re: Servers are getting attacked

I've been trying to bait the attacker in to attacking my server, but it seems he is using a static list.

Try setting this in the server.cfg
Code:
sleep 1
Then restart the server. That will increase the speed of the raknet thread, which may help deal with the packet flood.
Kalcor is offline   Reply With Quote
Old 20/03/2019, 10:59 AM   #10
denNorske
Gangsta
 
denNorske's Avatar
 
Join Date: Nov 2011
Location: Oslo, Norway
Posts: 788
Reputation: 95
Default Re: Servers are getting attacked

Quote:
Originally Posted by Kalcor View Post
I've been trying to bait the attacker in to attacking my server, but it seems he is using a static list.

Try setting this in the server.cfg
Code:
sleep 1
Then restart the server. That will increase the speed of the raknet thread, which may help deal with the packet flood.
Let me know if you need any furhter logs or so.

Wouldn't lowering the sleep value (assuming it's higher as default) causing the server to send out UDP packets at a higher rate - such as we can see in reflection-attacks? We are basically responding to hosts that never asked for packets.

Idk much about thresholds for host providers, assuming they catch up on this.

EDIT: Readers; enabled the setting in the config; noticeable higher CPU load (+10-15%) but no noticable effect on the querying unfortunately. Combine this with my proxy which I'll release later and hope we can increase the responsiveness.
denNorske is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Getting attacked, any help? Sjn Server Support 5 30/03/2017 09:57 PM
Servers being attacked pls help me Arjanz Server Support 14 04/05/2014 08:48 AM
servers getting attacked !! cvnr0 Server Support 7 07/01/2014 02:51 PM
Bad RCON attempts - servers getting 'attacked' by the same IP Jstylezzz Server Support 18 15/05/2013 08:35 AM
Who attacked Doman Help Archive 0 28/03/2010 08:43 PM


All times are GMT. The time now is 11:34 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.