SA-MP Forums

Go Back   SA-MP Forums > SA-MP Server > Server Support

Reply
 
Thread Tools Display Modes
Old 19/05/2020, 02:54 PM   #1
Oriovo
Little Clucker
 
Join Date: Feb 2017
Posts: 4
Reputation: 0
Default Do you know this attack

Hi.

Do you know of an attack where you freeze the entire traffic of the machine for a few seconds-minutes?

I am using an authentication system for my users, so I suppose that the attack does not fully enter, the maximum attack I have received is 500MiB / s, however, the machine where the server is does not completely fall, simply the traffic freezes during a time frame.

I try to analyze the traffic during the attack but I can't detect anything strange, I can't see udp flood, attack tcp, etc.

The tcp traffic is theoretically only allowed if it comes from my ip address or from the ip of the authenticator page.

Have they received an attack that happens to you the same?

Thanks
Oriovo is offline   Reply With Quote
Old 19/05/2020, 03:34 PM   #2
Oriovo
Little Clucker
 
Join Date: Feb 2017
Posts: 4
Reputation: 0
Default Re: Do you know this attack

After a while the attack starts the server restarts, I imagine this happens because the VPS traffic freezes, that is, it stops receiving traffic.
There is no lag on the SA-MP server during the attack.

If at the moment the server restarts I am connected with SSH, it is also disconnected.

After a few minutes the VPS responds again.
Oriovo is offline   Reply With Quote
Old 19/05/2020, 03:50 PM   #3
Oriovo
Little Clucker
 
Join Date: Feb 2017
Posts: 4
Reputation: 0
Default Re: Do you know this attack

The SA-MP server logs show nothing, and my provider's firewall only shows me the strength of the attack which has reached 500MiB/s at its highest point, now the server restarts with just 50MiB / s or less.

EDIT:
In some posts from a few years ago I see that there were certain people who suffered from a very similar problem:
1) https://forum.sa-mp.com/showthread.php?t=652973
Only he does not disconnect SSH, but I do.
Oriovo is offline   Reply With Quote
Old 19/05/2020, 04:07 PM   #4
InglewoodRoleplay
Big Clucker
 
Join Date: Oct 2013
Posts: 67
Reputation: 8
Default Re: Do you know this attack

Not much you can do about this, probably a bunch of script kiddies running a booter, best bet is placing the game-server behind some provider with actual DDoS protection such as OVH or Limestone Networks. Kimsufi which is a tier off OVH also has affordable VPS's. Other than that you can try an OVH reseller, which may or may not be more expensive since they need to make profit. There's also the option of putting your VPS behind some sort of GRE tunnel, there are a few providers around that offer this for an affordable price, only disadvantage is that client IPs may all be the same as their traffic is going through the tunnel and then to your server.
__________________
Code:
xor eax, eax
call eax
InglewoodRoleplay is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Is it the attack? Urukhay Server Support 8 12/02/2015 08:36 PM
attack sirvanec Scripting Help 1 18/01/2015 09:26 PM
plz help attack br155 Server Support 4 23/03/2014 06:28 PM
hi why? is that attack or what? ReD_HunTeR Server Support 2 07/01/2014 02:04 PM
Bot attack Radess Server Support 3 06/01/2014 07:35 PM


All times are GMT. The time now is 03:03 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.