SA-MP Forums

Go Back   SA-MP Forums > SA-MP Server > Server Support

Reply
 
Thread Tools Display Modes
Old 28/05/2020, 10:40 PM   #1
admn1337vps
Little Clucker
 
Join Date: May 2020
Posts: 1
Reputation: 0
Default SAMP SERVER 0.3.7-R2 [DDOS THEN CRASH]

Hello, i've been experiencing this issue for last 2 weeks.
So let me explain, i have server with 500 players.
One got got so angry on me that he ddos constantly.
Not actually DDoS i'am on OVH game firewall, with priv8 iptables.
So problem is first time he was sending request cookie flood.
No bandwith on iftop,vnstat, etc.. no cpu usage.
Using maxmind i blocked all ips from other country except Balkan.
I've found few firewalls for cookie method that worked fine.
We don't have much hosting providers here.
Everything was good until now.

He got angry again now he somehow got IPs from our country.
He how sending even less bandwith almost i can't notice it from actual players.
I've tried wireshark analyze it little bit nothing actually abnormal.
Nothing.
Problem is first server starts to lag in client, like he charging something.
Then server suddenly starts dropping players.
Then server crashes
Code:
[00:12:34] [debug] Server crashed due to an unknown error
[00:12:34] [debug] Native backtrace:
[00:12:34] [debug] #0 f7a64e8b in _ZN10StackTraceC1EPv () from plugins/crashdetect.so
[00:12:34] [debug] #1 f7a5dbcf in _ZN11CrashDetect20PrintNativeBacktraceERSoPv () from plugins/crashdetect.so
[00:12:34] [debug] #2 f7a5edbc in _ZN11CrashDetect20PrintNativeBacktraceEPv () from plugins/crashdetect.so
[00:12:34] [debug] #3 f7a5f226 in _ZN11CrashDetect11OnExceptionEPv () from plugins/crashdetect.so
[00:12:34] [debug] #4 f7a64adc in ?? () from plugins/crashdetect.so
[00:12:34] [debug] #5 f7f4f0a0 in __kernel_rt_sigreturn () from linux-gate.so.1
[00:12:34] [debug] #6 f79f6b98 in _ZN8Streamer17processTextLabelsER6PlayerRKSt6vectorIN5boost13intrusive_ptrI4CellEESaIS6_EE () from plugins/streamer.so
[00:12:34] [debug] #7 f7a0486b in _ZN8Streamer19performPlayerUpdateER6Playerb () from plugins/streamer.so
[00:12:34] [debug] #8 f7a05e9b in _ZN8Streamer20startAutomaticUpdateEv () from plugins/streamer.so
[00:12:34] [debug] #9 f7a06065 in ProcessTick () from plugins/streamer.so
[00:12:34] [debug] #10 080d1ce2 in ?? () from ./samp03svr
[00:12:34] [debug] #11 080aef3a in ?? () from ./samp03svr
[00:12:34] [debug] #12 080aa13a in ?? () from ./samp03svr
[00:12:34] [debug] #13 f7ab1e81 in __libc_start_main () from /lib/i386-linux-gnu/libc.so.6
[00:12:34] [debug] #14 0804b4e1 in ?? () from ./samp03svr
What could be problem? nothing abnormal that i can see? also he posted on facebok "SEE YOU AGAIN I'VE GOT NEW METHOD"

How to pervent this since i got no bandwith , nothing , no unusual IPs.
And how the fuck server crashes from this?
Server worked long time ago, worked for 1year no problems,i'am pretty sure it's not about our gamemode.
admn1337vps is offline   Reply With Quote
Old 29/05/2020, 04:07 AM   #2
Uberanwar
Gangsta
 
Uberanwar's Avatar
 
Join Date: May 2012
Location: Malaysia
Posts: 893
Reputation: 63
Default Re: SAMP SERVER 0.3.7-R2 [DDOS THEN CRASH]

Do you use SKY plugin? The older version of SKY plugin has a known exploit. Get the latest version at https://github.com/oscar-broman/SKY
Uberanwar is offline   Reply With Quote
Old 29/05/2020, 10:05 AM   #3
jasperschellekens
High-roller
 
jasperschellekens's Avatar
 
Join Date: Dec 2016
Location: Holland
Posts: 1,080
Reputation: 126
Default Re: SAMP SERVER 0.3.7-R2 [DDOS THEN CRASH]

If you know who the person is you can look into dropping charges against them as hacking/ddosing is illegal. He might get a nice sentence from that, maybe you can also scare him off with that. Tell him that you'll press charges if he continues. If he doesn't want to go to jail he quits.
__________________
If you want to have your own custom script, or even want to have one of our already released scripts, join our SCRIPTING SERVICES DISCORD, or send me a private message!


Undead Wasteland Roleplay - The year is 1996. San Andreas is a wasteland ruled by the undead. the once so glorius landscape of San Andreas, is now a shattered decayed place that is only a vague memory of the world as we used to know it.
Discord - Website
jasperschellekens is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Help DDOS Samp server skiplovebra Scripting Help 9 14/09/2015 01:42 AM
SERVER HELP CLOSING [WTF IS THIS] LINUX BUG MAyBE SAMP BEING DDOS!!!!! PawnOX Server Support 5 26/09/2014 02:16 PM
How to stop DDOS SAMP SERVER jesdynguyen Scripting Help 10 17/05/2014 02:59 PM
SAMP Server's getting DDoS'd Ballu Miaa Server Support 36 23/01/2013 05:15 AM
DOS/DDOS-like attack but only for SAMP server? Westingham Server Support 4 31/07/2012 02:37 AM


All times are GMT. The time now is 03:56 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.