[controlsuz123]

Hello everybody.

So my CS:GO server is getting attacked by multi IPs ...
This maybe will help you to understand the problem:

RejectConnection: 95.12.157.180:52181 - Invalid cross-play platform id RejectConnection: 88.234.72.49:54156 - Invalid cross-play platform id RejectConnection: 88.234.72.49:54156 - Invalid cross-play platform id RejectConnection: 88.234.72.49:54156 - Invalid cross-play platform id RejectConnection: 212.175.247.213:54770 - Invalid cross-play platform id RejectConnection: 212.175.247.213:54770 - Invalid cross-play platform id RejectConnection: 212.175.247.213:54770 - Invalid cross-play platform id RejectConnection: 78.175.72.197:52419 - Invalid cross-play platform id RejectConnection: 78.175.72.197:52419 - Invalid cross-play platform id RejectConnection: 78.175.72.197:52419 - Invalid cross-play platform id RejectConnection: 78.172.4.116:50429 - Invalid cross-play platform id RejectConnection: 78.172.4.116:50429 - Invalid cross-play platform id RejectConnection: 78.172.4.116:50429 - Invalid cross-play platform id RejectConnection: 78.161.137.115:52763 - Invalid cross-play platform id RejectConnection: 78.161.137.115:52763 - Invalid cross-play platform id RejectConnection: 78.161.137.115:52763 - Invalid cross-play platform id RejectConnection: 78.186.45.220:53088 - Invalid cross-play platform id RejectConnection: 78.186.45.220:53088 - Invalid cross-play platform id RejectConnection: 78.186.45.220:53088 - Invalid cross-play platform id RejectConnection: 88.228.124.107:50020 - Invalid cross-play platform id RejectConnection: 88.228.124.107:50020 - Invalid cross-play platform id RejectConnection: 88.228.124.107:50020 - Invalid cross-play platform id RejectConnection: 78.181.33.1:50580 - Invalid cross-play platform id RejectConnection: 78.181.33.1:50580 - Invalid cross-play platform id RejectConnection: 78.181.33.1:50580 - Invalid cross-play platform id RejectConnection: 78.169.45.234:51709 - Invalid cross-play platform id RejectConnection: 78.169.45.234:51709 - Invalid cross-play platform id RejectConnection: 78.169.45.234:51709 - Invalid cross-play platform id RejectConnection: 88.239.250.220:51354 - Invalid cross-play platform id RejectConnection: 88.239.250.220:51354 - Invalid cross-play platform id RejectConnection: 88.239.250.220:51354 - Invalid cross-play platform id RejectConnection: 88.233.228.202:54971 - Invalid cross-play platform id RejectConnection: 88.233.228.202:54971 - Invalid cross-play platform id RejectConnection: 88.233.228.202:54971 - Invalid cross-play platform id RejectConnection: 81.213.180.177:54334 - Invalid cross-play platform id RejectConnection: 81.213.180.177:54334 - Invalid cross-play platform id RejectConnection: 81.213.180.177:54334 - Invalid cross-play platform id RejectConnection: 88.248.230.39:53671 - Invalid cross-play platform id RejectConnection: 88.248.230.39:53671 - Invalid cross-play platform id RejectConnection: 88.248.230.39:53671 - Invalid cross-play platform id RejectConnection: 78.190.209.222:51210 - Invalid cross-play platform id RejectConnection: 78.190.209.222:51210 - Invalid cross-play platform id RejectConnection: 78.190.209.222:51210 - Invalid cross-play platform id RejectConnection: 212.156.44.215:54022 - Invalid cross-play platform id RejectConnection: 212.156.44.215:54022 - Invalid cross-play platform id RejectConnection: 212.156.44.215:54022 - Invalid cross-play platform id RejectConnection: 88.230.67.125:52358 - Invalid cross-play platform id RejectConnection: 88.230.67.125:52358 - Invalid cross-play platform id RejectConnection: 88.230.67.125:52358 - Invalid cross-play platform id RejectConnection: 95.8.89.118:54705 - Invalid cross-play platform id RejectConnection: 95.8.89.118:54705 - Invalid cross-play platform id RejectConnection: 95.8.89.118:54705 - Invalid cross-play platform id RejectConnection: 88.231.201.132:52180 - Invalid cross-play platform id RejectConnection: 88.231.201.132:52180 - Invalid cross-play platform id RejectConnection: 88.231.201.132:52180 - Invalid cross-play platform id RejectConnection: 95.15.126.48:50273 - Invalid cross-play platform id RejectConnection: 95.15.126.48:50273 - Invalid cross-play platform id RejectConnection: 95.15.126.48:50273 - Invalid cross-play platform id RejectConnection: 95.1.16.142:51938 - Invalid cross-play platform id RejectConnection: 95.1.16.142:51938 - Invalid cross-play platform id RejectConnection: 95.1.16.142:51938 - Invalid cross-play platform id RejectConnection: 88.225.103.31:54567 - Invalid cross-play platform id RejectConnection: 88.225.103.31:54567 - Invalid cross-play platform id RejectConnection: 88.225.103.31:54567 - Invalid cross-play platform id RejectConnection: 78.179.183.204:53014 - Invalid cross-play platform id RejectConnection: 78.179.183.204:53014 - Invalid cross-play platform id RejectConnection: 78.179.183.204:53014 - Invalid cross-play platform id RejectConnection: 78.168.83.253:53992 - Invalid cross-play platform id RejectConnection: 78.168.83.253:53992 - Invalid cross-play platform id RejectConnection: 78.168.83.253:53992 - Invalid cross-play platform id RejectConnection: 78.163.13.180:51131 - Invalid cross-play platform id RejectConnection: 78.163.13.180:51131 - Invalid cross-play platform id RejectConnection: 78.163.13.180:51131 - Invalid cross-play platform id IP rate limit under distributed packet load (2392 buckets, 15307 global count), rejecting 85.111.16.250:50531.

I tried lots querycache plugins extentions everything.. is there a any solution or is there a any script for ban these ip's ???

[bongotrommler]

OS?

If linux you can manual block them with iptables
>> iptables -A INPUT -s 78.163.13.180 -j DROP
You'll need root access!

If you want to automate that, pls take a look @ "deflate"

root@localhost:~/deflate# wget http://www.inetbase.com/scripts/ddos/install.sh root@localhost:~/deflate# chmod 0700 install.sh root@localhost:~/deflate# ./install.sh root@localhost:~/deflate# vi /usr/local/ddos/ddos.conf

@.conf u can use
NO_OF_CONNECTIONS=60
APF_BAN=0 (set to 1 if u use APF)
KILL=1
mail=if u need ... if not dnt set.

and /usr/local/ddos/ddos.sh -c for autostart.

Peace.

LexOzZborn

[controlsuz123]

Originally Posted by bongotrommler OS? If linux you can manual block them with iptables >> iptables -A INPUT -s 78.163.13.180 -j DROP You'll need root access! If you want to automate that, pls take a look @ "deflate" @.conf u can use NO_OF_CONNECTIONS=60 APF_BAN=0 (set to 1 if u use APF) KILL=1 mail=if u need ... if not dnt set. and /usr/local/ddos/ddos.sh -c for autostart. Peace. LexOzZborn

firstly thank you very much for your interested.

yes I'm on the linux server

but there ip's are always changing because it's spoofing attack..

[LaRoVV66]

I have the same problem.

pls help.

[Neuro Toxin]

I wonder which game the attack is redirecting from.

[nikooo777]

any chances you can move to OVH?
otherwise there isn't much you can do besides blocking new connections during an attack and hoping the DDoS is not greater than your connection.

[LaRoVV66]

How can fix this shit attack ?

[spumer]

If it's A2S attack you can try setup:
1. SourceQueryCache service [https://github.com/blastehh/SourceQueryCacheMono]
2. Kernel redirection to SQC [https://forums.alliedmods.net/showthread.php?t=297237]

And servers will be protected.

Can you dump traffic and post here? You can use tcpdump

[controlsuz123]

Originally Posted by spumer If it's A2S attack you can try setup: 1. SourceQueryCache service [https://github.com/blastehh/SourceQueryCacheMono] 2. Kernel redirection to SQC [https://forums.alliedmods.net/showthread.php?t=297237] And servers will be protected. Can you dump traffic and post here? You can use tcpdump

attack is coming with 23 legnt 25 length sometimes 9 lenght you can see. thank you for your answer..

so how can I start this script on linux ??

https://github.com/blastehh/SourceQueryCacheMono

could you show me any article about this, I don't know how to start on linux

[controlsuz123]

Originally Posted by nikooo777 any chances you can move to OVH? otherwise there isn't much you can do besides blocking new connections during an attack and hoping the DDoS is not greater than your connection.

hi niko ovh mean soyoustart is ok ? or directly from ovh gameservers ? because you know soyoustart game servers as well..