Raised This Month: $30 Target: $400
 7% 

[csgo]new fake player ddos attack


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
1254871688
Junior Member
Join Date: Nov 2016
Old 08-20-2022 , 19:12   [csgo]new fake player ddos attack
Reply With Quote #1

https://imgur.com/a/TI2JMN3


https://imgur.com/a/O1iIaWs

a lot of ips fake players join server to take your slot
server always 64/64 normal players can not join
these fakes players can not use any GetClient in sourcemod on them so you can not kick them use sm_kick

Code:
#include <sourcemod>

public OnPluginStart()
{
	HookEvent("player_connect", OnPlayerConnect);
	HookEvent("player_connect_full", OnPlayerConnectFull);
}
	
public OnPlayerConnect(Handle:event, const String:name[], bool:dontBroadcast)
{
	new ID = GetEventInt(event, "userid");
	new Client = GetClientOfUserId(ID);
	decl String:SteamID[32];
	GetEventString(event, "networkid", SteamID, 32);
	PrintToServer("OnPlayerConnect//////////////// client:%i(#%i)<%s> name:%s", Client, ID, SteamID, name);
}
public OnPlayerConnectFull(Handle:event, const String:name[], bool:dontBroadcast)
{
	new ID = GetEventInt(event, "userid");
	new Client = GetClientOfUserId(ID);
	PrintToServer("OnPlayerConnectFull//////////////// client:%i(#%i)", Client, ID);
}

public bool:OnClientConnect(client, String:rejectmsg[], maxlen)
{
	PrintToServer("OnClientConnect: %s////////////////", rejectmsg);
	return true;
}
public OnClientConnected(client)
{
	decl String:SteamID[32];
	GetClientAuthString(client, SteamID, 32);	
	PrintToServer("OnClientConnected//////////////// client:%i<%s>", client, SteamID);
}
public OnClientPutInServer(client)
{
	PrintToServer("OnClientPutInServer////////////////");
}
public OnClientDisconnect(client)
{
	PrintToServer("OnClientDisconnect////////////////");
}
public OnClientDisconnect_Post(client)
{
	PrintToServer("OnClientDisconnect_Post////////////////");
}
public OnClientAuthorized(client)
{
	decl String:SteamID[32];
	GetClientAuthString(client, SteamID, 32);	
	PrintToServer("OnClientAuthorized//////////////// client:%i<%s> bot:%i", client, SteamID, IsFakeClient(client));
}
public Action:OnClientPreAdminCheck(client)
{
	PrintToServer("OnClientPreAdminCheck////////////////");
}
public OnClientPostAdminFilter(client)
{
	PrintToServer("OnClientPostAdminFilter////////////////");
}
public OnClientPostAdminCheck(client)
{
	PrintToServer("OnClientPostAdminCheck////////////////");
}


the fake player can only trigger HookEvent("player_connect", OnPlayerConnect);
no OnClientPutInServer no OnClientAuthorized ....


need some help

Last edited by 1254871688; 08-20-2022 at 19:22.
1254871688 is offline
1254871688
Junior Member
Join Date: Nov 2016
Old 08-20-2022 , 19:13   Re: [csgo]new fake player ddos attack
Reply With Quote #2

they use random ip 、nick and random steamid
i don;t know how the attacker do it
the fake players passed steam lobby id 、A2S Challenge and in console command "status" you will see them always on "connecting"

Last edited by 1254871688; 08-20-2022 at 19:20.
1254871688 is offline
Bacardi
Veteran Member
Join Date: Jan 2010
Location: mom's basement
Old 08-20-2022 , 20:26   Re: [csgo]new fake player ddos attack
Reply With Quote #3

sm_cvar sv_timeout 65

65 seconds is default.

You could try lower value, but it not fix problem
Bacardi is offline
backwards
AlliedModders Donor
Join Date: Feb 2014
Location: USA
Old 08-20-2022 , 20:44   Re: [csgo]new fake player ddos attack
Reply With Quote #4

Add me on discord backwards#8236 would love to solve this
__________________
I highly recommend joining the SourceMod Discord Server for real time support.
backwards is offline
1254871688
Junior Member
Join Date: Nov 2016
Old 08-21-2022 , 00:07   Re: [csgo]new fake player ddos attack
Reply With Quote #5

this is a new attack not normal a2s or qconnect attack srcds proxy can not fix it

Last edited by 1254871688; 08-21-2022 at 00:10.
1254871688 is offline
1254871688
Junior Member
Join Date: Nov 2016
Old 08-21-2022 , 00:10   Re: [csgo]new fake player ddos attack
Reply With Quote #6

Quote:
Originally Posted by Bacardi View Post
sm_cvar sv_timeout 65

65 seconds is default.

You could try lower value, but it not fix problem
yes it not fix attack still 64/64
1254871688 is offline
Ryan2
Senior Member
Join Date: Jul 2020
Old 08-21-2022 , 01:04   Re: [csgo]new fake player ddos attack
Reply With Quote #7

Very curious how someone can get 64 bots into a server without using an actual CSGO instance (I assume)
Ryan2 is offline
1254871688
Junior Member
Join Date: Nov 2016
Old 08-21-2022 , 04:00   Re: [csgo]new fake player ddos attack
Reply With Quote #8

Quote:
Originally Posted by Ryan2 View Post
Very curious how someone can get 64 bots into a server without using an actual CSGO instance (I assume)
send a lot of fake connecting request to server
1254871688 is offline
CryWolf
Veteran Member
Join Date: Jul 2008
Location: Romania
Old 08-21-2022 , 09:15   Re: [csgo]new fake player ddos attack
Reply With Quote #9

sv_timeout 30 may help but it mai affect also players with low connection.

I would create a fail2ban rule, must investigate more, till then you can ban those classes but first verify if it's a normal ip or a fake ip.
__________________
I dont walk trough this world with fear in my heart.
www.dark-arena.com L4D, CS1.6, CZ Servers
CryWolf is offline
Send a message via MSN to CryWolf Send a message via Yahoo to CryWolf
1254871688
Junior Member
Join Date: Nov 2016
Old 08-21-2022 , 09:58   Re: [csgo]new fake player ddos attack
Reply With Quote #10

Quote:
Originally Posted by CryWolf View Post
sv_timeout 30 may help but it mai affect also players with low connection.

I would create a fail2ban rule, must investigate more, till then you can ban those classes but first verify if it's a normal ip or a fake ip.
even sv_timeout 1 can not fix this because they always keep join
and it should be real IP because you need a chanllenge int to take server slot

Last edited by 1254871688; 08-21-2022 at 09:59.
1254871688 is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 02:58.


Powered by vBulletin®
Copyright ©2000 - 2023, vBulletin Solutions, Inc.
Theme made by Freecode