Raised This Month: $12 Target: $400
 3% 

What type of attack is this?


Post New Thread Reply   
 
Thread Tools Display Modes
Author Message
al1alu
Senior Member
Join Date: Jun 2011
Old 07-03-2012 , 13:25   What type of attack is this?
Reply With Quote #1

The DAF 'intercepted' the attack, but lagged all the server (machine full)
I thought it was a udp flooder but it was something greater than 1 second attack paralyzed the entire machine.

Quote:
[07/02/12 1193 PM] Blocked 174.224.36.12.
[07/02/12 11:93 PM] Blocked 112.162.134.88.
[07/02/12 1193 PM] Blocked 80.124.127.59.
(and have more than 1000 lines - see all in http://pastebin.com/G5mvuMwJ)
al1alu is offline
al1alu
Senior Member
Join Date: Jun 2011
Old 07-03-2012 , 13:28   Re: What type of attack is this?
Reply With Quote #2

Damn't wrong forum.
Please, somebody move to https://forums.alliedmods.net/forumdisplay.php?f=130
al1alu is offline
blue zebra
BANNED
Join Date: Jun 2010
Old 07-03-2012 , 13:40   Re: What type of attack is this?
Reply With Quote #3

This is a DOS attack. Don't worry. The DAF protect you.
blue zebra is offline
Zephyrus
Cool Pig B)
Join Date: Jun 2010
Location: Hungary
Old 07-03-2012 , 14:19   Re: What type of attack is this?
Reply With Quote #4

Quote:
Originally Posted by blue zebra View Post
This is a DOS attack. Don't worry. The DAF protect you.
not really, it came from shitload of ips, it was an actual ddos according to that log, it was just using an srcds packet to flood but thats it, without daf it would have even caused more cpu load

so daf wont protect you against that
__________________
Taking private C++/PHP/SourcePawn requests, PM me.

Last edited by Zephyrus; 07-03-2012 at 14:20.
Zephyrus is offline
al1alu
Senior Member
Join Date: Jun 2011
Old 07-03-2012 , 15:11   Re: What type of attack is this?
Reply With Quote #5

Quote:
Originally Posted by Zephyrus View Post
not really, it came from shitload of ips, it was an actual ddos according to that log, it was just using an srcds packet to flood but thats it, without daf it would have even caused more cpu load

so daf wont protect you against that
You're right, the DAF not protected.
When the attack began, all the server was unavailable, was an average of 52 players (after the last update) and I was not the only victim, and another had been the victim of other attacks, however, i can block the another attacks.
But from what I saw on the firewall of those same servers ping in my server a medium of 100kbytes in UDP.
al1alu is offline
Nolongerinthegame
AlliedModders Donor
Join Date: Sep 2005
Old 07-03-2012 , 17:08   Re: What type of attack is this?
Reply With Quote #6

Quote:
Originally Posted by al1alu View Post
The DAF 'intercepted' the attack, but lagged all the server (machine full)
I thought it was a udp flooder but it was something greater than 1 second attack paralyzed the entire machine.
Oh my god thats a huuge attack. Definitely ddos
Nolongerinthegame is offline
al1alu
Senior Member
Join Date: Jun 2011
Old 07-03-2012 , 22:55   Re: What type of attack is this?
Reply With Quote #7

Quote:
Originally Posted by nelioneil View Post
Oh my god thats a huuge attack. Definitely ddos
Shi*t! :X
Any ideias to block?

I'm using this, but dont block.

Quote:
iptables -A INPUT -p udp -m length --length 2521:65535 -j DROP
al1alu is offline
Zephyrus
Cool Pig B)
Join Date: Jun 2010
Location: Hungary
Old 07-04-2012 , 02:26   Re: What type of attack is this?
Reply With Quote #8

You can't do anything against real ddos, while you are being hit you can null route the attack (redirect all packets to a loopback adapter) to prevent collateral dmg but that's it
__________________
Taking private C++/PHP/SourcePawn requests, PM me.
Zephyrus is offline
al1alu
Senior Member
Join Date: Jun 2011
Old 07-04-2012 , 11:21   Re: What type of attack is this?
Reply With Quote #9

Quote:
Originally Posted by Zephyrus View Post
You can't do anything against real ddos, while you are being hit you can null route the attack (redirect all packets to a loopback adapter) to prevent collateral dmg but that's it
Any ideas to do this?
Thanks.
al1alu is offline
Zephyrus
Cool Pig B)
Join Date: Jun 2010
Location: Hungary
Old 07-04-2012 , 12:05   Re: What type of attack is this?
Reply With Quote #10

Quote:
Originally Posted by al1alu View Post
Any ideas to do this?
Thanks.
http://en.wikipedia.org/wiki/Null_route
__________________
Taking private C++/PHP/SourcePawn requests, PM me.
Zephyrus is offline
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 07:19.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode