All these bugs you’ve just listed have been patched for a very long time; so yes; a player can either run some skiddy PuTTY botnet or some crappy web-stresser and hit Roblox servers offline.
No, not exactly. If we did then I would try to find a fix along with the rest of the development team but this keeps happening.
It depends what you mean by “anti”, I have found when I have tried to put limitations (capturing time difference etc) which kick players on my remote events / remote functions the server “crashes” before the game manages to kick the person.
To add, you also can’t trust the in-game script status if your being crashed - that doesn’t respond amidst being crashed.
Questions:
- Why do they do it?
- Is it worth it for these exploiters to do this?
We have literally no clue, since we don’t know who is executing it. Just some random accounts. We do believe it’s someone who is our competition.
We think it’s because they can’t stand us growing so fast-- and trying to stop that by ruining our launch of the update.
Is this related in any way?
Or this:
Not really. Those are just more exploiters who lag the game a lot by e.g abusing physics service or the chat. Here, they really just crash complete servers of 30+ players in 3 minutes. We literally have no clue how, but we are certain they are DDoS’ing us… We already contacted roblox, but this is costing us money & players…
That last one though, might be a bit helpful. We have a custom rendering system which prevents a lot of lag due to our huge map. They might be abusing this in some sort of way… I’ll add some statements to debug it and try to discover a pattern. Thanks for your help!
And you say this is new to your current game - didn’t happen in your old one?
Well sorta. We used to use a free model Admin script which had the !clean command in it. Some people discovered this, and abused it. In our new update (same game) we have everything made custom and by ourselfs. There is no way there is a Free model in.
Actually I’ve dealt with the same situation I used to be apart of a military group. You are being attacked by a exploiter who can disconnect everyone in game. You need to find the user and ban immediate or changed the scripts to prevent this. Exploiters only get access to stuff like this depending on what scripts and models you perform on the game.
To be fair, you wouldn’t even need to do that - you just have to make too many requests from the client itself (spam a range of remote events / remote functions at the same time).
This might account for why my game hasn’t had a problem when people have tried - they are exploiting multiple events instead of singular ones?
This won’t help, since they have a lot of alt accounts probably. Even though we use a Age Limit, our competition group (we suspect) has 400k+ members. Enough of them are exploiters…
To be frank, people will exploit you for various reasons because they’ve got “bad blood” from some process in your group (they feel they were wrongfully removed or something).
Also, I take it I’m not meant to spawn here:
Because usually when your own server scripts break after exploitation, they were targetting that area of the systems.
https://devforum.roblox.com/search?q=ddos
A few possibly useful posts I found. Would any of these help?
Yeah indeed… They have tried several times this year to get us banned due to our growing rate…
Haha you indeed shouldn’t spawn there. Re-Spawn and it should work xD
I did respawn, thats why I alerted you.
First I spawned in the black error box, then there.
Just because it’s custom doesn’t mean it can’t be abused to overload the server. Going over the code again might reveal a few flaws.
What? Do you think DDOs’s are ran in a lua injector? There can be ddosing a roblox game, since the server has an ip. It is likely a free model, but no one will ddos using a roblox exploit.
It’s exactly the same i’m getting trough.