Targetted by DDoSer / Exploiters

No, the roblox servers themselves have little to no protection, just so users with lower end pc’s and connections can run the engine fine without many connection issues, for me I use cloudflare to protect my site.

Due to the anonymity of roblox accounts usually only roblox themselves would be able to really get anything to happen.

If I were to go to the police site for example and said “Roblox user __ is ddosing my game” they would most likely shove it to the side or tell me to contact roblox themselves

2 Likes

It’s not so simple and any legal entity would redirect Observer to Roblox for the issue to get resolved in which judging by the thread, Observer already has and received a response.

Roblox are the only ones who can take legal action on someone doing this and it probably won’t happen unless it’s a wide-range attack affecting thousands of different upper-end games.

2 Likes

If anyone wants detail about this, one of the most popular network sniffing program is called Wireshark. It basically allows you to see incoming and outgoing traffic and is made for malware analysis.
In terms of your game, all I can think of is just contacting moderators and to get them IP banned. (Although they might use a VPN but who knows)
Like @rc8s said you could report this to the police and I think they can get Roblox to listen. I am Pretty sure DDOSing is a felony.
Best of luck!

Theoretically the individual(s) doing this wouldn’t even need a network sniffing tool, they could just view the information from the “logs” file in their Roblox directory. It displays such information as local machine information, join information and server information.

After joining a game, that specific local file includes the connected server along with the port.

And this is illegal and the individual(s) doing it are absolutely horrible, but I don’t feel as if Roblox would put themselves in a legal situation due to this unless it were affecting many upper-end games that physically affect the platform significantly as I said before.

However, hoping Observer gets this resolved and those individual(s) doing it end up getting trace banned from the platform.

1 Like

If they get trace banned can’t they just worm their way out of it with a VPN?

1 Like

Depends on how traces are done, if they’re done strictly through networks, that could end in false positives. It’s a better idea to use hardware for trace bans.

One method that could work is having two places: A primary, staging area, and then a secondary place. The primary place would only have 1 player per server, and would just teleport anyone with a high enough account age to the correct server. It’s a lot of work though and means it is difficult for people to join on their friends!

Other than that, no - you can’t do anything about it unfortunately. Once the user gets your IP (which as soon as they connect to that game instance they can) it’s game over. It is illegal to boot servers though, so you could report them to your local Cyber crime unit if you know who is doing it - they’re quite active on chasing people down who cause significant damage.

3 Likes

I don’t think you can do anything about this situation other than contacting roblox staff, or closing your game for a longer time.

15 days isn’t enough, Try at least 3+ months.

Higher age limits (or age limits in general) do very little to prevent baddies and generally cause more harm to your playerbase - especially in the long term.

3 Likes

I feel it wouldn’t do anything to report a roblox profile to a local cyber crime unit. They would most likely just direct me to roblox. And when I went to roblox they literally told me to report the account which would take months for the account to be banned and they will just get on a new account

1 Like

1 player servers and everything th player does gets replicated to all the servers seems like kind of a far fettch but a small game like yours can work wih messagingservice so yeah thats my cue

Btw you said you had no clue where this goes, i would say development discussion, but i honestly dont know and either way people will do ANYTHING go get discussion posts taken down.

Your best bet is to just ignore them,
if you’re trying to stop them in every way possible way and its not working, then they’re getting joy out of it (which ik sounds sick but is true).
its proven bu social engineering that is nothing works, ignore them as them targetting you is pointless, and if you ignore it then you dont care and they know that, meaning that they’ll stop.

I am almost certain you are mistaken. I highly doubt your servers are the target of a denial of service attack. While yes, packet sniffing programs like Wireshark can retrieve the IP address of your servers, I think it would be unreasonable to assume that Roblox doesn’t have any sort of DDOS protection here, especially given the problem you are experiencing isn’t widespread.

It’s also worth pointing out that you have implied banning their accounts does work, but they will simply create other accounts. I am convinced that if this was truly a DDOS attack, creating more accounts would simply be unnecessary. They could get the server IP before you even get a chance to think about kicking them out of the game with a ban script.

I have never noticed any of DDOS attack happen to my games, and as far as I am concerned, top games like Adopt Me are bigger targets and there haven’t been any suspicions of that happening in their servers.

At the end of the day what you are describing sounds like an exploiter taking advantage of a vulnerability in your game. This can be a backdoor of sorts or they could be abusing remote events. It’s also possible they are doing something like this, where exploiters were able to take advantage of a right grip replication vulnerability. This has been patched by Roblox a while ago, but again while unlikely, it’s possible something like this is going on.

No, it is not a backdoor, it is not a script. It is a literal DOS attack. It does happen on the bigger games but they have more servers so its not as noticeable. There is literal proof that they’re DDoS attacks that you can do on any roblox game on youtube, they aren’t hard to make. And banning accounts works because they love to talk ingame before they do it. If they didnt want to talk all they would have to do is join the game and get the IP, but they don’t they love to talk before they do it.

Please read the replies before coming in and accusing me of being mistaken.

There is literal proof that they’re DDoS attacks that you can do on any roblox game on youtube, they aren’t hard to make.

Do you mind linking me an example or two of this?

A simple youtube search works fine, Sorry about the bad audio (swears)

Don’t think there’s much you can do here unfortunately. The way Roblox is structured (when it comes to things such as alternate accounts and game settings) makes these types of situations both common and easy.

The only real solution that comes to mind is getting in contact with someone at Roblox and seeing if you can launch a police investigation through them - although I doubt it’s effectiveness.

Best of luck dealing with this

I emailed their support email and they really hit me with the
“Please read our last email where it says, please report the accounts so our moderators can look into it, as we do not provide help for third party systems”