Ways to prevent DDOS attacks on games?

Help and Feedback Scripting Support
#18

That’s 100% a crash script, not how roblox ddosing works.

1 Like
#19

You need to find the vulnrability works and then patch it yourself.

1 Like
#20

To what I’m thinking, your game may have a replication/other remote that the exploiter took advantage of to overwhelm the server.

#21

This is definitely not a DDoS attack. You probably have a severe security vulnerability. Have you been using free-models or virus plugins? If that’s not the case, it might be an unsecured remote-event that can be easily spammed.

2 Likes
#22

Despite what people are saying, I’m pretty sure DDOS attacks are possible in Roblox.
There are multiple ways to do this, from oversights on the developer to just issues with roblox.

People are able to get the IP from the server they just visited by checking their logs, and with that IP they can use a stresser to shut the server down.

Of course, it’s likely not that, and its probably someone abusing your remotes in game to lag and eventually cause the server to hang. Make your your remotes have proper debounces for each player so they can’t spam it.

1 Like
How to prevent a dos attack on my game?
#23

Yes, DDoS attacks are possible on Roblox. It happened to my game before, and there’s nothing you can do about it. Either the attacker gets bored and stops doing it, or you ban enough of his alts that he stops. They somehow use an external third-party to grab the server IP that the server is running on, then they continuously send a lot of packets to the server causing the server-ping to sometimes even reach over 10,000 ping. The server needs to be shutdown to be playable again, which takes a while considering It’s being attacked.

What I’ve heard is that they run the program even before their character fully loads, catching you off-guard and making the chances of you being able to kick him very low.
They mostly target small games with around <200 players, easier to drop servers and ruin the experience.
I hope Roblox will eventually take a look into this and possibly release a patch.

12 Likes
Our game is being DDoSed
#24

DDOS attacks are 100% possible on roblox.

4 Likes
#25

Yes, a long time ago I asked Roblox some question about moderation, and they directed me to their careers webpage…

1 Like
#26

Banning ALTs does not help, a hacker does not need to be in-game to be get a servers IP and then send attacks to it.

2 Likes
#27

They need to connect to the client to be able to send the packets. You cannot externally do it.

1 Like
#28

No one sends data directly from their PC, they all use indirect data which means that they don’t generally have to be in game to do it. They just need to join to get the server IP then they can leave.

3 Likes
#29

ddos attacks are remote, not from the game. people send packets to the roblox gameserver by either using the roblox api for gameservers or the ip. ddos attacks are not solvable and roblox deals with them.

#30

Roblox actually doesn’t deal with them. The server just hangs and everyone is in a state of almost a frozen game with only them being able to move.

#31

I am guessing this is some sort of memory overflowing. If you have any events that require a table to be put through (and save this table in a variable on the server) make sure the table is under a certain size.

These “Hackers” Could just be firing one of your Remotes with a bunch of “龘” (This Japanese thingy is really big in file size (3 Bytes). So if they filled a table with a ton of these and sent it to your remote where this table is set as a variable on the server it could lag setting it to the variable or grabbing from. Causing the server to lag.)

If you have stuff that are set in Server ensure that the thing being grabbed string count or anything is under a certain amount. To ensure overflow attacks don’t happen. I COULD BE WRONG so dont correct me thanks.

#32

It’s not somehow…this is how they do it (using Windows):

  1. Open the Roblox client and then enter a game.
  2. Open a elevated command prompt.
    a. Type the following command: netstat -b
    b. Look for RobloxPlayerBeta.exe
    c. Note the IP address(es) that the client is connected to.
  3. Put IP address(es) in your DDOS software, botnet, or whatever and launch.

That’s how they do it. No real big secret.

1 Like
#33

https://devforum.roblox.com/t/server-ddos-attacks-becoming-problematic/1072624/230?u=delusionisms

Just read this and you’ll see the massive issues there is with DDoSing

#34

Here’s a history lesson.

Way back in 2000 or so, a 15 y/o kid in Canada going by the handle MafiaBoy invented the first botnet. Turns out he hacked computers, routers, and other devices that were connected to the internet. Then in about February of that year, he unleashed it. He took down several very popular and high profile websites at the time…including Yahoo!, Visa, and a few others. Denial of Service attacks were common, but a Distributed DOS attack was something fairly new.

#35

Would the use of private servers be a way to stop the “hackers” from ddosing the servers? When your experiencing an attack, maybe set the player count to 1 per server, and then tell the player that if you want to play with your friends, you have to make a private server, this is because the game is getting targeted by “hackers”

#36

This post is old, but he could prevent it by debouncing every remote, hackers can spam them and code inside them is too heavy for the server to work, denying every undebounced request should only cause ping to grow and number of requests too

1 Like
#37

Um that’s not how it works. Remotes have nothing to do with DDOSing, u could have a clean baseplate and a DDOSer could crash it with the right tools.