Ways to prevent DDOS attacks on games?

Despite what people are saying, I’m pretty sure DDOS attacks are possible in Roblox.
There are multiple ways to do this, from oversights on the developer to just issues with roblox.

People are able to get the IP from the server they just visited by checking their logs, and with that IP they can use a stresser to shut the server down.

Of course, it’s likely not that, and its probably someone abusing your remotes in game to lag and eventually cause the server to hang. Make your your remotes have proper debounces for each player so they can’t spam it.

1 Like

Yes, DDoS attacks are possible on Roblox. It happened to my game before, and there’s nothing you can do about it. Either the attacker gets bored and stops doing it, or you ban enough of his alts that he stops. They somehow use an external third-party to grab the server IP that the server is running on, then they continuously send a lot of packets to the server causing the server-ping to sometimes even reach over 10,000 ping. The server needs to be shutdown to be playable again, which takes a while considering It’s being attacked.

What I’ve heard is that they run the program even before their character fully loads, catching you off-guard and making the chances of you being able to kick him very low.
They mostly target small games with around <200 players, easier to drop servers and ruin the experience.
I hope Roblox will eventually take a look into this and possibly release a patch.

11 Likes

DDOS attacks are 100% possible on roblox.

4 Likes

Yes, a long time ago I asked Roblox some question about moderation, and they directed me to their careers webpage…

1 Like

Banning ALTs does not help, a hacker does not need to be in-game to be get a servers IP and then send attacks to it.

2 Likes

They need to connect to the client to be able to send the packets. You cannot externally do it.

1 Like

No one sends data directly from their PC, they all use indirect data which means that they don’t generally have to be in game to do it. They just need to join to get the server IP then they can leave.

3 Likes

ddos attacks are remote, not from the game. people send packets to the roblox gameserver by either using the roblox api for gameservers or the ip. ddos attacks are not solvable and roblox deals with them.

Roblox actually doesn’t deal with them. The server just hangs and everyone is in a state of almost a frozen game with only them being able to move.

I am guessing this is some sort of memory overflowing. If you have any events that require a table to be put through (and save this table in a variable on the server) make sure the table is under a certain size.

These “Hackers” Could just be firing one of your Remotes with a bunch of “龘” (This Japanese thingy is really big in file size (3 Bytes). So if they filled a table with a ton of these and sent it to your remote where this table is set as a variable on the server it could lag setting it to the variable or grabbing from. Causing the server to lag.)

If you have stuff that are set in Server ensure that the thing being grabbed string count or anything is under a certain amount. To ensure overflow attacks don’t happen. I COULD BE WRONG so dont correct me thanks.

It’s not somehow…this is how they do it (using Windows):

  1. Open the Roblox client and then enter a game.
  2. Open a elevated command prompt.
    a. Type the following command: netstat -b
    b. Look for RobloxPlayerBeta.exe
    c. Note the IP address(es) that the client is connected to.
  3. Put IP address(es) in your DDOS software, botnet, or whatever and launch.

That’s how they do it. No real big secret.

1 Like

https://devforum.roblox.com/t/server-ddos-attacks-becoming-problematic/1072624/230?u=delusionisms

Just read this and you’ll see the massive issues there is with DDoSing

Here’s a history lesson.

Way back in 2000 or so, a 15 y/o kid in Canada going by the handle MafiaBoy invented the first botnet. Turns out he hacked computers, routers, and other devices that were connected to the internet. Then in about February of that year, he unleashed it. He took down several very popular and high profile websites at the time…including Yahoo!, Visa, and a few others. Denial of Service attacks were common, but a Distributed DOS attack was something fairly new.