UDP Attacks going on, RakLib exploit? Server stucks.

Spoiler: The console WHILE attack

[16:00:35] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:00:35] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:00:35] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:00:35] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:00:35] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:00:35] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
[16:03:22] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:03:22] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:03:22] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:03:22] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:03:22] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:03:22] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
[16:06:08] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:06:08] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:06:08] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:06:08] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:06:08] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:06:08] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
[16:08:56] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:08:56] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:08:56] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:08:56] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:08:56] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:08:56] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
[16:11:48] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:11:48] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:11:48] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:11:48] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:11:48] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:11:48] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
[16:14:27] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:14:27] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:14:27] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:14:27] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:14:27] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:14:27] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
[16:17:09] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
[16:17:09] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
[16:17:09] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
[16:17:09] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
[16:17:09] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
[16:17:09] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)

All these (null) Request packets are currently letting many servers getting stuck.
There are several attacks on different types of servers.

I think thats all to say. Having the same type of attack?
Or you know a solution? Let me know.

Maybe you should first change the system language to English, or we won't understand the error messages.

Won't.

Just this little part is not in english. "Eine vorhandene Verbindung wurde vom R"
(also this is cut off. "Eine vorhandene Verbindung wurde vom Remotehost geschlossen")
"An existing connection was forcibly closed by the remote host"
Cause: NULL packets!

Hi, I'm seeing a variation of this thanks to disgruntled players using a technique I won't share here. They can effectively close any server whenever they like. I'm on a dedicated Netherbox server with DDOS mitigation, CentOS7, firewalld, latest PM, PHP 7.0.3 etc. I've contacted Netherbox who say they have activated advanced filtering for my IP, but that doesn't seem to have changed anything. Is there anything else I can do? Since it's not true DDOS I'm thinking I could use fail2ban for this, but I can't find any log file that contains records of the attacks.

Thanks

Isnt fail2ban so that "root" can not be removed from the system?

Fail2ban monitors log files for regex matches, then adds rules to IPTABLES to drop all requests from IP addresses according to the config.

Should be fixed in raklib now by Humerus, update the submodule.

Intyre graciously sent me the patch to test before it was updated, it does indeed fix the error on console, but unfortunately it doesn't reduce the impact of the attack, so I've taken it up with Netherbox.

I actually dont think it worked, but ClearSky PHP7 doesnt seem to freeze anyways.