Server down?

[trogers2]

I have spoken to a few server admins about this, and most of them are aware of the attacks - some admins are already putting in place defence; but as you can imagine they are all very secretive and on edge about what they say / announce, incase the attacker gets hold of any vital info.

All we can do now is wait it out, this will get sorted out soon - this I am very sure of.

[HazNpho]

And he's at it again... Sigh

[Molpadia]

This hacker person seriously needs to get a life and stop ruining the fun for loads of players just because he or she maybe is angry at a few DMs or players or what ever....

[thebeasttt]

This is some commitment for a Monday morning. Recently someone posted this server on mmorpg.com and it was full the next day. It may have stirred up a few old enemies, lucky us

[trogers2]

This is some commitment for a Monday morning. Recently someone posted this server on mmorpg.com and it was full the next day. It may have stirred up a few old enemies, lucky us

Wow, really? Do you have the link?

Edit: Found it! The guys name is Yanocchi and the thread can be found here:

http://forums.mmorpg.com/discussion/439 ... e-together

[thebeasttt]

http://forums.mmorpg.com/discussion/439 ... e-together

Looks like it was necro'd a bit but was updated last week and got many hits since.

Edit: opps you win lol

[freekender]

Just to pop up a theory I have... The last time the server went off again and again, it matches some holiday days here in Spain. And the very same happens now, as the next Tuesday and Friday are free days (and Monday of the next week in some areas). Children and people from High Schools have this whole week and the next one free. So, could our "beloved friend" be Spanish and/or living in Spain? Maybe is only a coincidence, but this conspiracy theory of mine gets stronger in my mind each time the DDOS (or whatever in the hell this is) occurs.

[trogers2]

Its the illuminati! ...lol, but seriously I've been doing a bit of research I have found out the server host (I will not post it here for their protection) and looked into the DDOS protection we have which is very, very basic.

I also spoke with the Manager via chat regarding these attacks, he told me the reason the DDOS protection we have in place is not working is because the attacks are too large (we only have 1 GB protection) Here is the chat I had with the manager:

------------------------------------------------
Sidenote: I will forward any information given to me to the DM team to do with as they wish.

Andrew H. Hello! If you have any questions about our products or require a custom solution click here to chat with me. Be sure to ask about our bulk server discounts for large quantity orders!

Me: Hello Andrew, I wanted to know more about how your DDOS protection works.

Andrew: Sure Anything specific?

Me: I come from a community who uses your $150 /mo plan (dedicated host) they are currently suffering from heavy DDOS attacks - your plan comes with 1 GB free, is it normal for a DDOS attack to go over this limit?

Andrew: What kind of attacks are these? What do you wish?

Me: I do not know what kind of attack the DDOS is; but it is causing a lot of lag and even forcing the server to shut down - does your free DDOS plan protect agaist all DDOS attacks?

Andrew: It'll protect against any type of attack, yes.

Me: Then why is our server suffering from a DDOS attack; which is causing great lag / shut downs?

Andrew: What do you host on the server? Websites? Games?

Me: Our server is a gaming server, it holds around 15 - 70 people daily.

Andrew: Ah, excellent. Which game?

Me: Neverwinter Nights 2.

Andrew: Ah, perfect. We host a lot of Tibia, Minecraft and HLDS-based games.

Me: Our server admin uses you guys as a host - but the DDOS attacks are causing a lot of distress to our community - I was hoping you could shed light on why your free DDOS protection is not stopping the attacks?

Andrew: The attacks may be too large. Have you spoke with support on this? We may also need to filter specific ports/types of traffic to not include anything not used.

Me: I see, so do you think it is worth upgrading to the 40 GB protection plan? If the attacks are using up 1 GB so easily - wouldn't they also get through 40 GB as well?

Andrew: It would help to know what ports your software uses so we can fine-tune the firewall. I don't think you need 40Gbps.

Me: The main port we use is 5121. our IP is 23.229.0.132

Andrew H: What was the game again?

Me: Neverwinter Nights 2.

Andrew: Alright. Let me see what I can do.

Me: Thank you Andrew

Andrew: Do you have access to the ticket system or is this under another person? I would need to contact engineering (which has left for the day) to get an accurate qote. quote**

Me: I am not the bill payer, so my access is limited - however I can speak to the admin team and forward what you've told me.

Andrew: That is fine. Is your email you put in here accurate? I need as many details as possible on the game/manual for server/firewall setup.

Me: The email is correct, yes - and I'll get the admin to open a ticket as you suggest - the attacks are putting a lot of stress on the community and any aid given would be greatly appriated Andrew.

Andrew: No problem. I sent over an email. Just need those details.

Me: I'll forward it to the admin, thank you for your time Andrew. Read

Andrew: You're welcome.



Triva: Intresting table here on DDOS attacks
https://www.servermania.com/gallery/res ... 6_2014.pdf

[joleda]

This is spring break week in Florida. Could the attacker be on spring break?

[thids]

Listen guys, this thing keeps happening on a regular basis twice(?) a year. It happened last year around February and again around December. Now it's starting up again... It will probably last around a month or so, then it will stop. We will see it happen again around Fall/Winter most likely. Every time it happens, threads like this are spammed with guesses as to who it could be, outrages, childish insults directed at our unknown attacker and similar things. Last time the popular theory was "oh look that other server just announced a comeback, it's probably them ddosing us!". Take my advice, and stop wasting time and energy. If your playtimes are within the window when the ddos happens daily, find something else to do for a while and check back in a few weeks, it should stop by then. If you can/want to help, then by all means, pm the admins.


edit: also, springbreak

[Flasmix]

It's probably Thids.

[thids]

I'm on a spring break in Florida, how could I be conducting serious business like ddosing from there?????????????????

[trogers2]

It's probably Thids.

Its Thids! They were behind this all along!

But really lol, I do get what you are saying - no point calling for a witch hunt without proof - which is almost impossible to get, let alone track down the guy(s) behind this...

Does that mean though that we should just accept this as a 'thing that happens 3 times a year'? No! It damages what little community we have left here and can put off new players just getting into NWN2 - instead we need to find ways to stop it with some decent DDOS protection - as I said in my last post, the basic DDOS protection we have is not enough to protect us and something else needs to be done to stop this.

[thebeasttt]

Location won't help our cause. Whoever is doing this is using a proxy server so even if you pull their plug by hand it will just come from another proxy in another country within the hour.

The only feasible solution is to make friends with a big company and hope they'll let us store the server there, aka piggyback off their very expensive ddos protection.

[Young Werther]