DDoS Round 7

[Skiddleriscool]

Gib transmog tokens please, I need it for my ****mog.

[Galundra]

For some more details on todays attack, read below.

The first wave of the attack started at 15:52:31 today targeting our authentication server once again (also flooding our PvE realm, and at the very end of the attack hitting the HC realm). This first attack caused some latency and looting issues on the server, along with a 3% drop in player during a time when our population usually is growing to its daily peek.

The second wave was active from 16:39 until 16:46 and was significantly stronger, and disconnecting 46% of the population, while those who remained still experienced extreme lag/latency.

A developer on the team pushed a change to all realms with a restart at 17:37 attempting to get some mitigations in place.

Wave three went from 17:51-17:54, this time including the PvP realm in the attack but still primarily focusing the flood on the auth server. Mid wave they also changed the shape of their attack going from a full junk traffic flood to a mix of junk traffic and a large number of connection requests to induce connection churn.

A small precursor wave targeted just our radio ports from 13:35-13:42.

Wave four hit from 18:39 until 18:49 the hardest yet nearly instantly bringing our population down 94%. More updates will likely be given once the attack stop.

I read that the Ravencraft team has heard about the attack. They said that many of these are fixed in their 1.18.1 code base. Further they claim that they are able to quickly able to find and stop those exploits.

They offer help to any project using the 2024 leaked sources (Funny to say that about GPL software..) in diagnosing and patching the exploits which bring these servers down.

Did your hear about this message, would you contact/accept their help?

I think if these DDoS attacks are based or include possible exploits it could be worth to contact them. In general a good relationship with them sounds only beneficial to me.

(Assuming a good faith intend in their post, please don't start any argument beyond the offer to help regarding the DDoS attack)

That is just a confession, did you read the first advertisement of the server that attacked "other server" as shitty code?

They are trying to sell the idea that only "They" have the real code and that is why the server is crashing, its just them using money from asian server to DDOS non stop, stop being naive.

[Tsokay]

Are we going to be somehow compensated for weeks of an unplayable server? Or should we just go play somewhere else. Maybe some free DP?

[Harak]

so, how much time it will cost?

[Darien]

Are we going to be somehow compensated for weeks of an unplayable server? Or should we just go play somewhere else. Maybe some free DP?

They'll refund your monthly subscription fees.

[Kestrel]

Just to clear up some confusion I am seeing in this thread, the DDoS is hitting an L4 bottleneck. This is not something that we have direct control over or any access to implement things like whitelists or custom scrubbing. These attacks are not related to how our server runs, and there are no exploits that make a DDoS more effective they are simply flooding our L4 bottleneck until it collapses.

Because we have unique traffic patterns (game traffic is different than most web traffic, especially our game traffic) and are unable to compromise on our anonymity, our options for 3rd party solutions are limited. We still have no timeline from FlokiNet on the delivery date of our new server hardware, but the order was placed on August 16th (before the DDoS attacks began) so we expect it to be online SOONtm.

There are absolutely some sacrifices and trade offs involved with hosting a project anonymously, and we are feeling the pain of those right now. We hope that you all see the value in these trade offs though, and have faith that these trade offs will allow our project to thrive for years to come once these DDoSes are resolved.

[Halfie]

I read that the Ravencraft team has heard about the attack. They said that many of these are fixed in their 1.18.1 code base. Further they claim that they are able to quickly able to find and stop those exploits.

They offer help to any project using the 2024 leaked sources (Funny to say that about GPL software..) in diagnosing and patching the exploits which bring these servers down.

Did your hear about this message, would you contact/accept their help?

I think if these DDoS attacks are based or include possible exploits it could be worth to contact them. In general a good relationship with them sounds only beneficial to me.

(Assuming a good faith intend in their post, please don't start any argument beyond the offer to help regarding the DDoS attack)

This literally just confirms that they are probably behind it, because any dev on planet earth knows that there are no "exploits" in game code like this that make DDoS more effective, it's just a DDoS. It happens from completely outside the codebase of the game and is an inherent vulnerability in internet itself. So if a dev team actually said this, they may as well admit they are behind it because the only way saying something like this makes sense is if they already hate Octowow and just want to paint it in a bad light by any means necessary.

[Ciggitybutts]

2nd week in a row where our raid has gone through this, multiple expensive consumables are gone down the drain, I want to ask if we can request our lost resources through a GM ticket ?

Make an in game ticket, and mention that Kestrel told you to. It will get escalated to me and I will investigate and mail you back consumes lost during any raids that are interrupted due to DDoSes going forward.

Chad.

Is the reason why Juju's don't save is because we don't "drink" them? Nothing big, they are cheap unless you go AP.

I haven't been raiding but on use potions/juju would be my biggest worry.

[Pawn]

Has anyone come forward taking credit for the ddos and explained their reasoning or made demands? I'm just curious what someone would get out of this.

[Crotraneugasu]

Sounds like a free repair bot for all

I would love that, or any sort of convenience item. Just not really into cosmetics or cosmetic pets.

Anways, thanks for letting us know about Round 7 - sanity check.

Wouldn't really be fair to people who already bought one (me hehe)

you would get coins back