So I own a Community on Garry's Mod and we got hit with a massive DDOS attack recently, we were going to wait it out.
We then realised that a lot of servers dropped from the top 100 list. They were also hit offline.
I can see around 20-30 servers being hit offline. Possibly even more.
This really interests me and I couldn't find a post on this already.
Has anything like this happened before?
Two of my servers were just hit offline today. Could be linked. Could be someone jealous. idk.
[QUOTE=Jouaram;46774307]So I own a Community on Garry's Mod and we got hit with a massive DDOS attack recently, we were going to wait it out.
We then realised that a lot of servers dropped from the top 100 list. They were also hit offline.
I can see around 20-30 servers being hit offline. Possibly even more.
This really interests me and I couldn't find a post on this already.
Has anything like this happened before?[/QUOTE]
Servers with higher player counts will always receive more attacks then servers with lower player counts and it's not uncommon to see people attack the "top ten" or "top fifty" or whatever floats their boat.
However, it's more likely that another gaming community just wants more players so they are attacking other game servers running the same gamemode. You can easily find this out by just checking out what server has the most players and isn't being attacked *shrug*.
[QUOTE=darksoul69;46774972]However, it's more likely that another gaming community just wants more players so they are attacking other game servers running the same gamemode. You can easily find this out by just checking out what server has the most players and isn't being attacked *shrug*.[/QUOTE]
This sadly is the truth.
Either someone just being a dick or there wanting all other populated servers offline. Hell, they even hit mine and mines not that populated these days.
They ended up null routing a fair chunk of NFO's servers as well last night, silly fools.
Yup, mine was knocked offline as well. I was ~40th on gametracker however after being null routed for 8 hours I am ~80th
[QUOTE=Pantho;46776909]This sadly is the truth.
Either someone just being a dick or there wanting all other populated servers offline. Hell, they even hit mine and mines not that populated these days.
They ended up null routing a fair chunk of NFO's servers as well last night, silly fools.[/QUOTE]
Any idea how large the attack is? I thought NFO could block up to like 20Gbps hits or something.
Unless they changed their policy which would be sad because everyone was raving about their ddos protection on Facepunch.
Mine has been getting hit offline 3-4 times a day, someone really does not the popularity of servers.
[QUOTE=darksoul69;46776988]Any idea how large the attack is? I thought NFO could block up to like 20Gbps hits or something.
Unless they changed their policy which would be sad because everyone was raving about their ddos protection on Facepunch.[/QUOTE]
20gbps is nothing anymore, imo i would always go with OVH if you're looking for servers and you want the "best" free ddos protection
[QUOTE=darksoul69;46776988]Any idea how large the attack is? I thought NFO could block up to like 20Gbps hits or something.
Unless they changed their policy which would be sad because everyone was raving about their ddos protection on Facepunch.[/QUOTE]
That's there connection speed at NYC, and it's greater now I believe.
The raving about NFO is the unique communication they have with the provider which means some filtering further up the road can be done. And will be done to mitigate it in the future/maybe now?
[QUOTE=darksoul69;46776988]Any idea how large the attack is? I thought NFO could block up to like 20Gbps hits or something.
Unless they changed their policy which would be sad because everyone was raving about their ddos protection on Facepunch.[/QUOTE]
They null route once your connection has been saturated which is 1gbps for dedicated servers and I'd imagine lower for gameservers and VPS's.
My VPS was DDoSed again. Happened last night, too. Down for 8 hours.
Mine came back up today for 2 hours and got hit again.
We're down for another eight hours also.
good thing the ddoses against my community don't effect me in any way and my server still stays full :v:
[QUOTE=nettsam;46784159]good thing the ddoses against my community don't effect me in any way and my server still stays full :v:[/QUOTE]
Ones that can null route a fair chunk of NFO servers could probably take your server down...
we've been getting hit for two days
we're not even a popular server :(
[url]https://nitrous-networks.com[/url] has been hit a fair few times the last month or so. However most failed and they are getting better at protecting their customers. :)
[QUOTE=dbk21894;46785694]we've been getting hit for two days
we're not even a popular server :([/QUOTE]
Average number of players?
0
got between 5-10 over the last two days though
then they hit hard and its been down since about 11PM EST yesterday
[QUOTE=dbk21894;46786150]0
got between 5-10 over the last two days though
then they hit hard and its been down since about 11PM EST yesterday[/QUOTE]
Interesting. I've been mostly around 0 but occasionally getting up to about ten too and I've only been hit (DDoS'd) for like, an hour total and that was half a week ago.
We have a good idea of who has been doing it to us. I won't name and shame unless I get enough proof but we are looking into it thoroughly.
Me and Jouaram are currently checking servers on Gametracker and the server Jouaram was mentioning had this kind of skyrocket in the past month
[IMG]http://i.imgur.com/p5v3A7v.png[/IMG]
[QUOTE=Pantho;46784994]Ones that can null route a fair chunk of NFO servers could probably take your server down...[/QUOTE]
I forgot to mention that I am getting hit, my point was it's not affecting us though and we are still full daily
You'll want to get a host that doesn't bullshit/compromise.
[QUOTE=nettsam;46789021]I forgot to mention that I am getting hit, my point was it's not affecting us though and we are still full daily[/QUOTE]
Prove it, IP or host please.
My servers were DDoSed twice over the past two days, which is a lot considering I hadn't received one for months prior to these. Seeing how many other people were affected, I imagine the DDoSers just went through the server browser and hit whoever they felt like. I find that an increase of DDoS always happens around this time of the year, I usually chalk it up to the fact it's a holiday for most kids. They're out of school and they're bored at home.
My shit is still being hit. Server has been down for 2 days. If we unblock the port on the firewall, the host server goes down.
OVH pissing me off.
Getting hit as well, the attack is not heavy at all here, but it's just driving the source engine out of stability.
Anyone even bothered to make a pcap of it?
I've been hit several times before, pretty much only happens when my servers reach the top 50 on game tracker.
Captured 3 different types of attacks so far (other than the standard flood your pipe ddos)
1. Compromised home router UPnP spam
2. WordPress website pingback spam
3. Source engine specific spam
This is fucking intense. All day I have been receiving attacks and I already have a 20Gbps/8000k PPS protection.
[IMG]http://i.imgur.com/VguRTS5.png[/IMG]
--
I tcpdump'd and geoip'd the sources. They all seem to come from China.
Use this guys: [url]http://www.wizcrafts.net/chinese-iptables-blocklist.html[/url]
Doubt it would help if your port is already clogged before it even reaches the machine, but its worth a try.
I already deranked my Gametracker server 3 months ago because of such attacks ( it creates bullshit competition & literally no players look there. only servers admins)
--
sigh
[IMG]http://i.imgur.com/mNOIWEr.png[/IMG]
--
All of these addresses originate from Asia and are malicious.
[url]http://i.imgur.com/aF88B9Y.png[/url]
Sorry, you need to Log In to post a reply to this thread.
