Mitigating the DDOS attacks. Possibilities inside.

[Volibear]

Originally Posted by Glorindale [You must be logged in to view images. Log in or Register.]

Do we know that p1999 is even the target? A DDOS attack could cause congestion on a network segment that just happens to be shared with the true target which effectively denies service to EVERYONE who shares that segment. If it is truely targeted at p1999 servers many times these attacks are sourced from a single (or maybe a few regions) such as China. You could mitigate the effectiveness of the attack by blocking traffic to IP ranges used in these regions. In fact if the server is hosted somewhere I'm sure the staff of the facility would love to help push these DOS traffic out and would love to help.

They are sending everquest packets

[Swish]

Originally Posted by Glorindale [You must be logged in to view images. Log in or Register.]

If the majority of the attacking computer are in North America it becomes much harder since that is where the majority of players are. However, if it is outside of North America I saw screw them and just start blocking IP rangers.

From the Euro/Asia/etc community...

[You must be logged in to view images. Log in or Register.]

[EvaShogouki01]

Can anyone give a number range for the costs of reinforcing the server rather than just saying "expensive?"

[Agatha]

Anyone who runs a botnet makes sure they have all corners of the world covered, i know somone who used to run a 3mil+ botnet and he would watch his countries wake up. he'd be like oh look europe just woke up, oh look asia just woke up. was kinda neat. but yea, in the emu community its very niche, you arn't dealing with your normal script kiddy. These are adults who run for profit botnet companies most likely tied in with the undernet.

What im getting at is its not going to be possible to get away from this in the conventional means.

[Adolphus]

Originally Posted by EvaShogouki01 [You must be logged in to view images. Log in or Register.]

Can anyone give a number range for the costs of reinforcing the server rather than just saying "expensive?"

+1

I like how everyone assumes that of the thousands and thousands of people who play P1999, none of us will be a rich guy willing to help out.

Actual information on the exact equipment necessary including cost may lead to surprising results for the server.

[Turp_SmokinPurp]

Would OP idea work? We do not need to hire them forever, if can get a few months or few attacks worth of coverage (is this possible) it might kill the DDOS culprit.
This is how i pic the graph you sent, is this how it works?
Anycast methodologies may be exploited to distribute DDoS attacks and reduce their effectiveness: As traffic is routed to the closest node, a process over which the attacker has no control, the DDoS traffic flow will be distributed amongst the closest nodes. Thus, not all nodes might be affected and no lag occurs.

[You must be logged in to view images. Log in or Register.]

http://arstechnica.com/security/2013...mhaus-offline/

[Gaffin Deeppockets]

The more you morans talk about it the more its gonna happen.

[Glorindale]

Originally Posted by Agatha [You must be logged in to view images. Log in or Register.]

Anyone who runs a botnet makes sure they have all corners of the world covered, i know somone who used to run a 3mil+ botnet and he would watch his countries wake up. he'd be like oh look europe just woke up, oh look asia just woke up. was kinda neat. but yea, in the emu community its very niche, you arn't dealing with your normal script kiddy. These are adults who run for profit botnet companies most likely tied in with the undernet.

What im getting at is its not going to be possible to get away from this in the conventional means.

That all depends on how sophisticated it is. I just find it hard to believe someone who has access to a large and widely dispersed botnet would bother using it to attack little ole project1999 for weeks on end.

[Glorindale]

Originally Posted by Gaffin Deeppockets [You must be logged in to view images. Log in or Register.]

The more you morans talk about it the more its gonna happen.

What the hell are morans and do they have anything to do with IP rangers? ;-)

So it will just go away if we stop talking about it? Wow..why didn't think of that?

[kingsBlend]

What I don't understand is.. Rogean, you are the man. You know your shit when it comes to servers and networking, you proved it to us. How do you not know just a little bit on Network Security?