The DDoS Attack of 2018...

Talk about anything TI here! Also include suggestions for the game, website, and these forums.

Moderators: Maeve, Maeve

Post Reply
User avatar
Niamh
Posts: 1070
Joined: Wed Nov 30, 2016 9:04 pm
Discord Handle: Niamh#3824

Tue Mar 20, 2018 2:54 pm

Code: Select all

           [LD][AFK] Ardan is the liquor.
           [LD][AFK] Ashimnan de Patel
           [LD] Aymelek dul Sweetland: tinyurl.com/AymelekPortrait
           [LD] Bemhil
           [LD] Cueri
           [LD] Deaidry Le Clarinelle
           Empena Astartes : The Doctor is IN
           [LD] Farra dul Baildana plays Letter Simulator v. 376 TLI Edition.
           [LD] Kian -- Will pen your chronicles.
           [LD] Laliene refs: https://imgur.com/a/00Dag
           [LD] Malaya is not RP ready! (i.imgur.com/O7jo11K.jpg)
           Malia
           Mitch is on the straight and narrow.
           [LD] Noah Taira
           [LD] Norrig Hammersong https://m.youtube.com/watch?v=qGPBFvDz_HM
           [LD] Paton Hingeston.
           [LD] Rosilda
           [LD] Sibylle - Inquisitor? I hardly know 'er! (i.imgur.com/knrf
           [LD] Vlora has a new picture (again) - https://imgur.com/a/Mhp9f
           [LD] Zara dul Font(of all knowledge)aine - https://imgur.com/EZ9S2jY

   [Staff] [LD] Azarial 
   [Staff] Niamh - https://youtu.be/XPWa_yg6o4U

  System: Tue Mar 20 2018 14:34          Total People: 22          Visible : 22
  Reboot: Sun Mar 18 2018 13:11          Since Reboot: 24          Max Ever: 61

            Please VOTE for TI on the links at https://ti-legacy.com
We're all that's left, Mitch, Empena, and Malia.

imogen
Posts: 3
Joined: Tue Mar 20, 2018 3:14 pm
Discord Handle: Imogen#0979

Tue Mar 20, 2018 3:18 pm

The last bastions of a mud under attack, we fought well everyone

User avatar
The_Last_Good_Dragon
Posts: 254
Joined: Sun Feb 14, 2016 1:08 am

Thu Mar 22, 2018 1:31 am

I THINK NIAMH WAS THE PERPETRATOR BECAUSE SHE'S EVIL.
~~ Team Farra'n'Stuff. ~~

imogen
Posts: 3
Joined: Tue Mar 20, 2018 3:14 pm
Discord Handle: Imogen#0979

Thu Mar 22, 2018 1:45 am

if she's evil maybe don;t say that on your forum account? xD Strategy man, strategy, you don;t gotta be a noble to know this is not how social sabatoge works ;3

quanin
Posts: 24
Joined: Wed Apr 09, 2014 2:19 am

Thu Mar 22, 2018 2:07 am

Waitasec. How do we know Niamh didn't borrow her account to say so? She's got admin creds... ;)

imogen
Posts: 3
Joined: Tue Mar 20, 2018 3:14 pm
Discord Handle: Imogen#0979

Thu Mar 22, 2018 2:15 am

o: CONSPIRACY

User avatar
Voxumo
Posts: 655
Joined: Mon Nov 26, 2012 7:54 am
Location: Delta Junction, Alaska
Discord Handle: Voxumo#7925
Contact:

Thu Mar 22, 2018 4:11 am

So... serious question, was this actually a DDoS attack? Like that would explain the recent lag.
Lurks the Forums

User avatar
Kinaed
Posts: 1984
Joined: Wed Jan 05, 2011 8:54 pm
Discord Handle: ParaVox3#7579

Thu Mar 22, 2018 4:28 am

I don't know if it was actually a DDOS.

I do know whether Niamh is evil.

I also know whether it's safe to say so.

User avatar
Niamh
Posts: 1070
Joined: Wed Nov 30, 2016 9:04 pm
Discord Handle: Niamh#3824

Thu Mar 22, 2018 10:02 am

I WALK AWAY FOR FIVE MINUTES

In all seriousness though, yes, this was a DDoS attack. It was not targeted on TI, but on our host.

Code: Select all

-- 2018/03/19 10:00 PM MST - NetworkOPS team at data center has been notified and is currently investigating the issue.  Please use secondary IP address (66.85.147.92) to bypass latency issues at this time.

-- 2018/03/20  5:00 AM MST - NetworkOPS has reported that the IP address was subject to a 12Gbps DDoS and has been routed through a DDoS protection network adding to the additional latency.

-- 2018/03/20  8:30 AM MST - The route on the IP address has been restored and intermittent latency appears to have been resolved at this time.

-- 2018/03/20 10:30 AM MST - With the IP route restored, DDoS attacks have resumed heavily against the server.  We're looking at alternative solutions.  With the DDoS proteciton route off, the issue fully impacts all connected severs to the hardware.

-- 2018/03/20 11:05 AM MST - We're null routing all IP addresses and ports at this time to regain administrative access over the server.  We'll begin opening IPs and ports one at a time to isolate how the DoS is occurring.

-- 2018/03/20 12:10 PM MST - Access to services has been restored and DDoS mitigations are being restored.  If further events occur, all ports and IP's will be temporarily firewalled to an exclusive whitelist based upon "game connectivity" for the day.  This should maintain transparent access while curbing the attack behavior.  However, this also means we may not have your IP address in the whitelist at the time of event if you are just connecting for the evening.  Please feel free to send us an email or ticket with your IP to be added to the whitelist if you are experiencing any connectivity issues.

-- 2018/03/20 5:00 PM MST - Server IP's 66.85.147.93 and 66.85.147.85 continue to receive intermittent DDoS traffic.  We're currently tuning our firewall and blocking network CIDRs as they occur.

-- 2018/03/20 8:30 PM MST - Our data center provider has placed the 66.85.147.93 IP address on the DDoS scrubbing network again, this results in additional latency being noticable for shell environments and game ports.  For swiftblade customers, please feel free to use the IP address 66.85.147.92 to connect to your shell or game ports.  This is an alternate IP address assigned to the server system and is routed around the DDoS protection network.  At this time, DDoS traffic spikes appear to be mostly mitigated as the protection network and our firewalls work together, but traffic on .93 will appear slow as the network continues to mitigate.
The most recent update from the host:
-- 2018/03/21 2:30 PM MST - At this time, intermittent packet loss is still on going and may be experienced as additional DDoS continues to occur. These events are generally infrequent and services have been restored. As we continue to mitigate the threat, it is believed the source is familiar with our services. Due to these circumstances we will be limiting our communication on mitigation methods. A follow up will be posted when the activity ceases. Until then, we appreciate everyones patience in the matter as we continue to make adjustments.

Post Reply
  • Information
  • Who is online

    Users browsing this forum: No registered users and 27 guests