Forum

hi all

i am just here to inform you about something special. you remember the problems with the auth system a few days ago, do you?

out there, some realy bad noobs did attack by distributed denial of service (ddos) some servers. i guess our auth server was also hit by them.

but what i know now for sure is, that 176 clients from a botnet (clients under control from attacker, without knowing by owner) did attack the gameserver from gametracker. and they did it at a special way by doing amplification - using the domain name servers (dns) from switzerland - lol. for the ones which are interested in, below the link for details.

and now for all, you can see how simple it is to disturb or to denie a service - you do not even have need to overload the bandwidth of the internet connection. and this can happen to everyone. so if that would happen again, just relax, do not cry about (because this is what the intruder likes), make a step back and wait.

i realy hope, that this has stopped now, but just in case if not.

http://securityblog.switch.ch/2013/01/22/using-packetq/#more-1098

yes, this is from southern part of switzerland - swisscom, the biggest provider in switzerland. but where do you have this one?

the attack was routed over switzerland, i was not possible to locate where it came from. but you can see at the explanation, by clicking "Game Server", where the hits were gone.

"Entering both the IP address and the source port on Google reveals that the target was indeed a Game Server. We can also try and estimate the size of the botnet which was used to send this DNS ANY traffic:"