Server Interruptions

[LilDolla]

Server Interruptions

The past couple of days, we've been struggling to keep IGC servers stable due to being constantly attacked. The purpose of this topic is to show the community exactly how it looks when we're being attacked. While getting attacked, our IRC server was also compromised and as a result, all irc users were g-lined and were unable to connect to IRC.

Server Not Under Attack		Server Under Attack

IRC
On our IRC server, Jack had managed to log into Emile's operator login on Sun Dec 25 05:31 2016. Before taking any action, he had been swapping between my IRC account and Emile's but then at 05:37 Jack had managed to login to Emile's operator account. Shortly after, everyone was G-lined from the IRC server. The topic of #IGC was also changed to

Jack had used the name 'Castillo' as an alias when posting that message on the topic.

Below is the IRC log of the actions Jack did.

Code: [Select]

Sun Dec 25 05:31:32 2016: CONNECT: Client connecting on port 6667 (class main): [email protected] (90.204.224.230) [realname]
Sun Dec 25 05:32:20 2016: QUIT: Client exiting: [email protected] (90.204.224.230) [Quit: Leaving]
Sun Dec 25 05:35:08 2016: ANNOUNCEMENT: Connecting user 317AAAAE4 detected as using CGI:IRC (109.169.29.95), changing real host to 90.204.224.230 from 109.169.29.95
Sun Dec 25 05:35:14 2016: CONNECT: Client connecting on port 6667 (class main): [email protected] (90.204.224.230) [http://www.mibbit.com]
Sun Dec 25 05:35:45 2016: QUIT: Client exiting: [email protected] (90.204.224.230) [Quit: http://www.mibbit.com ajax IRC Client]
Sun Dec 25 05:36:18 2016: CONNECT: Client connecting on port 6667 (class main): [email protected] (XX.XXX.XX.XX) [undisclosed]
Sun Dec 25 05:37:18 2016: ANNOUNCEMENT: Connecting user 317AAAAE6 detected as using CGI:IRC (207.192.75.252), changing real host to 90.204.224.230 from 207.192.75.252
Sun Dec 25 05:37:24 2016: CONNECT: Client connecting on port 6667 (class main): [email protected] (90.204.224.230) [http://www.mibbit.com]
Sun Dec 25 05:37:51 2016: OPER: Emile ([email protected]) is now an IRC operator of type NetAdmin (using oper 'Emile')
Sun Dec 25 05:37:51 2016: [email protected] opered as type: NetAdmin
Sun Dec 25 05:37:51 2016: GLOBOPS: From OperServ: USERS: [email protected] is now an IRC operator.
Sun Dec 25 05:38:12 2016: OPERLOG: [[email protected]] GLINE @
Sun Dec 25 05:38:53 2016: OPERLOG: [[email protected]] GLINE @ -1 Good Night
Sun Dec 25 05:38:53 2016: ANNOUNCEMENT: WARNING: Emile tried to set a G/K/E line mask of @, which covers 100.00% of the network!


[Emile]

Does your provider offer Game DDoS protection through OVH? Because if not, I'd look at a provider that can offer that as I've heard its proven to be very effective.

Yes, but yesterday, they attacked our webserver.

[NewYorkStar]

Jack?

[Kratos]

is there any solution to prevent this attack from happening again? Maybe a new host?

[313]

loooool, gg guys gg

[Emile]

is there any solution to prevent this attack from happening again? Maybe a new host?

Basically not. We already have the best protection a game server can have. Though we're working to strengthen the security of the server.

[NewYorkStar]

Jack's version:

Hey NewYorkStar,

I'm Jack, the one that LilDolla and Emile are trying to accuse of "taking down their servers".

Because I clearly can't have my say in whatever the fuck is going on in IGC, I thought i'd email you directly. Hopefully this is your email because it's from an old archive from one of my DB backups off of another server.

The statement they've said about me is completely false, and that I've had no involvement towards the "attack" of IGC. In fact, it's quite the opposite.

The attacks that are being executed on IGC is in the timeframe are in the time period of me being inside of my warehouse. You must bare in mind that this warehouse has a strict policy on technology and that we're not allowed to take any of our mobile phones or anything like that in with us. The only form of technology we're allowed in there is the old 1990's AMT devices we require to scan items for picking, packing and restock.

To further this statement, i have, nor will ever have any kind of plan to even attack IGC, as it's not even worth it. Why would I possible waste my free time trying to take down a shitty MTA server? It's not worth it.

You guys seem to believe in everything IGC tells you guys, and it's wrong. They're not correctly looking into who's actually doing it, and decide to start blaming anyone they can think of which is.. horrible.

Just thought i'd let you know NYS since I saw "Jack?" in the responses. Look out for yahself lad.

[NoSwear]

Fled from CIT's drama to fall into something even bigger, shit.


I hope this all will end soon, if not, people will start leaving since they are here for the game, not the negativity and instability they get.

[alberto]

Basically not. We already have the best protection a game server can have. Though we're working to strengthen the security of the server.

Does your provider offer Game DDoS protection through OVH? Because if not, I'd look at a provider that can offer that as I've heard its proven to be very effective.

[remaked]

Well , I saw really a lot of servers being attacked , but it didn't last for too much. I don't think the attacker will keep attacking for a long time. But , players will think it's the end and they will just leave without coming back even if the server is back because they know it will be attacked again. There is no way except waiting until this ungrateful retarded cunt gets bored and leave us ?

[Haider]

Well , I saw really a lot of servers being attacked , but it didn't last for too much. I don't think the attacker will keep attacking for a long time. But , players will think it's the end and they will just leave without coming back even if the server is back because they know it will be attacked again. There is no way except waiting until this ungrateful retarded cunt gets bored and leave us ?

They did already , there is no more attacks I think , so we should re-send the e-mails