Server Status Thread

[loftar]

though with all the recorded requests/action taken on the server by that guy should you not have an idea who it is?

As I said yesterday, the server itself is mostly unaffected. The attacker isn't logged in or anything, it's just a spam-flood of random traffic congesting the network, basically just creating packet loss for legitimate traffic.

[loftar]

because the devices in botnets could be relatively innocent peoples toothbrushes, routers etc.

It is actually somewhat fascinating how many recurring subnets there are in the originating traffic. I do wonder if it means that some ISPs have sent out exploitable routers to their customers and now that entire ISP is effectively being utilized for attacks.

[Alince]

Is it possible to reroute their attack target to a phony one instead?

[loftar]

Is it possible to reroute their attack target to a phony one instead?

Not sure how you imagine that would be done. It's not like server address is a secret or anything.

[iamahh]

maybe this is collateral for some geopolitical tension around motherland

[Alince]

Is it possible to reroute their attack target to a phony one instead?

Not sure how you imagine that would be done. It's not like server address is a secret or anything.

well you can make like an in between server addresses that will mitigate the amount of APM based on professional gamers max APM which is well below what a bot can do, if the APM is too high it causes a timeout on the request, thats at least what I have in mind, one server address redirects to another upon verification.

[shubla]

Buy 1 ip address (and small server) for each user. Give users personal ip addresses on forums to connect to.
Keep real server ip secret.
Then its easy to just close those addresses which get abused!

This could be additional service that user would have to pay for to get "whitelisted access" to the server via the proxy.
Those who do not want to pay have to connect via the public ip which may or may not be dossed.

Edit: Maybe users could share their bought proxies with their friends and villagers etc. if they trust them enough not to do any ddossing. Thus making the costs quite small.

[loftar]

The attack seems to have subsided again, at least for this time I guess.

APM

As I said above, there are no in-game actions involved whatsoever. This traffic is not going to logged-in sessions.

[_MR_FROST_]

Can confirm started again/

[loftar]

Can confirm started again/

Confirmed.