[Jargon]

I dunno about that, they kinda like to brag about everything they do and there's nothing been tweeted since the 22nd.

[Ren3gade]

Originally Posted by Jargon I dunno about that, they kinda like to brag about everything they do and there's nothing been tweeted since the 22nd.

They have a 2nd twitter account.

[Drixevel]

Originally Posted by nelioneil Reading between the lines on their twitter channel, looks like @Derptrolling might have been responsible for these large DDOS attacks. They claimed to have done other big attacks within the last 2 months, including Cloud Flare and Xbox live servers

@DerpTrolling we believe only attacks what they post on their Twitter. If they don't post it on their Twitter account that they're doing it, they're most likely doing it. They stuck to this principle very well at the start of the year.

[Ren3gade]

Is anyone else still having issues?

My CS:GO Idle Servers are being heavily attacked daily still. I would love to know who it is.. would even be willing to pay for some information ;)

[PresidentEvil]

all my servers were down today for like 12 hours, my host said

It looks like your attacker changed attack vectors. Internap does not provide DDoS protection. We do our best to help you with it but we can't make guarantees about being able to mitigate attacks. With this type of attack, I don't know of any other host that would be able to block it.

Renegade, didn't you say your host has the best ddos protection or something, yet you're still having problems?

I really wish there was a GSP who could actually do something.

[Ren3gade]

Originally Posted by PresidentEvil all my servers were down today for like 12 hours, my host said Renegade, didn't you say your host has the best ddos protection or something, yet you're still having problems? I really wish there was a GSP who could actually do something.

Hmm.. so it isn't just me.

And yes, my host can mitigate upwards of 500gb/s. No they aren't the best with DDoS attacks lol but they are good. As I am assuming the best is maybe Prolexic? I'm not sure. But I aint got 3k a month to spend on that either LOL. So all of the attacks that hit my dedi, are extremely large.. but my host mitigates each attack within a few minutes. But the attackers keep sending attacks randomly to empty out my idle servers for 1-5 minutes each time, to kill my population. When I'm hit with attacks that are like 10gb/s-50gb/s, my servers don't even notice it at all. But these attacks are quite a bit larger than that.

And I don't host at a GSP. I host at the 4th largest hosting provider in the world. I have learned over the years that GSPs jack their prices up, and generally have poor support, and poor DDoS protection too.. and they can, simply cuz they are "GAMESERVER providers" and everyone whom hosts gameservers thinks they have to go through a GSP cuz "they're the best".

But anyhow.. I am assumming, it is someone who is running CS:GO Idle servers. Since they are attacking my Idle Servers, and the amount of power im getting hit with is decent, and costly. So they have to have a motive. The only motive I can think of, is they're running other popular CSGO Idle servers, and they want to empty out my idle servers to gain them more players/population. So what it boils down to is, who is running popular CS:GO Idle Servers, and not going offline or being DDoS'd?

After looking at gametracker, it seems that the Biggest/MostPopulated CSGO Idle servers staying online is OGaming.net, ClanVPP, Very.INSATIABLE., NextLevelGaming, and some random German & UK Idles. So more than likely, it's one of them 3. I've spoken with ClanVPP/whourdaddy for like 2 weeks now, and it doesn't appear to be him. As supposedly he is being DDoS'd offline constantly.

[asherkin]

Originally Posted by Ren3gade my host can mitigate upwards of 500gb/s

That sounds like marketing crap, you're aware some of the largest attacks ever have peaked in the low-400GB/s range?

[Ren3gade]

Originally Posted by asherkin That sounds like marketing crap, you're aware some of the largest attacks ever have peaked in the low-400GB/s range?

I am aware that the largest attack recorded is upwards of 400gb/s. But I am also aware that my host is the 4th largest hosting provider in the world, having over 100,000 servers, and a massive network, allowing them to easily mitigate extremely large attacks. Now no, I've never hit a server from my host with 500gb/s lol.. so who knows. Maybe they can't. But I do know they do one hell of a job. I'd rather them be able to mitigate these massive attacks within a few minutes, than to be null routed for 24hours constantly lol.

[Pitbull3]

After talking with renegade via steam hes using OVH like I am however we have completely different levels of protection it seems.

I have been grandfathered in due to me purchasing a long time ago via the OVH.com website for Enterprise Infrastructure. Renegade purchased through their new site which is SoYouStart.com which is aimed at people generally spending $60-80/month on dedicated machines.

When I purchased I paid for their Anti-DDoS Mitigation Professional service which my machine now is grandfathered in for free.

I get hit typically 10-15 times daily and have absolutely no lag from these attacks, they range anywhere from 750MB/s to my largest which was 70GB/s all of which have no effect on my server what so ever.



I wonder if OVH's Enterprise Mitigation is different from their SoYouStart (user orientated) mitigation. Because I showed Renegade how to put his server on permanent mitigation the same way as I did through their API which from what they tell me varies per server rack / cluster and server type / client type they have different levels of mitigation but the company is the same it's just a different "brand"... which wouldn't make sense to give the same API interface but different mitigation levels I would assume OVH had everyones mitigation the same however at a company stand point I would guess that if a client has never been hit they are put under a 2GB/s tier like they did way back in the day it went from 2GB/s, 5GB/s, 10GB/s then after you get hit for 10GB/s they put you on their full mitigation which they claim can take attacks of upwards of 480GB/s link to article here: http://forum.ovh.co.uk/showthread.ph...DoS-Protection

In which they state:

The total capacity of our 3 VACs is 3 x 160Gbps, which is 480Gbps/480Mpps. It's the biggest known mitigation infrastructure that a an infrastructure supplier has made available to their customers.

[asherkin]

afaik, the "Professional Use" option (which grants access to permanent mitigation for VAC, rather than on-attack activation) is only available on orders though OVH, not SYS (or KS).