Help - Search - Members - Calendar
Full Version: Server Under Attack.. SM Not Doing Anything
The Planet Forums > System Administration > Network
Vectr0n
My server has been under attack for over an hour now. I submited a support ticket about 5 minutes after i noticed the server wasnt reachable. After 40 minutes of waiting for a responce on the ticket i called, and spoke to a SM person, and he said he would have someone look into it ASAP. It's now been 2 hours since the attack started, and all I wanted out of you guys was to null the ip! It's not that hard. If a tech is browsing the forum the ticket is.. 117400PLNT

Hope someone puts down their coffee to null the ip.. icon_confused.gif
klaude
I spoke with one of our NOC techs who reports that this attack has subsided. I apologise for the way your ticket was handled. Having worked the graveyard shift here I know it can get quite hectic and support gets delayed. Believe me, we're not lounging about the NOC sipping coffee. icon_smile.gif Let me know if this happens again.
Guspaz
Sounds like what happened to me, except my attack lasted 8 hours icon_sad.gif

This is why I've purchased FloodGuard. 5$/mth isn't much to pay for the extra protection.
SuperBaby
As a newbie, I am cusious to know how you can tell if your server is under attack. What to observe?
Viper
I would have to say if you cant reach your server something is wrong icon_smile.gif That was the issue when mine was going on...
eddy2099
QUOTE (SuperBaby)
As a newbie, I am cusious to know how you can tell if your server is under attack. What to observe?


The first line would be to check if your site or server is reachable. If not, something is probably wrong.

If you can get in, SSH into your machine and do a

CODE
netstat -a


You should see the current connections and if you see a lot of SYN then well, it is sure sign you are under attack. But most of the time if you are under attack you will probably not be able to get in.

The other method would be to visit Orbit (remember Orbit is your friend). Under Hardware, Resource Utilization you will see long sustained spike in traffic, either incoming or outgoing. If it shows as outgoing, it would mean that your server is under attack. If it shows it as incoming, then you are attacking others.
Vectr0n
QUOTE (SuperBaby)
As a newbie, I am cusious to know how you can tell if your server is under attack. What to observe?


You can usually tell if you look at the MRTG graphs in orbit, and the fact that you cant access your server is a dead give away.

QUOTE (klaude)
Believe me, we're not lounging about the NOC sipping coffee. icon_smile.gif Let me know if this happens again.


I know, lol. I was just frustrated that you guys took so long.
talkster5
one of the companys i used to get gameservers from they got attacked and they caught the guy and took him to court.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.