Forum Settings
       
« Previous 1 2 3
Reply To Thread

FFXIV servers are currently experiencing DDoS attacksFollow

#1 Nov 19 2014 at 7:48 AM Rating: Good
Scholar
***
1,732 posts
http://na.finalfantasyxiv.com/lodestone/topics/detail/37fec24c498bce9dd97a2c807ec98757b05b88f3
11/19/2014 3:40 AM
Quote:
We would like to take this opportunity to make a report regarding the login difficulties that took place over the last few days.

Currently we are experiencing DDoS attacks from an anonymous third-party targeting the FINAL FANTASY XIV game servers on the NA/EU data center.

* What is DDoS Attack?
An attack attempting to increase the server load to an extensive level by flooding the network of the targeted servers using a massive number of computers.

However with the attack we are currently experiencing, only a massive number of access attempts are being made to the server where both character data and personal information of our customers are not in danger of being exposed.

Due to this attack, our game servers, network equipment and network connection are being hit with heavy load at an extensive level, which is causing a disconnection from the game and login difficulties.

Our technical staff is taking every possible measure to address this issue but the attack is still continuing to take place by changing their methods at every moment. We will continue to monitor and work on recovery from every possible angle.

We apologize for any inconvenience this may be causing.


Edited, Nov 19th 2014 8:49am by Nashred
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#2 Nov 19 2014 at 7:52 AM Rating: Good
Scholar
***
1,732 posts
This started yesterday:

http://na.finalfantasyxiv.com/lodestone/news/detail/786a03c7c8f459dab1e027be85679dca0f015fdd

Quote:

11/19/2014 1:12 AM
NA/EU Data Center Worlds Login Difficulties (Nov. 18)
We are currently experiencing technical difficulties in the NA/EU data center Worlds wherein players are being disconnected and having a difficult time logging into FINAL FANTASY XIV: A Realm Reborn. The issue is being addressed, and new updates will follow as additional information becomes available.
We apologize for any inconvenience this may cause.

[Date & Time]
From Nov. 18, 2014 10:00 p.m. (PST)

[Details]
Players are being disconnected and having a difficult time logging in.

[Cause]
-Under investigation

[Affected Service]
-NA/EU data center Worlds in FINAL FANTASY XIV: A Realm Reborn
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#3 Nov 20 2014 at 12:48 AM Rating: Decent
Scholar
****
4,511 posts
I guess someone isnt happy that FFXIV is doing so well...

It might not even be a particular group, could very well just be one single pissed off individual. From what i understand, people can apparently "rent" a bot-net to overload a server of their choice for less than $50 a day these days. It's rediculous. They've made it into a whole marketing sceme.

I know these things can usually go on for days if not weeks, there's not an aweful lot they can do about it except maybe improve on their network a little.

I guess i'm just gonna focus on some single player games i havent finished this week instead :/ Plenty of things where i'm on the last boss fight or on the last dungeon and i simply never bothered to finish the game. Xenoblade comes to mind, heck, i havent even touched FFXIII-2, i'm on the path to the last boss in Lost Planet 3 as well, but it's a prequel so i already know how it'll end...

I hope that whoever is doing this will knock it off and stops being petty about a game...
____________________________
[XI] Surivere of Valefor
[XIV] Sir Surian Bedivere of Behemoth
http://na.finalfantasyxiv.com/lodestone/character/2401553/
#4 Nov 20 2014 at 6:27 AM Rating: Good
***
3,441 posts
Quote:
I hope that whoever is doing this will knock it off and stops being petty about a game...


You're too kind.

I hope they find who's doing this and haul their asses to court and do some good hefty legal damage to their lives.

Maybe basement script kiddies might be a little more afraid to do this crap if they are taught a lesson that if they get caught, it can and will ruin their lives because companies like SE are starting to get tired of their sh*t.

So here's hoping he's caught, found, and punished handily for it. We need more of that to send a message to stop that sh*t because it is getting old (and expensive). For every $ in manpower and resources SE (or Blizz, or whoever) has to spend in dealing with these attacks, is less $ they can use to develop our game and make it better, not to mention the wasted time that we can't even play our game.

DDoS needs to stop, and they need to start cracking down on it to send a clear message that it isn't a laughing matter and it won't be tolerated.

These "botnet" servers (if they do indeed exist) need to be shut down if they are being used for illegal activities and those renting them need to be found and punished too.

Edited, Nov 20th 2014 7:28am by Lyrailis
#5 Nov 20 2014 at 6:41 AM Rating: Decent
Scholar
Avatar
*****
12,820 posts
Yoshida doesn't want to take a heavy handed stance which is why you don't see botters banned compared to say, SE taking action against people who exploited salvage, twice even in XI. At best they'll try to add preventative measures but you won't see them blocking entire region(s) like once again, they did in XI last time they got DDoS'd.

When they found out it was coming from Korea they region blocked Korea for a few years in order to stop the DDoS since it was a cyber attack against all Japanese services at the time, so they were a lot more proactive in XI's days but Yoshi really doesn't want bad press for ARR. As nice as it is to say: "NEED TO BE FOUND AND PUNISHED!" It quite doesn't work that way especially if the attacks happen to come from America itself, remember the ONLY clusters affected are the NA/EU ones, Japan's is perfectly fine, so it's clearly focused to NA/EU game servers which China or example has no reason to attack.

____________________________

#6 Nov 20 2014 at 7:06 AM Rating: Good
Theonehio wrote:

When they found out it was coming from Korea they region blocked Korea for a few years in order to stop the DDoS since it was a cyber attack against all Japanese services at the time, so they were a lot more proactive in XI's days but Yoshi really doesn't want bad press for ARR. As nice as it is to say: "NEED TO BE FOUND AND PUNISHED!" It quite doesn't work that way especially if the attacks happen to come from America itself, remember the ONLY clusters affected are the NA/EU ones, Japan's is perfectly fine, so it's clearly focused to NA/EU game servers which China or example has no reason to attack.


I was under the impression the game is already blocked in Korea (and China)? They are also getting their own version of the game.
#7 Nov 20 2014 at 7:57 AM Rating: Decent
Scholar
Avatar
*****
12,820 posts
Hyanmen wrote:
Theonehio wrote:

When they found out it was coming from Korea they region blocked Korea for a few years in order to stop the DDoS since it was a cyber attack against all Japanese services at the time, so they were a lot more proactive in XI's days but Yoshi really doesn't want bad press for ARR. As nice as it is to say: "NEED TO BE FOUND AND PUNISHED!" It quite doesn't work that way especially if the attacks happen to come from America itself, remember the ONLY clusters affected are the NA/EU ones, Japan's is perfectly fine, so it's clearly focused to NA/EU game servers which China or example has no reason to attack.


I was under the impression the game is already blocked in Korea (and China)? They are also getting their own version of the game.


It is only in China as far as I've heard since China above all need very specific design standards to do business there MMO wise. They are getting their own versions which are 1-2 updates behind (Korea launches with 2.3 content by time we hit 2.5 unless they changed that plan.)
____________________________

#8 Nov 20 2014 at 9:46 AM Rating: Decent
Scholar
***
1,732 posts
Honestly I am not sure this is just a DDoS attack.. Why again only certain people have had issues, Sunday nights issue was a overload on level 3 and SE servers we know that. People posted screen shots of the data where the packet loss was.

But the last few days again it does not affect everyone. DDos attack would overwhelm the servers and such causing issues for everyone. Tesee has been playing allot because she is going home for thanksgiving for the week and wanted to cap tomes and get allot of stuff done since she is missing over a week of game play. She has had no issues. Yesterday when the worst hit she had no issues logging on or playing.. Here is the funny thing normally we have had the issues at night, tons of people were complaining of lag last night on our server and we were fine.. If it were DDoS it would be everyone. Also I guess the issue said resolved but people were having more issues than ever last night. Ok so no more DDoS but more people than ever lagging again?

I am guessing SE also rents a rack of servers or space for their servers in some data center some where. I doubt they have their own data center because it would be way expensive.. That data center would be responsible for stopping the attack and protecting their customers.

Something is going on that is for sure but I am not sure SE knows exactly what it is.. I think the data center or the network they are on is to blame for some of it..
They may be trying to fix the problem that allot of us are having and created new issues for other people... It makes no sense we are fine since Sunday and now everyone else is lagging around.. It could be SE is working on getting its customers routed around level 3 but hit a even weaker point. They have been asking those with issues too send logs to them so they can track down the issues..

Edited, Nov 20th 2014 10:47am by Nashred

Edited, Nov 20th 2014 11:00am by Nashred
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#9 Nov 20 2014 at 10:09 AM Rating: Good
Scholar
Avatar
*****
12,820 posts
It's been confirmed by numerous companies they've been DDoS'd the past few days. So unless the ones you know aren't affected, they were likely on the Japanese datacenter then, which wasn't touched.

http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16394&view=map

Also shows that the US has been railroaded pretty badly.
____________________________

#10 Nov 20 2014 at 11:22 AM Rating: Excellent
****
5,745 posts
Lyrailis wrote:
These "botnet" servers (if they do indeed exist) need to be shut down...

The thing about distributed DoS is that it's not reliant on a single server, so it's not as simple as shutting one or more servers. And if a compromised server is being used as part of the attacks, it's not a simple matter of shutting them down because they likely provide meaningful service in some way.
#11 Nov 20 2014 at 11:39 AM Rating: Decent
Scholar
***
1,732 posts
Theonehio wrote:
It's been confirmed by numerous companies they've been DDoS'd the past few days. So unless the ones you know aren't affected, they were likely on the Japanese datacenter then, which wasn't touched.

http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16394&view=map

Also shows that the US has been railroaded pretty badly.



Just because other companies have been hit does not mean SE servers were hit...
Those people that were not affected were me and Tesee and we are not on Japanese servers...
There were others on while all this was going on that had not idea that there was DDoS attacks? No lag no issues getting on.. Why would these people not be affected and other were?


My point is though there is more going on than just DDoS...I am not saying there wasn't a DDoS it that the lag issues with FFXIV go way deeper than that...

Last night they said it was resolved but allot still had issues with lag.. More people complaining than I have ever seen yet other than Sunday where people could not even log on.

Again the weird thing is we normally have issues between 7 to 9 pm for the last two months and last couple days since the big outage Sunday no issues.. It makes no sense.








Edited, Nov 20th 2014 12:55pm by Nashred
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#12 Nov 20 2014 at 11:53 AM Rating: Decent
Scholar
Avatar
*****
12,820 posts
Other companies (specifically MMOs, including WoW) have been hit the past few days..it's an obvious pattern along with SE themselves stating it's a DDoS attack (they monitor the traffic, they would know this information lol.)

Sunday Level3 did have issues and has been an issue for FFXIV with some people for a long time, HOWEVER, we do know the past few days it was the DDoS attacks because Japanese servers weren't affected at all, only NA/EU were brought down, along with other NA/EU based MMO servers. I get what you're trying to say but the evidence is there. We already know there's routing issues, however, the entire NA/EU datacenter(s) were brought down monday and tuesday for example. Wednesday it was much better but still routing issues (the weather IS pretty bad heading towards the DC.) So yesterday could have been a typical routing issue.

Quote:
We would like to take this opportunity to make a report regarding the login difficulties that took place over the last few days.

Currently we are experiencing DDoS attacks from an anonymous third-party targeting the FINAL FANTASY XIV game servers on the NA/EU data center.


http://na.finalfantasyxiv.com/lodestone/topics/detail/37fec24c498bce9dd97a2c807ec98757b05b88f3
____________________________

#13 Nov 20 2014 at 11:57 AM Rating: Default
Scholar
***
1,732 posts
Theonehio wrote:
however, the entire NA/EU datacenter(s) were brought down monday and tuesday for example. Wednesday it was much better but still routing issues (the weather IS pretty bad heading towards the DC.) So yesterday could have been a typical routing issue.

Quote:
We would like to take this opportunity to make a report regarding the login difficulties that took place over the last few days.

Currently we are experiencing DDoS attacks from an anonymous third-party targeting the FINAL FANTASY XIV game servers on the NA/EU data center.


http://na.finalfantasyxiv.com/lodestone/topics/detail/37fec24c498bce9dd97a2c807ec98757b05b88f3


See in bold if the entire thing was brought down why were some people not affected..
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#14 Nov 20 2014 at 12:22 PM Rating: Excellent
****
5,745 posts
Nashred wrote:
See in bold if the entire thing was brought down why were some people not affected..

"The entire thing was brought down" is not a technical description of how a server or network behaves when it's under a DDoS attack. Servers treat established connections differently than incoming connections that are trying to establish themselves. From a player perspective, that means there's potentially a difference in impact when comparing a player that is already logged in to a player that is trying to log in. Or a player entering an instanced dungeon. Or perhaps even changing zones (if that requires connecting to a different server).

On Sunday night, I was able to log in, check my retainers, and sit around Ul'dah not doing anything in particular with no problems at all. It wasn't until I entered Tam-Tara that I started to lag out. And I found that I was unable to log in after that point.

Heavy server load doesn't affect everyone in the same exact way.
#15 Nov 20 2014 at 1:13 PM Rating: Default
Scholar
***
1,732 posts
svlyons wrote:
Nashred wrote:
See in bold if the entire thing was brought down why were some people not affected..

"The entire thing was brought down" is not a technical description of how a server or network behaves when it's under a DDoS attack. Servers treat established connections differently than incoming connections that are trying to establish themselves. From a player perspective, that means there's potentially a difference in impact when comparing a player that is already logged in to a player that is trying to log in. Or a player entering an instanced dungeon. Or perhaps even changing zones (if that requires connecting to a different server).

On Sunday night, I was able to log in, check my retainers, and sit around Ul'dah not doing anything in particular with no problems at all. It wasn't until I entered Tam-Tara that I started to lag out. And I found that I was unable to log in after that point.

Heavy server load doesn't affect everyone in the same exact way.


I know how it works, I work in IT, I have owned part of a isp, i have also owned and run gaming servers, I have installed dsl etc.... I am not stranger to this stuff. You are not reading what I am typing!





Edited, Nov 20th 2014 2:14pm by Nashred
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#16 Nov 20 2014 at 1:55 PM Rating: Good
Scholar
****
4,511 posts
I tried to ignore my own recommendation and logged in on XIV regardless...

It was beyond unplayable. By the time i got into a dungeon (after getting thrown out of the queue a few times by disconnecting), i kept getting thrown out mid-dungeon too...

Shame, guess i really need to play those single player games...
____________________________
[XI] Surivere of Valefor
[XIV] Sir Surian Bedivere of Behemoth
http://na.finalfantasyxiv.com/lodestone/character/2401553/
#17 Nov 20 2014 at 2:27 PM Rating: Decent
****
5,745 posts
Nashred wrote:
You are not reading what I am typing!

I did read what you are typing. I'm just not coming to the same conclusions as you.
#18 Nov 20 2014 at 3:08 PM Rating: Good
***
3,441 posts
Quote:

I know how it works, I work in IT, I have owned part of a isp, i have also owned and run gaming servers, I have installed dsl etc.... I am not stranger to this stuff. You are not reading what I am typing!


It is pretty easy to claim you are an expert at your field...

Something else entirely to actually prove it. You claim you've worked in IT, and even owned part of "a isp"... yeah, I'm sure every gamer has done that, right? And of course anybody could own part of an ISP -- it is called stocks and the stock exchange. Why yes, for a few dollars, I could buy a single share in any of the ISPs out there and claim I own "part of an ISP"... does that mean I'm an expert on DDoS attacks? Of course not. But I could still claim ownership of "part of an ISP" and be telling the truth.

You've run gaming servers... you know what, I've done that too. I hosted a Terraria server a few times. Still a "gaming server". It is a server for a video game. Does that mean I know how to run an MMORPG and are familiar with huge datacenters and servers? Of course not. But I could claim that I have ran a "gaming server" and be technically telling the truth.

Installing DSL? Nearly anybody who has DSL technically "installed" said DSL -- you plug the modem in, plug your phone line into it, and plug a router (if you have one) into it. But does that mean you know how DSLAMs work, and such? Probably not.

Point is... you can say a lot of things. Doesn't mean they are true, and it doesn't mean you have expert knowledge of the field you claim to, especially when there's a company that is telling us what happened.

So, if you're trying to say it wasn't DDoS, or DDoS wasn't the entire issue.. then you are basically accusing SE of lying. Why would they lie? If they had other issues, they would just say so. There've been times that there were non-DDoS issues and they told us upfront. Why would they do any different here?

And lastly... if you believe there are other issues other than DDoS at work here, why don't you tap into your "expert" knowledge and enlighten us (and provide proof while you're at it...) without spouting hearsay?
#19Nashred, Posted: Nov 20 2014 at 3:16 PM, Rating: Sub-Default, (Expand Post) So you are calling me a liar and why would I even do that. i never said I am a expert either.. I did lot more than plug in a modem.
#20 Nov 20 2014 at 3:23 PM Rating: Decent
Scholar
Avatar
*****
12,820 posts
Point is:

Numerous companies that run MMOs reported DDoS attacks the past 3 or so days.
You said it's something else.
SE reported DDoS attacks that basically brought the game down as no one could properly login or stay connected on the NA/EU servers to some extent, be it in the "real world" or an Instance.
You claimed you and your friend somehow managed to avoid the server explosion that people basically flooded the tech support forum on OF.
Everyone knows the route in between you and SE is screwed, e.g Level3.net, however SE stated that wasn't the case for the past few days.
You then claimed to be an expert.

I don't think it's so much someone "discrediting" you, it's more alon the lines you're ignoring that numerous companies have already admitted they're currently under attack which, as you know or should know, DDoS is, in short, "gtfo you ain't playing/using this service."

____________________________

#21Nashred, Posted: Nov 20 2014 at 3:27 PM, Rating: Sub-Default, (Expand Post) Lyrailis pretty much just called me a liar..
#22 Nov 21 2014 at 8:31 AM Rating: Default
Scholar
***
1,732 posts
Lyrailis wrote:
[quote]

So, if you're trying to say it wasn't DDoS, or DDoS wasn't the entire issue.. then you are basically accusing SE of lying. Why would they lie? If they had other issues, they would just say so. There've been times that there were non-DDoS issues and they told us upfront. Why would they do any different here?
?


Been thinking about this statement.. The only person here calling anyone a liar is you...

You accuse me of lying about what I do for a living.. My profession is pretty well known I have posted about it lots of times,. most people who have read my posts know that most likely I am not lying..

You accuse me of calling SE a lair when all I said is there is more going on than A DDoS attack Which is also well known and SE even knows it. SE has a form to fill out if you have issues to help them track the problem down, For pc users they want you to run a few programs and send them the logs.. They have a thread for those who's isps are throttling their internet to fill out.. So it is obvious even SE knows more is happening.. So how am I the liar and how am i accusing SE of anything and why would I and what purpose?

I think you just like to jump on people..

I am trying to have a intelligent conversion about the issue and if you like it go to another thread and post. I would like to solve the issues Tes and I have had for several months now and if you dont like it to bad.

Edited, Nov 21st 2014 9:32am by Nashred
____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#23 Nov 21 2014 at 9:10 AM Rating: Decent
Scholar
***
1,732 posts
Last night when I logged on the lag was really bad around 5:00. Usually we lag from 7:00 to around 9:00
.

I usually get on too run dungeons right way for tomes before the lag set in..

We could not even get through titan.

I was standing on the right and titan put a landslide down the middle and knocked me off.. I was not even near the thing and was not moving.

During the bomb phase it would freeze for everyone after the first bomb and then drop all the other bombs at once so you could not tell what order..

I talked to a few people on ultros and most were not doing anything because the lag was bad..

Something changed for us as of the big outage Sunday... We were not lagging at all since then even during the normal lag hours for us and now this constant lag. I am wondering if SE or att changed something?

I need to boot up the the game on my laptop so I can tracert and find out what is going on and where the issues are coming from now... I have been playing on the PS4 lately so it makes things tough to track the problem down..

How were the instances and worlds last night for others..



____________________________
FFXI: Nashred
Server: Phoenix

FFXIV : Sir Nashred
server: Ultros
#24 Nov 21 2014 at 10:13 AM Rating: Excellent
I've had some very minor lag, the split second kind that means you get hit by an AOE that your screen indicates you just barely dodged, but the game was otherwise stable for me. I was able to play last night without any noticeable difficulties.
#25 Nov 21 2014 at 10:18 AM Rating: Decent
Scholar
Avatar
*****
12,820 posts
Aside the servers blowing up again late last night things were fine.
____________________________

#26 Nov 21 2014 at 10:30 AM Rating: Excellent
Game was stable for me yesterday when I got off work, but mass DCs were back when I logged in for coil at 10 p.m. PST.
____________________________
Thayos Redblade
Jormungandr
Hyperion
« Previous 1 2 3
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 236 All times are in CST
Anonymous Guests (236)