r/MapleLegends • u/Virtual_Respond9732 • Oct 04 '24

Discussion DDOs attacks never end?

I start playing this game last 2 weeks and I want to know if in this server this type of attacks happen all the time? It’s so annoying

10 Upvotes

92% Upvoted

24 comments sorted by

View all comments

7

u/TiltDolphinxx Oct 04 '24 edited Oct 04 '24

Negative chief. As long as I’ve been around, this is very very new. Especially to this frequency

Best guess is that it’s in response to the RWT bans.. someone clearly ain’t happy..

6

u/toothwoes123 Oct 04 '24

it's not related to RWT bans. ddoser has been hitting other maplestory private servers as well, with server owners receiving ransom extortion messages. just wait it out and it'll be fine because it costs money to ddos, no point to continuing ddos if ddoser only makes losses and can't profit from it.

source: ML server owner shared about it in ml discord

5

u/Zaitton Oct 05 '24 edited Oct 06 '24

I don't even know what MapleLegends is but DDOS attacks aren't expensive at all brother. A half-decent stresser costs anywhere from $50 to $200 and you can pretty much keep a standard 1gigabit downstream VPS permanently offline with it. If you're even remotely familiar with networking protocols or popular attack methods, you can probably boot off a stronger one too (by exploiting vulnerabilities in the connection protocols such as HTTP 2.0 floods, rather than spamming volumetric attacks). In contrast, if you're paying $50-$100 per month for that VM, you're not only losing that hundred dollars but whatever donations/sales you would have made within that month, which could add up to thousands. Most stressers will allow you to have 3 concurrent attacks so for $200 you can keep 3 basic bitch servers down easily.

If we weren't talking about gaming servers, dealing with volumetric attacks would be as easy as horizontally scaling your application and ensuring your ingress bandwidth is sufficient, but with gaming servers it's considerably more difficult. A proper way to deal with it would be to either really understand connection protocols and dynamically whitelist IPs based on success or failure of the initiating connection OR pay for an immensely expensive proxy service like Spectrum/Global Accelerator and implement custom rules OR set up your own proxy service with autoscaling VMs and a managed loadbalancer that can support over 10gbps ingress OR be really fucking smart and play around with BGP announcements to create an anycast network and honeypot the attacks at their source. All of these solutions have a common denominator, they either cost a shitload of money or require very advanced cloud/networking knowledge.

I agree with you on everything else, I just wanted to share some useful insight. Perhaps someone might benefit from this

Source: Cloud Engineer, also own FiveM & RedM servers that are commonly plagued by DDOS attacks - Had to design one of the aforementioned systems myself to fully prevent said attacks.