KO's Private Server DDoS Mafia? Discuss.

**Zealous** · 12-29-2012, 11:59 PM

So let's go.

Rumor has it there are certain DDoSer within the private server scene (Schwarz; A.K.A Kaan), who uses a botnet (claiming scales to the volume of 500k bots-strong) to perform DDoS attacks and blackmail funds from server owners. In return for said funds he provides the service of DDoSing other private servers, ensuring a larger clientele for his benefactor. As preposterous as it may sound, it's almost analogous to a traditional mafia business-construct; a virtual mafia.

I remember twostars and Russian had some issues with this chap during the days of PhenomKO and could probably explain this a bit better. Also, page 24 and 25 of This Post or This Conversation with may prove interesting to those who are inclined; otherwise the basic jist of the conversation would be:

Originally Posted by Schwarz the DDoSer

if u dont wanna pay me
U should close ur server..
Eric .Russian says (6:11 PM)
why are you even attacking
a server
with > 100 people
online?
lmao
@Schwarz .. says (6:11 PM)
But if u wanna live
I can close other servers
and u pay me
When u pay me
I will close other servers
and u ll get more ppl.
Eric .Russian says (6:11 PM)
oh
so someone pay you
to take me down?
@Schwarz .. says (6:11 PM)
yes

Take it with a grain of salt if you want, but ehhhhh. It's some food for thought.

Perhaps YourKO has called in their cyber-sicilian for a bit of jelly-bashing on OSKO?

What d'ya reckon?

**Zealous** · 12-30-2012, 12:08 AM

**CarLoStyLe** · 12-30-2012, 12:09 AM

damn with that song im scared like a shit

**ilterates** · 12-30-2012, 01:09 AM

If I am not making money, no one is.

I'd say lets boycott yourko but no of us play on that shit server anyways.

**JimX** · 12-30-2012, 01:25 AM

conspiracy everywhere !

**Austin** · 12-30-2012, 01:53 AM

I wonder what the going price is for ddos

**Zealous** · 12-30-2012, 02:09 AM

Originally Posted by Austin

I wonder what the going price is for ddos

Originally Posted by Schwarz the DDoSer

@Schwarz .. says (6:13 PM)
And Kaan will help you about contact with me.
it will be at least 500$ monthly

Chump change bro, only $500 p/month!

**JimX** · 12-30-2012, 02:35 AM

well.. if anyone could afford 500$ monthly for this guy then they could really afford a HW FW to stop the DDoS ><

**Austin** · 12-30-2012, 02:55 AM

Originally Posted by Zealous

Chump change bro, only $500 p/month!

Damn... That's actually really cheap.

Originally Posted by JimX

well.. if anyone could afford 500$ monthly for this guy then they could really afford a HW FW to stop the DDoS ><

I don't see why prof doesn't just pay him off.

**JimX** · 12-30-2012, 03:02 AM

Originally Posted by Austin

I don't see why prof doesn't just pay him off.

dude this is blackmailing... by paying him it means they accept his *pimp* role..

EDIT: Fixed the quote*

**Austin** · 12-30-2012, 03:08 AM

Originally Posted by JimX

dude this is blackmailing... by paying him it means they accept his *pimp* role..

EDIT: Fixed the quote*

This has even happened in USKO on more then one occasion and on all of the instances the USKO staff couldn't do a thing about it. They ended up paying off the ddosers and one of them even became a USKO GM on CW which he used to gear himself out and sell items to others. (Back before King of Knight could look up items on chars)

**ilterates** · 12-30-2012, 03:10 AM

Pheonem ko had no protection, therefore you didn't really need a botnet to take it down. OSKO has decent protection but they are taking massive attacks possibly from more than one sources and on top of that 2000 people tried to log in as professor mentioned so that is like another attack to server

so much traffic.

**Austin** · 12-30-2012, 03:25 AM

Originally Posted by ilterates

Pheonem ko had no protection, therefore you didn't really need a botnet to take it down. OSKO has decent protection but they are taking massive attacks possibly from more than one sources and on top of that 2000 people tried to log in as professor mentioned so that is like another attack to server

so much traffic.

Yea, if 2k people are already trying to log legit it wouldn't take to much more to make it impossible for anyone to log.

**twostars** · 12-30-2012, 08:18 AM

Originally Posted by JimX

conspiracy everywhere !

If only it were unfounded. The guy seems to make good money from it, I don't see him willingly stopping any time soon. I would not be the slightest bit surprised if he was responsible.

The main reason flooding is so effective is because of mgame's server design, to be honest. If it allowed you to spread out the load between multiple clustered servers, you could just as easily drop/reroute all traffic from node(s) being targeted.
Sadly, with KO, it's considerably harder to deal with attacks, particularly those on the higher-end of the scale (when hogging all of your pipe's bandwidth is an issue) because things are so centralised; you need only target one single server to take the game server down.

The login server, on the other hand, is considerably better off in that the client & launcher can connect to a random server from your client's server.ini for authentication (not that anyone ever seems to use more than one, or separates it from the game server box, even). Additionally, they can setup round-robin DNS records (or backend proxies) to route to even more individual login server instances. The login server, at least, is designed to be manageable. Unsurprisingly, it's not often they attack the login server (but if they do, usually they just mix up the port and attacked the login server thinking it was the game server...).

I don't blame GamersFirst or any other KO publisher for ever having issues with downtime, even for giving in to them. mgame certainly didn't design their server with attacks (of any kind) in mind.
With a much more separated setup, I doubt the attacks would be as effective. They'd be considerably easier to manage, anyway...