11.07.18 | Downtime Postmortem

Discussion in 'News & Patches' started by Markillion, Nov 7, 2018 at 2:11 AM.

  1. Markillion

    Markillion Administrator Staff Member

    Joined:
    Oct 3, 2018
    Messages:
    22
    Likes Received:
    55
    Trophy Points:
    13
    Markillion
    At 23:56 EST we were targeted by a DDoS attack that lasted for approximately 10 minutes. This is not the first time we have been targeted by a DDoS attack, we have already been targeted twice since launch. This attack however was the largest - it topped out at 10.64Gbps and 505,624 packets per second before affecting our availability.

    We had plans in place to protect the server from these threats however they were still in the process of being rolled out, so the extended downtime after the attack this morning was to apply parts of those plans. We have migrated our servers over to a system better suited to deal with these attacks which will work better with our long term server and community protection plans and will continue to improve as time goes on.

    There's no changes required from the community due to this, everything should continue to work as normal.

    [​IMG]
    Attached are a excerpt of our networking logs at the start of the attack:
    2018-11-07 04:56:15 UTC IP 51.254.22.51:389 > killion-1.internal:7374 UDP, length 24002588, packets 8192
    2018-11-07 04:56:15 UTC IP 89.121.225.102:389 > killion-1.internal:7374 UDP, length 23928860, packets 8192
    2018-11-07 04:56:15 UTC IP 82.194.220.133:389 > killion-1.internal:51082 UDP, length 21266460, packets 8192
    2018-11-07 04:56:15 UTC IP 187.189.117.89:389 > killion-1.internal:16082 UDP, length 24231964, packets 8192
    2018-11-07 04:56:15 UTC IP 149.202.169.151:389 > killion-1.internal:15005 UDP, length 24625180, packets 8192
    2018-11-07 04:56:15 UTC IP 49.255.155.149:389 > killion-1.internal:16960 UDP, length 10219548, packets 4096
    2018-11-07 04:56:15 UTC IP 145.131.196.210:389 > killion-1.internal:51082 UDP, length 10543132, packets 4096
    2018-11-07 04:56:15 UTC IP 52.247.217.202:389 > killion-1.internal:7374 UDP, length 24330268, packets 8192
    2018-11-07 04:56:15 UTC IP 126.129.149.52:389 > killion-1.internal:51496 UDP, length 24207388, packets 8192
    2018-11-07 04:56:15 UTC IP 68.235.60.45:389 > killion-1.internal:16082 UDP, length 24084508, packets 8192
    2018-11-07 04:56:16 UTC IP 138.121.200.122:389 > killion-1.internal:39815 UDP, length 24207388, packets 8192
    2018-11-07 04:56:16 UTC IP 52.80.97.184:389 > killion-1.internal:53357 UDP, length 11907100, packets 4096
    2018-11-07 04:56:16 UTC IP 138.185.109.192:389 > killion-1.internal:51082 UDP, length 51068956, packets 16384
    2018-11-07 04:56:16 UTC IP 143.208.132.174:389 > killion-1.internal:51496 UDP, length 23461916, packets 8192
    2018-11-07 04:56:16 UTC IP 52.136.231.183:389 > killion-1.internal:20891 UDP, length 24903708, packets 8192
    2018-11-07 04:56:16 UTC IP 187.188.158.253:389 > killion-1.internal:48908 UDP, length 10289180, packets 4096
    2018-11-07 04:56:16 UTC IP 13.81.175.80:389 > killion-1.internal:39815 UDP, length 24616988, packets 8192
    2018-11-07 04:56:16 UTC IP 149.202.66.121:389 > killion-1.internal:25126 UDP, length 45924380, packets 16384
    2018-11-07 04:56:16 UTC IP 62.12.119.45:389 > killion-1.internal:16960 UDP, length 24412188, packets 8192
    2018-11-07 04:56:16 UTC IP 201.243.92.187:389 > killion-1.internal:20891 UDP, length 22528028, packets 8192
    2018-11-07 04:56:16 UTC IP 149.202.112.40:389 > killion-1.internal:16082 UDP, length 25239580, packets 8192
    2018-11-07 04:56:16 UTC IP 190.145.50.166:389 > killion-1.internal:51082 UDP, length 21962780, packets 8192
    2018-11-07 04:56:16 UTC IP 213.246.57.239:389 > killion-1.internal:51082 UDP, length 12120092, packets 4096
    2018-11-07 04:56:16 UTC IP 147.135.181.166:389 > killion-1.internal:16960 UDP, length 24330268, packets 8192
    2018-11-07 04:56:16 UTC IP 189.90.118.20:389 > killion-1.internal:46301 UDP, length 24903708, packets 8192
    2018-11-07 04:56:16 UTC IP 217.107.105.245:389 > killion-1.internal:33462 UDP, length 24223772, packets 8192
    2018-11-07 04:56:16 UTC IP 181.57.193.22:389 > killion-1.internal:35576 UDP, length 12185628, packets 4096
    2018-11-07 04:56:16 UTC IP 140.120.38.40:389 > killion-1.internal:13348 UDP, length 11005980, packets 4096
    2018-11-07 04:56:16 UTC IP 169.57.166.57:389 > killion-1.internal:13348 UDP, length 25108508, packets 8192
    2018-11-07 04:56:16 UTC IP 108.58.239.139:389 > killion-1.internal:59634 UDP, length 10633244, packets 4096
    2018-11-07 04:56:16 UTC IP 115.79.215.167:389 > killion-1.internal:25126 UDP, length 12001308, packets 4096
    2018-11-07 04:56:16 UTC IP 190.85.111.109:389 > killion-1.internal:50177 UDP, length 23994396, packets 8192
    2018-11-07 04:56:16 UTC IP 211.144.154.100:389 > killion-1.internal:61223 UDP, length 19030044, packets 8192
    2018-11-07 04:56:16 UTC IP 200.174.231.199:389 > killion-1.internal:13348 UDP, length 19308572, packets 8192
    2018-11-07 04:56:16 UTC IP 87.118.90.197:389 > killion-1.internal:59634 UDP, length 24100892, packets 8192
    2018-11-07 04:56:16 UTC IP 185.27.36.115:389 > killion-1.internal:25788 UDP, length 22798364, packets 8192
    2018-11-07 04:56:16 UTC IP 104.130.239.136:389 > killion-1.internal:3199 UDP, length 24592412, packets 8192
    2018-11-07 04:56:16 UTC IP 190.26.132.205:389 > killion-1.internal:39815 UDP, length 22994972, packets 8192
    2018-11-07 04:56:16 UTC IP 92.187.64.161:389 > killion-1.internal:25788 UDP, length 12173340, packets 4096
    2018-11-07 04:56:16 UTC IP 92.187.64.161:389 > killion-1.internal:25788 UDP, length 12173340, packets 4096
    2018-11-07 04:56:17 UTC IP 94.23.24.10:389 > killion-1.internal:57023 UDP, length 11354140, packets 4096
    2018-11-07 04:56:17 UTC IP 187.189.199.62:389 > killion-1.internal:46301 UDP, length 24608796, packets 8192
    2018-11-07 04:56:17 UTC IP 177.9.57.40:389 > killion-1.internal:57023 UDP, length 24240156, packets 8192
    2018-11-07 04:56:17 UTC IP 66.102.213.132:389 > killion-1.internal:30972 UDP, length 23658524, packets 8192
    2018-11-07 04:56:17 UTC IP 206.71.224.234:389 > killion-1.internal:51496 UDP, length 24027164, packets 8192
    2018-11-07 04:56:17 UTC IP 190.196.158.142:389 > killion-1.internal:56388 UDP, length 42090524, packets 16384
    2018-11-07 04:56:17 UTC IP 217.160.140.114:389 > killion-1.internal:25126 UDP, length 25313308, packets 8192
    2018-11-07 04:56:17 UTC IP 109.107.211.148:389 > killion-1.internal:20891 UDP, length 23805980, packets 8192
    2018-11-07 04:56:17 UTC IP 158.69.4.10:389 > killion-1.internal:61223 UDP, length 23322652, packets 8192
    2018-11-07 04:56:17 UTC IP 18.225.2.55:389 > killion-1.internal:34675 UDP, length 23142428, packets 8192
    2018-11-07 04:56:17 UTC IP 207.178.215.219:389 > killion-1.internal:39815 UDP, length 98664476, packets 32768
    2018-11-07 04:56:17 UTC IP 37.209.208.199:389 > killion-1.internal:33462 UDP, length 11948060, packets 4096
    2018-11-07 04:56:17 UTC IP 2.37.135.246:389 > killion-1.internal:3199 UDP, length 20357148, packets 8192
    2018-11-07 04:56:17 UTC IP 96.231.245.197:389 > killion-1.internal:51496 UDP, length 23945244, packets 8192
    2018-11-07 04:56:17 UTC IP 132.248.184.249:389 > killion-1.internal:7374 UDP, length 10698780, packets 4096
    2018-11-07 04:56:17 UTC IP 101.99.22.238:389 > killion-1.internal:51082 UDP, length 9166876, packets 4096
    2018-11-07 04:56:17 UTC IP 117.63.127.245:389 > killion-1.internal:15005 UDP, length 23855132, packets 8192
    2018-11-07 04:56:17 UTC IP 202.104.188.139:389 > killion-1.internal:48908 UDP, length 10448924, packets 4096
    2018-11-07 04:56:17 UTC IP 45.125.211.5:389 > killion-1.internal:25788 UDP, length 12161052, packets 4096
    2018-11-07 04:56:17 UTC IP 87.98.179.120:389 > killion-1.internal:16960 UDP, length 12062748, packets 4096
    2018-11-07 04:56:17 UTC IP 62.255.174.158:389 > killion-1.internal:37552 UDP, length 22331420, packets 8192
    2018-11-07 04:56:17 UTC IP 5.9.89.17:389 > killion-1.internal:61223 UDP, length 99418140, packets 32768
    2018-11-07 04:56:17 UTC IP 149.202.192.174:389 > killion-1.internal:39815 UDP, length 23797788, packets 8192
    2018-11-07 04:56:17 UTC IP 40.71.34.26:389 > killion-1.internal:7374 UDP, length 99713052, packets 32768
    2018-11-07 04:56:17 UTC IP 119.92.176.197:389 > killion-1.internal:25788 UDP, length 25460764, packets 8192
    2018-11-07 04:56:17 UTC IP 66.71.241.118:389 > killion-1.internal:55115 UDP, length 11894812, packets 4096
    2018-11-07 04:56:17 UTC IP 109.109.243.18:389 > killion-1.internal:61223 UDP, length 21823516, packets 8192
    2018-11-07 04:56:17 UTC IP 54.38.44.4:389 > killion-1.internal:19958 UDP, length 24264732, packets 8192
    2018-11-07 04:56:17 UTC IP 51.254.151.188:389 > killion-1.internal:57023 UDP, length 99876892, packets 32768
    2018-11-07 04:56:17 UTC IP 190.81.174.195:389 > killion-1.internal:3199 UDP, length 20078620, packets 8192
    2018-11-07 04:56:17 UTC IP 18.212.155.2:389 > killion-1.internal:61223 UDP, length 25346076, packets 8192
    2018-11-07 04:56:17 UTC IP 212.147.66.252:389 > killion-1.internal:39815 UDP, length 24461340, packets 8192
    2018-11-07 04:56:17 UTC IP 74.101.175.94:389 > killion-1.internal:34675 UDP, length 24240156, packets 8192
    2018-11-07 04:56:17 UTC IP 13.81.43.56:389 > killion-1.internal:50177 UDP, length 24535068, packets 8192
    2018-11-07 04:56:17 UTC IP 178.124.144.245:389 > killion-1.internal:35576 UDP, length 150405148, packets 65536
    2018-11-07 04:56:17 UTC IP 50.205.72.166:389 > killion-1.internal:7374 UDP, length 92241948, packets 32768
    2018-11-07 04:56:17 UTC IP 148.251.236.250:389 > killion-1.internal:37552 UDP, length 24068124, packets 8192
    2018-11-07 04:56:17 UTC IP 58.132.205.90:389 > killion-1.internal:39815 UDP, length 12079132, packets 4096
    2018-11-07 04:56:17 UTC IP 217.141.85.238:389 > killion-1.internal:61223 UDP, length 98238492, packets 32768
    2018-11-07 04:56:17 UTC IP 124.207.198.60:389 > killion-1.internal:51082 UDP, length 21405724, packets 8192
    2018-11-07 04:56:17 UTC IP 221.142.76.195:389 > killion-1.internal:16960 UDP, length 9650204, packets 4096
    2018-11-07 04:56:17 UTC IP 121.166.143.140:389 > killion-1.internal:59317 UDP, length 20496412, packets 8192
    2018-11-07 04:56:17 UTC IP 125.212.202.19:389 > killion-1.internal:16960 UDP, length 10915868, packets 4096
    2018-11-07 04:56:17 UTC IP 193.9.62.90:389 > killion-1.internal:56388 UDP, length 24829980, packets 8192
    2018-11-07 04:56:17 UTC IP 218.24.95.172:389 > killion-1.internal:51082 UDP, length 10461212, packets 4096
    2018-11-07 04:56:17 UTC IP 148.251.202.168:389 > killion-1.internal:55115 UDP, length 25108508, packets 8192
    2018-11-07 04:56:17 UTC IP 185.86.22.49:389 > killion-1.internal:55115 UDP, length 167903260, packets 65536
    2018-11-07 04:56:17 UTC IP 63.70.147.26:389 > killion-1.internal:30972 UDP, length 93847580, packets 32768
    2018-11-07 04:56:17 UTC IP 223.197.178.225:389 > killion-1.internal:16960 UDP, length 11870236, packets 4096
    2018-11-07 04:56:17 UTC IP 41.76.107.60:389 > killion-1.internal:39205 UDP, length 24166428, packets 8192
    2018-11-07 04:56:17 UTC IP 201.132.84.106:389 > killion-1.internal:61223 UDP, length 23978012, packets 8192
    2018-11-07 04:56:17 UTC IP 110.44.126.178:389 > killion-1.internal:55115 UDP, length 99287068, packets 32768
    2018-11-07 04:56:17 UTC IP 41.66.252.22:389 > killion-1.internal:50177 UDP, length 24231964, packets 8192
    2018-11-07 04:56:17 UTC IP 193.140.145.247:389 > killion-1.internal:13372 UDP, length 9883676, packets 4096
    2018-11-07 04:56:17 UTC IP 100.32.24.195:389 > killion-1.internal:15005 UDP, length 199753756, packets 65536
    2018-11-07 04:56:17 UTC IP 109.72.81.232:389 > killion-1.internal:59317 UDP, length 21299228, packets 8192
    2018-11-07 04:56:17 UTC IP 75.144.220.182:389 > killion-1.internal:13372 UDP, length 99319836, packets 32768
    2018-11-07 04:56:17 UTC IP 201.149.62.252:389 > killion-1.internal:35576 UDP, length 24215580, packets 8192
    2018-11-07 04:56:17 UTC IP 103.210.75.172:389 > killion-1.internal:55115 UDP, length 7286812, packets 4096
    2018-11-07 04:56:17 UTC IP 124.81.238.20:389 > killion-1.internal:30972 UDP, length 12443676, packets 4096
    2018-11-07 04:56:17 UTC IP 202.44.14.166:389 > killion-1.internal:51496 UDP, length 11853852, packets 4096
    2018-11-07 04:56:17 UTC IP 113.165.166.21:389 > killion-1.internal:57023 UDP, length 11780124, packets 4096
    2018-11-07 04:56:17 UTC IP 50.59.195.146:389 > killion-1.internal:59634 UDP, length 24338460, packets 8192
    2018-11-07 04:56:17 UTC IP 38.65.136.28:389 > killion-1.internal:56388 UDP, length 11268124, packets 4096
    2018-11-07 04:56:17 UTC IP 186.231.121.102:389 > killion-1.internal:46301 UDP, length 11591708, packets 4096
    2018-11-07 04:56:17 UTC IP 207.244.159.158:389 > killion-1.internal:53357 UDP, length 24084508, packets 8192
    2018-11-07 04:56:17 UTC IP 54.206.81.14:389 > killion-1.internal:16960 UDP, length 12111900, packets 4096
    2018-11-07 04:56:17 UTC IP 81.247.63.191:389 > killion-1.internal:37552 UDP, length 19808284, packets 8192
    2018-11-07 04:56:17 UTC IP 75.147.208.26:389 > killion-1.internal:51082 UDP, length 22749212, packets 8192
    2018-11-07 04:56:17 UTC IP 129.213.126.90:389 > killion-1.internal:16960 UDP, length 195035164, packets 65536
    2018-11-07 04:56:17 UTC IP 5.189.149.22:389 > killion-1.internal:59317 UDP, length 23781404, packets 8192
    2018-11-07 04:56:17 UTC IP 91.183.49.176:389 > killion-1.internal:57023 UDP, length 20897820, packets 8192
    2018-11-07 04:56:17 UTC IP 218.13.7.10:389 > killion-1.internal:50177 UDP, length 19947548, packets 8192
    2018-11-07 04:56:18 UTC IP 158.255.5.65:389 > killion-1.internal:33462 UDP, length 98730012, packets 32768
    2018-11-07 04:56:18 UTC IP 193.12.142.70:389 > killion-1.internal:61223 UDP, length 48218140, packets 16384
    2018-11-07 04:56:18 UTC IP 202.97.251.157:389 > killion-1.internal:61223 UDP, length 20406300, packets 8192
    2018-11-07 04:56:18 UTC IP 37.187.28.86:389 > killion-1.internal:13372 UDP, length 11685916, packets 4096
    2018-11-07 04:56:18 UTC IP 165.16.79.194:389 > killion-1.internal:39815 UDP, length 24576028, packets 8192
    2018-11-07 04:56:18 UTC IP 121.156.220.68:389 > killion-1.internal:55115 UDP, length 9904156, packets 4096
    2018-11-07 04:56:18 UTC IP 187.11.242.49:389 > killion-1.internal:59634 UDP, length 24109084, packets 8192
    2018-11-07 04:56:18 UTC IP 162.155.0.242:389 > killion-1.internal:37552 UDP, length 177537052, packets 65536
    2018-11-07 04:56:18 UTC IP 162.248.54.220:389 > killion-1.internal:25126 UDP, length 12128284, packets 4096
    2018-11-07 04:56:18 UTC IP 137.74.103.201:389 > killion-1.internal:51496 UDP, length 12144668, packets 4096
    2018-11-07 04:56:18 UTC IP 191.190.246.27:389 > killion-1.internal:50177 UDP, length 20832284, packets 8192
    2018-11-07 04:56:18 UTC IP 82.165.129.123:389 > killion-1.internal:53357 UDP, length 24649756, packets 8192
    2018-11-07 04:56:18 UTC IP 190.86.198.162:389 > killion-1.internal:33462 UDP, length 24018972, packets 8192
    2018-11-07 04:56:18 UTC IP 173.204.32.214:389 > killion-1.internal:33462 UDP, length 20922396, packets 8192
    2018-11-07 04:56:18 UTC IP 178.22.71.150:389 > killion-1.internal:53357 UDP, length 11431964, packets 4096
    2018-11-07 04:56:18 UTC IP 123.30.128.248:389 > killion-1.internal:53357 UDP, length 10358812, packets 4096
    2018-11-07 04:56:18 UTC IP 13.232.162.159:389 > killion-1.internal:39815 UDP, length 96337948, packets 32768
    2018-11-07 04:56:18 UTC IP 62.28.129.97:389 > killion-1.internal:51082 UDP, length 20496412, packets 8192
    2018-11-07 04:56:18 UTC IP 190.90.66.252:389 > killion-1.internal:30972 UDP, length 48119836, packets 16384
    2018-11-07 04:56:18 UTC IP 189.62.98.28:389 > killion-1.internal:39815 UDP, length 24764444, packets 8192
    2018-11-07 04:56:18 UTC IP 213.171.196.53:389 > killion-1.internal:39205 UDP, length 12365852, packets 4096
    2018-11-07 04:56:18 UTC IP 49.50.106.107:389 > killion-1.internal:19958 UDP, length 23740444, packets 8192
    2018-11-07 04:56:18 UTC IP 117.59.224.52:389 > killion-1.internal:39205 UDP, length 20578332, packets 8192
    2018-11-07 04:56:18 UTC IP 128.59.71.136:389 > killion-1.internal:16082 UDP, length 25731100, packets 8192
    2018-11-07 04:56:18 UTC IP 203.162.121.201:389 > killion-1.internal:20891 UDP, length 10756124, packets 4096
    2018-11-07 04:56:18 UTC IP 182.247.238.17:389 > killion-1.internal:25788 UDP, length 11898908, packets 4096
    2018-11-07 04:56:18 UTC IP 173.227.156.36:389 > killion-1.internal:57023 UDP, length 24789020, packets 8192
    2018-11-07 04:56:18 UTC IP 222.92.31.12:389 > killion-1.internal:13348 UDP, length 95289372, packets 32768
    2018-11-07 04:56:18 UTC IP 169.50.182.12:389 > killion-1.internal:61223 UDP, length 11788316, packets 4096
    2018-11-07 04:56:18 UTC IP 181.48.69.86:389 > killion-1.internal:56388 UDP, length 11431964, packets 4096
    2018-11-07 04:56:18 UTC IP 177.55.61.253:389 > killion-1.internal:51082 UDP, length 23183388, packets 8192
    2018-11-07 04:56:18 UTC IP 169.50.147.146:389 > killion-1.internal:48908 UDP, length 11935772, packets 4096
    2018-11-07 04:56:18 UTC IP 52.244.69.219:389 > killion-1.internal:19958 UDP, length 24887324, packets 8192
    2018-11-07 04:56:18 UTC IP 111.207.114.165:389 > killion-1.internal:55115 UDP, length 23633948, packets 8192
    2018-11-07 04:56:18 UTC IP 208.71.48.122:389 > killion-1.internal:55115 UDP, length 12615708, packets 4096
    2018-11-07 04:56:18 UTC IP 210.212.252.27:389 > killion-1.internal:13348 UDP, length 18399260, packets 8192
    2018-11-07 04:56:18 UTC IP 80.13.0.93:389 > killion-1.internal:33462 UDP, length 24870940, packets 8192
    2018-11-07 04:56:18 UTC IP 40.117.133.199:389 > killion-1.internal:19958 UDP, length 24379420, packets 8192
    2018-11-07 04:56:18 UTC IP 68.69.52.32:389 > killion-1.internal:25126 UDP, length 23273500, packets 8192
    2018-11-07 04:56:18 UTC IP 84.237.77.6:389 > killion-1.internal:59634 UDP, length 8077340, packets 4096
    2018-11-07 04:56:18 UTC IP 177.23.139.90:389 > killion-1.internal:20891 UDP, length 12111900, packets 4096
    2018-11-07 04:56:18 UTC IP 190.158.247.155:389 > killion-1.internal:53357 UDP, length 10919964, packets 4096
    2018-11-07 04:56:18 UTC IP 173.52.88.100:389 > killion-1.internal:56388 UDP, length 12464156, packets 4096
    2018-11-07 04:56:18 UTC IP 40.69.76.79:389 > killion-1.internal:59634 UDP, length 96829468, packets 32768
    2018-11-07 04:56:18 UTC IP 103.68.80.3:389 > killion-1.internal:39815 UDP, length 23560220, packets 8192
    2018-11-07 04:56:18 UTC IP 221.192.247.204:389 > killion-1.internal:7374 UDP, length 10080284, packets 4096
    2018-11-07 04:56:19 UTC IP 216.174.65.81:389 > killion-1.internal:33462 UDP, length 24477724, packets 8192
    2018-11-07 04:56:19 UTC IP 153.149.5.81:389 > killion-1.internal:37552 UDP, length 11890716, packets 4096
    2018-11-07 04:56:19 UTC IP 217.12.221.69:389 > killion-1.internal:56388 UDP, length 23978012, packets 8192
    2018-11-07 04:56:19 UTC IP 62.28.128.245:389 > killion-1.internal:30972 UDP, length 23904284, packets 8192
    2018-11-07 04:56:19 UTC IP 103.122.182.22:389 > killion-1.internal:57023 UDP, length 23519260, packets 8192
    2018-11-07 04:56:19 UTC IP 101.100.145.19:389 > killion-1.internal:16960 UDP, length 21561372, packets 8192
    2018-11-07 04:56:19 UTC IP 196.12.170.59:389 > killion-1.internal:25126 UDP, length 24125468, packets 8192
    2018-11-07 04:56:19 UTC IP 190.140.45.58:389 > killion-1.internal:48908 UDP, length 21422108, packets 8192
    2018-11-07 04:56:19 UTC IP 195.88.73.175:389 > killion-1.internal:30972 UDP, length 23322652, packets 8192
    2018-11-07 04:56:19 UTC IP 185.35.184.108:389 > killion-1.internal:53357 UDP, length 20799516, packets 8192
    2018-11-07 04:56:19 UTC IP 119.97.222.30:389 > killion-1.internal:33462 UDP, length 10006556, packets 4096
    2018-11-07 04:56:19 UTC IP 182.23.64.48:389 > killion-1.internal:20891 UDP, length 11730972, packets 4096
    2018-11-07 04:56:19 UTC IP 113.161.68.91:389 > killion-1.internal:51496 UDP, length 10043420, packets 4096
    2018-11-07 04:56:19 UTC IP 189.197.127.170:389 > killion-1.internal:30972 UDP, length 21413916, packets 8192
    2018-11-07 04:56:19 UTC IP 179.126.138.194:389 > killion-1.internal:53357 UDP, length 12120092, packets 4096
    2018-11-07 04:56:19 UTC IP 163.27.193.129:389 > killion-1.internal:16960 UDP, length 12349468, packets 4096
    2018-11-07 04:56:19 UTC IP 50.21.181.126:389 > killion-1.internal:16960 UDP, length 12202012, packets 4096
    2018-11-07 04:56:19 UTC IP 50.2.186.42:389 > killion-1.internal:20891 UDP, length 24043548, packets 8192
    2018-11-07 04:56:19 UTC IP 193.9.62.96:389 > killion-1.internal:34675 UDP, length 24829980, packets 8192
    2018-11-07 04:56:19 UTC IP 184.70.5.118:389 > killion-1.internal:33462 UDP, length 20815900, packets 8192
    2018-11-07 04:56:19 UTC IP 195.62.14.222:389 > killion-1.internal:25126 UDP, length 94470172, packets 32768
    2018-11-07 04:56:19 UTC IP 87.204.0.74:389 > killion-1.internal:50177 UDP, length 98697244, packets 32768
    2018-11-07 04:56:19 UTC IP 209.213.47.79:389 > killion-1.internal:16960 UDP, length 42352668, packets 16384
    2018-11-07 04:56:19 UTC IP 52.64.150.78:389 > killion-1.internal:39205 UDP, length 12722204, packets 4096
    2018-11-07 04:56:19 UTC IP 203.125.93.134:389 > killion-1.internal:61223 UDP, length 25518108, packets 8192
    2018-11-07 04:56:19 UTC IP 187.155.148.137:389 > killion-1.internal:20891 UDP, length 10788892, packets 4096
    2018-11-07 04:56:19 UTC IP 142.44.223.14:389 > killion-1.internal:25788 UDP, length 48906268, packets 16384
    2018-11-07 04:56:19 UTC IP 121.58.228.221:389 > killion-1.internal:39205 UDP, length 22274076, packets 8192
    2018-11-07 04:56:19 UTC IP 41.204.247.52:389 > killion-1.internal:33462 UDP, length 24854556, packets 8192
    2018-11-07 04:56:19 UTC IP 203.115.105.153:389 > killion-1.internal:48908 UDP, length 84836380, packets 32768
    2018-11-07 04:56:19 UTC IP 138.59.99.93:389 > killion-1.internal:34675 UDP, length 10842140, packets 4096
    2018-11-07 04:56:19 UTC IP 185.162.250.12:389 > killion-1.internal:20891 UDP, length 16056348, packets 8192
    2018-11-07 04:56:19 UTC IP 188.37.101.136:389 > killion-1.internal:15005 UDP, length 47693852, packets 16384
    2018-11-07 04:56:19 UTC IP 220.102.189.95:389 > killion-1.internal:57023 UDP, length 11108380, packets 4096
    2018-11-07 04:56:19 UTC IP 109.248.46.26:389 > killion-1.internal:39205 UDP, length 23371804, packets 8192
    2018-11-07 04:56:19 UTC IP 83.206.237.39:389 > killion-1.internal:39815 UDP, length 187432988, packets 65536
    2018-11-07 04:56:19 UTC IP 5.152.223.244:389 > killion-1.internal:34675 UDP, length 24158236, packets 8192
    2018-11-07 04:56:19 UTC IP 61.132.34.43:389 > killion-1.internal:15005 UDP, length 11468828, packets 4096
    2018-11-07 04:56:19 UTC IP 211.174.186.5:389 > killion-1.internal:56388 UDP, length 25460764, packets 8192
    2018-11-07 04:56:19 UTC IP 59.6.41.7:389 > killion-1.internal:39815 UDP, length 85131292, packets 32768
    2018-11-07 04:56:19 UTC IP 178.88.68.36:389 > killion-1.internal:16082 UDP, length 48218140, packets 16384
    2018-11-07 04:56:19 UTC IP 211.144.154.71:389 > killion-1.internal:16960 UDP, length 19152924, packets 8192
    2018-11-07 04:56:19 UTC IP 94.183.249.71:389 > killion-1.internal:59317 UDP, length 10100764, packets 4096
    2018-11-07 04:56:19 UTC IP 177.124.37.201:389 > killion-1.internal:57023 UDP, length 10666012, packets 4096
    2018-11-07 04:56:19 UTC IP 144.217.186.116:389 > killion-1.internal:20891 UDP, length 24535068, packets 8192
    2018-11-07 04:56:19 UTC IP 164.39.10.218:389 > killion-1.internal:50177 UDP, length 22257692, packets 8192
    2018-11-07 04:56:19 UTC IP 12.146.11.164:389 > killion-1.internal:50177 UDP, length 23207964, packets 8192
    2018-11-07 04:56:19 UTC IP 2.83.36.85:389 > killion-1.internal:39815 UDP, length 24838172, packets 8192
    2018-11-07 04:56:19 UTC IP 157.181.161.72:389 > killion-1.internal:61223 UDP, length 23683100, packets 8192
    2018-11-07 04:56:19 UTC IP 74.208.147.33:389 > killion-1.internal:13372 UDP, length 24641564, packets 8192
    2018-11-07 04:56:19 UTC IP 74.208.146.20:389 > killion-1.internal:15005 UDP, length 26574876, packets 8192
    2018-11-07 04:56:19 UTC IP 13.90.86.133:389 > killion-1.internal:16082 UDP, length 24002588, packets 8192
    2018-11-07 04:56:19 UTC IP 95.67.62.74:389 > killion-1.internal:15005 UDP, length 23765020, packets 8192
    2018-11-07 04:56:19 UTC IP 87.98.144.30:389 > killion-1.internal:25788 UDP, length 24616988, packets 8192
    2018-11-07 04:56:19 UTC IP 123.51.203.235:389 > killion-1.internal:3199 UDP, length 11870236, packets 4096
    2018-11-07 04:56:19 UTC IP 204.185.236.39:389 > killion-1.internal:30972 UDP, length 19980316, packets 8192
    2018-11-07 04:56:19 UTC IP 71.7.191.15:389 > killion-1.internal:7374 UDP, length 24559644, packets 8192
    2018-11-07 04:56:19 UTC IP 199.47.190.134:389 > killion-1.internal:59634 UDP, length 93585436, packets 32768
    2018-11-07 04:56:19 UTC IP 109.176.85.90:389 > killion-1.internal:51082 UDP, length 187105308, packets 65536
    2018-11-07 04:56:19 UTC IP 118.189.41.11:389 > killion-1.internal:53357 UDP, length 12664860, packets 4096
    2018-11-07 04:56:19 UTC IP 71.7.191.15:389 > killion-1.internal:55115 UDP, length 24559644, packets 8192
    2018-11-07 04:56:19 UTC IP 94.79.58.38:389 > killion-1.internal:25788 UDP, length 23969820, packets 8192
    2018-11-07 04:56:19 UTC IP 52.215.150.202:389 > killion-1.internal:57023 UDP, length 25075740, packets 8192
    2018-11-07 04:56:19 UTC IP 109.135.6.225:389 > killion-1.internal:48908 UDP, length 42483740, packets 16384
    2018-11-07 04:56:19 UTC IP 142.4.199.71:389 > killion-1.internal:20891 UDP, length 24330268, packets 8192
    2018-11-07 04:56:19 UTC IP 217.78.1.213:389 > killion-1.internal:35576 UDP, length 22470684, packets 8192
    2018-11-07 04:56:20 UTC IP 118.127.78.106:389 > killion-1.internal:51496 UDP, length 11751452, packets 4096
    2018-11-07 04:56:20 UTC IP 195.26.18.42:389 > killion-1.internal:19958 UDP, length 23085084, packets 8192
    2018-11-07 04:56:20 UTC IP 138.121.200.122:389 > killion-1.internal:3199 UDP, length 24207388, packets 8192
    2018-11-07 04:56:20 UTC IP 103.41.104.44:389 > killion-1.internal:33462 UDP, length 12238876, packets 4096
    2018-11-07 04:56:20 UTC IP 203.15.32.194:389 > killion-1.internal:39815 UDP, length 12623900, packets 4096
    2018-11-07 04:56:20 UTC IP 37.187.155.58:389 > killion-1.internal:57023 UDP, length 24059932, packets 8192
    2018-11-07 04:56:20 UTC IP 201.244.154.208:389 > killion-1.internal:3199 UDP, length 96862236, packets 32768
    2018-11-07 04:56:20 UTC IP 51.68.52.178:389 > killion-1.internal:53357 UDP, length 20643868, packets 8192
    2018-11-07 04:56:20 UTC IP 23.101.204.13:389 > killion-1.internal:33462 UDP, length 22757404, packets 8192
    2018-11-07 04:56:20 UTC IP 5.9.121.155:389 > killion-1.internal:51082 UDP, length 26288156, packets 8192
    2018-11-07 04:56:20 UTC IP 104.211.3.0:389 > killion-1.internal:33462 UDP, length 26468380, packets 8192
    2018-11-07 04:56:20 UTC IP 12.42.101.69:389 > killion-1.internal:51496 UDP, length 12054556, packets 4096
    2018-11-07 04:56:20 UTC IP 46.105.108.51:389 > killion-1.internal:39205 UDP, length 93650972, packets 32768
    2018-11-07 04:56:20 UTC IP 212.205.179.38:389 > killion-1.internal:37552 UDP, length 21127196, packets 8192
    2018-11-07 04:56:20 UTC IP 189.114.225.58:389 > killion-1.internal:37552 UDP, length 19595292, packets 8192
    2018-11-07 04:56:20 UTC IP 153.153.154.125:389 > killion-1.internal:3199 UDP, length 11980828, packets 4096
    2018-11-07 04:56:20 UTC IP 143.0.160.157:389 > killion-1.internal:25126 UDP, length 23781404, packets 8192
    2018-11-07 04:56:20 UTC IP 201.238.221.187:389 > killion-1.internal:53357 UDP, length 11612188, packets 4096
    2018-11-07 04:56:20 UTC IP 203.162.121.201:389 > killion-1.internal:59317 UDP, length 10756124, packets 4096
    2018-11-07 04:56:20 UTC IP 45.224.24.8:389 > killion-1.internal:33462 UDP, length 23994396, packets 8192
    2018-11-07 04:56:20 UTC IP 202.104.40.236:389 > killion-1.internal:51082 UDP, length 11792412, packets 4096
    2018-11-07 04:56:20 UTC IP 121.17.26.114:389 > killion-1.internal:50177 UDP, length 40304668, packets 16384
    2018-11-07 04:56:20 UTC IP 64.137.252.38:389 > killion-1.internal:51082 UDP, length 24698908, packets 8192
    2018-11-07 04:56:20 UTC IP 222.92.31.12:389 > killion-1.internal:59317 UDP, length 95289372, packets 32768
    2018-11-07 04:56:20 UTC IP 83.110.153.167:389 > killion-1.internal:20891 UDP, length 23379996, packets 8192
    2018-11-07 04:56:20 UTC IP 186.210.37.56:389 > killion-1.internal:51496 UDP, length 21446684, packets 8192
    2018-11-07 04:56:20 UTC IP 37.133.106.160:389 > killion-1.internal:37552 UDP, length 15237148, packets 8192
    2018-11-07 04:56:20 UTC IP 118.189.74.183:389 > killion-1.internal:39815 UDP, length 12300316, packets 4096
    2018-11-07 04:56:20 UTC IP 187.188.40.182:389 > killion-1.internal:3199 UDP, length 10711068, packets 4096
    2018-11-07 04:56:20 UTC IP 117.240.219.107:389 > killion-1.internal:53357 UDP, length 10633244, packets 4096
    2018-11-07 04:56:20 UTC IP 93.77.140.131:389 > killion-1.internal:56388 UDP, length 24166428, packets 8192
    2018-11-07 04:56:20 UTC IP 88.25.88.44:389 > killion-1.internal:39205 UDP, length 192872476, packets 65536
    2018-11-07 04:56:20 UTC IP 77.50.160.64:389 > killion-1.internal:3199 UDP, length 22052892, packets 8192
    2018-11-07 04:56:20 UTC IP 91.206.239.7:389 > killion-1.internal:35576 UDP, length 20422684, packets 8192
    2018-11-07 04:56:20 UTC IP 190.85.111.109:389 > killion-1.internal:19958 UDP, length 23994396, packets 8192
    2018-11-07 04:56:20 UTC IP 178.236.73.106:389 > killion-1.internal:35576 UDP, length 24199196, packets 8192
    2018-11-07 04:56:20 UTC IP 211.45.117.148:389 > killion-1.internal:55115 UDP, length 23732252, packets 8192
    2018-11-07 04:56:20 UTC IP 23.24.189.121:389 > killion-1.internal:48908 UDP, length 22167580, packets 8192
    2018-11-07 04:56:20 UTC IP 91.240.85.77:389 > killion-1.internal:57023 UDP, length 23855132, packets 8192
    2018-11-07 04:56:20 UTC IP 23.101.186.146:389 > killion-1.internal:46301 UDP, length 50200604, packets 16384
    2018-11-07 04:56:20 UTC IP 50.30.37.52:389 > killion-1.internal:46301 UDP, length 24535068, packets 8192
    2018-11-07 04:56:20 UTC IP 148.251.67.116:389 > killion-1.internal:51496 UDP, length 23814172, packets 8192
    2018-11-07 04:56:20 UTC IP 199.231.174.58:389 > killion-1.internal:39815 UDP, length 21413916, packets 8192
    2018-11-07 04:56:20 UTC IP 207.182.138.77:389 > killion-1.internal:35576 UDP, length 23298076, packets 8192
    2018-11-07 04:56:20 UTC IP 89.249.130.26:389 > killion-1.internal:59317 UDP, length 13869084, packets 8192
    2018-11-07 04:56:20 UTC IP 118.189.167.93:389 > killion-1.internal:57023 UDP, length 25403420, packets 8192
    2018-11-07 04:56:20 UTC IP 182.73.81.62:389 > killion-1.internal:13372 UDP, length 87490588, packets 32768
    2018-11-07 04:56:20 UTC IP 113.164.28.86:389 > killion-1.internal:25788 UDP, length 11018268, packets 4096
    2018-11-07 04:56:20 UTC IP 72.83.230.148:389 > killion-1.internal:7374 UDP, length 21807132, packets 8192

    The downtime due to the attack was minimal however the changes that we put in place to protect from these incidents in the future required us take the server offline while we migrated it. The server returned online at: 01:20 EST.

    Thank you for your understanding and support.
     
    Stick, Br0 and xForerunner like this.
  2. Tarthus

    Tarthus Member Premium

    Joined:
    Oct 21, 2018
    Messages:
    55
    Likes Received:
    5
    Trophy Points:
    8
    Tarthus10210
    Thank you for getting everything back up and running so fast! We all appreciate you guys' hard work :)
     
  3. Ortnomas_8

    Ortnomas_8 New Member Premium

    Joined:
    Oct 4, 2018
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Ortnomas_8

Share This Page

Share