What happened to Storm Haven server?
 

Any ideas on what's going on? I signed on to the server at about 8:30pm CST and started getting lag spikes in and off, etc. By around 10pm the server disconnected completely. After 30 minutes, still not back up. Anyone know what happened? Primary server crash or something? (Im not too savvy about server hosting, sorry!)

The Storm Haven server has become compromised as part of a botnet.

I host it, but I don't manage it.

Trevius will need to address it when he is awake in the morning.

I've shutdown the machine and null routed the IP address in the meantime.

Storm Haven should be safe. It is just down for now.

It was part of an attack towards Cloudflare datacenters.

That is the straight skinny.

To add to this - the Storm Haven website is also unavailable. If this is an issue about server/website hosting, I will be more than willing to contribute time and $ to keep the server/host up at all times and allow for maybe a back up host in case something goes awry.

We are having a significant technical issue at the moment.

Expect it to be down until the morning at least.

Thank you for the generous offer Davidjacobs, we are already hosted in what is nearly 100% stable server this is really a very rare occurrence and it will be resolved one way or another.

I will update this thread when I have more information.

Kayen
GM Storm Haven

Thanks for the response guys, that sucks. I play mostly at night, but I understand. Hopefully the situation will be fixed tomorrow! I'm not sure how botnet stuff works, but I know they can be a big problem for any computer/server. Just BTW, if it's even possible, give us a server wide message before shutting it down, LOL. I had no idea what was going on! Thanks for everything you do!

Trevius and his team are great people. I wish you guys the best and for a fast recovery.

What operating system was Trevius running?

It was a Linux flavor, I think Fedora. I can't remember. I have had it running for 3+ years now.

Someone exploited a vulnerability, that is as much as it takes. I've had it happen to one of my machines before, don't get too comfy it can happen to anyone.

Well if you guys find the problem, let me know so I can also address it on my server.

Thought it was just a joke when I heard certain groups were targeting cloudflare. One batch of idiots are mad at a game bot program someone wrote and uses cloudflare to host it.

Anyways on topic, hope Trev & Kayen get everything sorted out.

I don't suspect it will be too hard to restore the server. I may need to take the opportunity to make some changes that should hopefully reduce risks like this in the future. Once I get access back to the server, I can investigate and hopefully resolve the issue quickly. Tempted to rebuild the server with the latest updates to all systems it runs. There are quite a few fairly recent security issues that can be exploited for DDOS attacks and such, but the majority of them get resolved quickly by patches.

nvm, misread >.<

Any ETA on when we might see it back up? I know there's not like, hundreds of players waiting. But it is my preferred server! Thanks guys!

I am building a new server now and once it is up and running, I will copy everything over to it. Hopefully it will be back up and running tonight, but if not, it should be by tomorrow. I will get the server up first, then work on the forums and such.

Thanks Trev! Looking forward to seeing it back up!