Either do something about the DDoS problem or shut it down til you can...

/thread

Seriously.

It's been averaging about once an hour since Savage started. Whoever is doing this knows damn well what they are doing.

Quote:

---

Originally Posted by TwiceDamned

/thread

Seriously.

It's been averaging about once an hour since Savage started. Whoever is doing this knows damn well what they are doing.

---

watch it be a group of people who got permanent hardware banned from ffxiv when DSR came out because they did a world first race with cheats enabled. So in response they are tryign to punish others for their own greed

The game doesn't even have cheat detection so they couldn't even hardware ban someone if they wanted to. Also they aren't hard to get around.

Quote:

---

Originally Posted by Mercury_Grey

watch it be a group of people who got permanent hardware banned from ffxiv when DSR came out because they did a world first race with cheats enabled. So in response they are tryign to punish others for their own greed

---

Can't see that the case for another reason than what Korjack said.

This has been going on several months now. But today, I think the mask came down. It's a malevolent actor trying to end it.

I mean, the fervent frequency of the DDOS strongly indicates that whoever is doing it has a lot of resources. Like... industry rivals. Or very very bored people.

I do kinda doubt it's some bored person armed with [program name censored to not encourage more memes] ...the cannon, though. At least I'd hope SE's NA servers can handle that much.

SE doesn't care! Look what happened at the last DDOS attack. They did nothing until the instigators got bored. SE is going to do NOTHING about the DDOS attacks because they don't care. They never have cared and I doubt they are going to care anytime soon.

The fact the attacker was able to "change attack pattern" for Savage release shows they probably don't have any useful "countermeasures" and just wait until the attacker gets bored.

Quote:

---

Originally Posted by SicariusSeven

SE doesn't care! Look what happened at the last DDOS attack. They did nothing until the instigators got bored. SE is going to do NOTHING about the DDOS attacks because they don't care. They never have cared and I doubt they are going to care anytime soon.

---

Why would they not care? If FFXIV goes down, there's a strong possibility SE as a company goes down too. NA is not the game's only market, but it's a big one. I am frequently hearing people say they are canceling their subs because they believe the game to be unplayable with all the DDoS that happens and it seems to only be getting worse as time goes on. For them to not care... That's like saying they don't care if their whole company goes south.

There's a strong possibility they don't even know a DDoS is happening because they shirked so much of their NA division recently. It's even possible this is happening BECAUSE they fired most of their staff with the intention of replacing them with AI, because even putting aside an untold number of disgruntled employees out there right now with a vendetta, it could be an anti-AI group wanting to "punish" Square-Enix for their decision and show them why they need real life people on-hand to handle a crisis.

And even if Square-Enix became aware... well, this is the same company that when faced with a growing downturn of active players on FF11 they just opted to make everything doable with NPCs and they didn't care if the game brought in tons of money anymore. It might sound crazy that Square-Enix would seemingly not care if FF14 craters in subscriber numbers until it hits the barely 6-digits mark, but it's literally not the first time they've done it and that game is running to this day.

How that move works out for the overall company, I can't say for sure, given they've already expressed downsizing (the NA division) and "refocusing efforts" (remakes/remasters over new IPs) so its entirely possible Square-Enix already KNOWS they're going into the red, and they're already adjusting their budget and staff ahead of time. Of course, it would have made more sense to take action BEFORE they ran their ship into the rocks, but Square-Enix has been playing the "dance on the knife's edge of complete capsizing" for decades now, going as far back as the original Final Fantasy 1.

This is a company that just can't stop its self from playing dangerously, and given every other time its worked out for them I can't help but wonder how the crazy bastards are going to pull it off again or if this is the last time they'll be playing with fire before another company swallows them up... assuming that's not their plan all along. (They ARE buddies with Tencent right now with the mobile version.)

The Information > Status forum posts are just a comedic daily diary of problems at this point.

They know it's happening and putting it on the launcher screen. To be honest it's been annoying for the last couple of months, but the last couple of days has been absolutely horrible experience. They need to start looking at better options or taking care of the customer in other ways. It's annoying to start any sort of high level crafting unless it's off hours.

So... +One to the list of pissed players on DDoS

I thought something would have been put in place for the sake of savage, but as I went into progging m9s, five minutes didn't even pass before our party got hit with a ddos wave, causing 5 people to immediately drop from the server. I was very lucky that my warp saved me from dropping, but the time was still spent waiting for others to come back. I knew the whole thing was bad, but I did not realise it could still be this bad even with savage release.

The big issue remains that if it's just a butthurt actor irrationally blowing untold resources to make everyone else have a worse time, there isn't actually anything more SE can do beyond passing it off to law authorities or waiting it out.

Most mitigation work doesn't actually do anything for online games like FFXIV, so I'm not sure if there is more that can be done beyond just transporting all NA server data into cloud servers and sticking to that.

Quote:

---

Originally Posted by TwiceDamned

Either do something about the DDoS problem or shut it down til you can...

---

Then everyone would be complaining "YoU sHuT dOwN mY gAmE i PaiD mY sUb! REEEEEEE!!!"

Quote:

---

Originally Posted by RedLolly

The big issue remains that if it's just a butthurt actor irrationally blowing untold resources to make everyone else have a worse time, there isn't actually anything more SE can do beyond passing it off to law authorities or waiting it out.

---

I sincerely doubt it's a DDoS anymore. To maintain consecutive frequent denial of service attacks on this scale for this long it'd take a large group of people or one dude with a TON of computers, likely in multiple locations. It's not like any angry person with a single computer who understands how these attacks work could pull off one of this scale for this long of a timeframe. We can also likely rule out hardware problems, as if that were the case it wouldn't be uniform across every NA datacenter and server. Given how we can almost certainly (but not completely) rule DDoS and hardware failures out it's much more likely that SE's contracted ISP is probably having massive issues. It could even be a DDoS on them rather than SE as it's much more believable that a large group of people would attack an entire ISP than a random MMORPG. Either way though, I suspect the ISP is to blame. Well, them and SE for maintaining radio silence and refusing to get a new one.

I love people still thinking its a DDOS in TYOOL 2026. It is literally SE just not paying their bills. The bandwidth gets exceeded and the node just closes and drops all the traffic it's why the VPN's work and keep you connected thanks to their tunnelling.

https://krebsonsecurity.com/2026/01/...local-network/

This is most likely what is causing the issues

The Kimwolf Botnet that's been running rampant since about march of last year

Quote:

---

Originally Posted by Ellona_Andrivari

I love people still thinking its a DDOS in TYOOL 2026. It is literally SE just not paying their bills. The bandwidth gets exceeded and the node just closes and drops all the traffic it's why the VPN's work and keep you connected thanks to their tunnelling.

---

It is literally not there. Just think about when the issues started - during the biggest "trough" of players the game has seen in a long time. It also didn't spike when the population did with the release of the patch, but did precisely when Savage released.

Quote:

---

I sincerely doubt it's a DDoS anymore.

---

Quote:

---

Given how we can almost certainly (but not completely) rule DDoS and hardware failures out...

---

Quote:

---

It could even be a DDoS on them rather than SE as it's much more believable that a large group of people would attack an entire ISP than a random MMORPG.

---

That...would be a DDoS...and one of the leading theories that's actually plausible.

I swear, I'm losing brain cells from reading some of the takes in this thread.

Quote:

---

Originally Posted by Selsix

I sincerely doubt it's a DDoS anymore. To maintain consecutive frequent denial of service attacks on this scale for this long it'd take a large group of people or one dude with a TON of computers, likely in multiple locations. It's not like any angry person with a single computer who understands how these attacks work could pull off one of this scale for this long of a timeframe. We can also likely rule out hardware problems, as if that were the case it wouldn't be uniform across every NA datacenter and server. Given how we can almost certainly (but not completely) rule DDoS and hardware failures out it's much more likely that SE's contracted ISP is probably having massive issues. It could even be a DDoS on them rather than SE as it's much more believable that a large group of people would attack an entire ISP than a random MMORPG. Either way though, I suspect the ISP is to blame. Well, them and SE for maintaining radio silence and refusing to get a new one.

---

Attackers (as in people initializing the DDOS attack) do not need to own the computers launching the decentralized attack or have physical access to them; they use machines infected by malware/botfarms. There are more than enough of those in the world to do the job. These machines include smartphones, etc. If it were a bunch of requests coming from one location, it would be pretty easy to tell/mitigate. That's why it's "decentralized," so it mixes seamlessly with legitimate traffic.

I get being frustrated, but this is a great time to learn more about how computers and net infrastructure works, if you want to do any speculating.

Quote:

---

Originally Posted by Striker44

It is literally not there. Just think about when the issues started - during the biggest "trough" of players the game has seen in a long time. It also didn't spike when the population did with the release of the patch, but did precisely when Savage released.

---

I think it has always been like this, even before savage released, and it started when the latest patch dropped. The frequency afterwards has been relatively the same.