Printable View
Hello, lately lot's of hotels have been attacked and these attacks are going through CloudFlare, because they no longer offer 'DDoS Protection'. I saw this guy on TeamViewer attacking some of the biggest retros with Layer 7 and they went down immideiatly.
Proofs;
http://i.imgur.com/v4PoU5e.png
http://vvcap.net/db/kSiCfYgz9AllxW-8HwZ6.png
I don't know if this is old news but all the people I know have this problem and don't know what to do.
What will you as retro or any site owner do?
Looks like owners will have to shell out money off their big checks for advanced cloudflare protection.
Probably won't even dent what some earn.Quote:
Originally Posted by Makarov
It's a real shame people have to attack websites to get their position higher on a topsite list (thehabbos.org in particular) and now CloudFlare is useless there is nothing you can do.
Only thing to do now is find another provider, spend more money on CloudFlare, or wait out the attacks. Anyway that says DDoS protection, most attacks are just from a single user (which are DoS) attacks.
The really big hotels make loads of money, they probably can afford the business plan, and do you really expect that a FREE service is going to protect you from a DDoS?
About time too.
I've had this happen to me before nothing new.
Yes its happened to eubbo :(
Use proxies. Cloudflare will just slowly die off if they do this.
More people need to start cheap proxy services..
Finally, something to convince people to ditch this service. It does nothing but cause more downtime than uptime. Server configuration is much more affective than CloudFlare these days.
I bet this guy is real cool.Quote:
Originally Posted by Exonize
They've never offered Advanced DDoS Protection in the Free or Pro Plans. There's no need to go buy CloudFlare Business for $200.00 unless you have a legitimate steady income coming in from the hotel. You can just buy Proxy Servers for like $9.99. Boom, Cheap DDoS Protection. People are stupid and think that all they need was CloudFlare.
The Only Features that the Free Version Provides are:
- Fast Site Performance
- Broad Security Protection
- Powerful Stats about your visitors
- Peace of Mind about your site so you can get back to what you love.
Which is Basically like saying you have a Piece of Shit. We're going to give you a Piece of Shit on a silver platter with gold shavings on top of it for free, theoretically of course. For the sake of retro/hotel owners, CloudFlare goes from just barely helpful to completely useless.
'Nuff Said.
It's sad what retros have come to. I used to love seeing my IP in the client configuration, it made me feel proud :(. But @Wreckless, there's always a bypass to that, just takes the right person to find it. Although, DDoS proxies are the way to go for now.
Yes, he is really awesome and it's funny how you were the victim.Quote:
Originally Posted by SkeetEmUp
Its also funny how I can afford the business plan :)Quote:
Originally Posted by Exonize
deleted
That's because the mayority of the owners doesn't have any idea about this topic, they don't know the basic concepts, how they work, what type of attacks exists, which material are they using to attack them, etc...
In conclusion, if they don't know anything about this topic and they only want to protect his hotels, ¿Do you think is enough to make them safe with a simple DDoS protection offered by companies like CloudFlare? ..
It's very simple: only the strongers survive, don't expect that knowing how to set up a Holo CMS and buy a VPS you're going to be the king of this, you can have good luck, but if you don't know even the basic concepts soon or later you'll pay it.
Google? do they offer DdoS protection these days?Quote:
Originally Posted by matty13
https://developers.google.com/speed/ :)Quote:
Originally Posted by Davidaap
Why would anyone buy Cloudflare business anyway? Surely if your site got hit by a reasonable attack, CF would get in touch with you and on realising you were running some illegal copy of someone elses website/technology drop you and your service instantly?
$200 down the shitter.
Also: https://developers.google.com/speed/pagespeed/service is the direct link to Googles "Cloudflare" service... :)
What will I do, Buy better internet? :3
Sent from my GT-S5363 using Tapatalk 2
If you haven't noticed Cloudflare ain't give no fucks if you're running illegal. They hosted LulzSec site which was releasing heaps of hacked data. They aren't in the wrong so they don't care. They just want money.Quote:
Originally Posted by WJJ
Reverse Proxy + APC, memcache, Varnish or w.e cache you want = great setup.
Majority of the people attacking know nothing about it either. They just downloaded every booter they can find on HF and decided to be a "h4x3r" for the day. I'm not saying that everyone who boots hotels is like this, nor am I making any assumptions about HF or it's users, but I'm just saying that most people don't know a thing about attacks or booting.Quote:
Originally Posted by lRetros
Yes that's another reality, they're noobs but the thing is that they're attacking poor people who doesn't know how to defend and they think that they're hacking them or something like that... But yes that's true, there are a lot of people who makes DoS attacks using noobish programs like Loic or Hoic..Quote:
Originally Posted by Wreckless
Just the other night my hotel was taken down by one of the staff at "Paradise hotel",
For no apparent reason.. its just really sad I mean I could have returned the attack but at the end of the day,
wtf is the point In all fairness, I miss how it us to be! Like back in the day of V13 - V26 attacks were preity much unheard of,
you did have to worry about crap like cloud flare n proxy's, but now I my self opend my hotel just over 2 years ago,
I opend it as a bit of fun for people and for some fool to come along and just think oh il have a little fun n take it down,
is just sad! like you spend a whole heap of money on it for some ass to take you down, Its all gone tits up!
there needs to be more cheep proxy providers n every one should just do away with cloud flare all together,
as Its now become useless unless you can afford the bug bucks!
Honestly that $200 investment on Cloudflare for up-time will be worth it.Quote:
Originally Posted by jimboi05
Cloudflare is mostly for HTTP protection, good luck when they DDoS your server port.
Most emulators offer DoS protection but yeh if it's a DDoS.. that will be annoying.Quote:
Originally Posted by jaydenn
Lol. Thats why most retros use another server + DDoS protection on the emulator... So??????Quote:
Originally Posted by jaydenn
Most retros don't have as much income as habplus, ergo 1 server and free cloudflare. What the fuck did you think i was saying????Quote:
Originally Posted by SkeetEmUp
1 server and cloudflare and $10 DDoS protection for the emulator then.....????Quote:
Originally Posted by jaydenn
Kinda sad story of cloudflare. Do they earn too little money?
Never heard google is something like the new cloudflare, I'll try it immediately.
-- 2 hours wait time.
I think it was a step in the right direction for Cloudflare themselves.
Honestly, you shouldn't blame CloudFlare. Their services weren't developed for Habbo Retro Hotels and they weren't made for people who can't afford them. They were made for legitimate companies and businesses that need a secure website to sell their products or services on.
The real blame are the little douchebags who own shitty hotels and think that somehow, by some Heavenly forces, if they DDoS a hotel that they don't know one single person on, all the users from that hotel will just go flooding to their own hotel. When in all reality, they either go to another hotel temporarily or just wait until the site is back online. The hotel may lose a few users here and there, but unless you're really doing something to direct them to your own hotel. It doesn't benefit anyone much. Get your own users, develop your own user-base. That's how it works, that's how you get a good hotel. Ask anyone who has what you'd call a "Big" or a "Great" hotel. If you're so boring and un-interesting that you can't get a user to stay, then just shut down your hotel because it is going nowhere.
Another issue is the distinction found in hotels. What's that you ask? What distinction? That's exactly what I mean. Most hotels aren't unique, and they all do the same thing and provide the same services. ROTW, Events, Staff Applications, and here's my favorite "We have Custom Furniture!". So does every other hotel. I think we need to get back to Habbo's roots ourselves, in a sense. When people socialized instead of trying to get a fucking Staff Position in any way possible. We need to provide Habbo's good old-fashioned fun service completely for free which was the original reason people used to come to Habbo retros. This doesn't mean we can't modernize and add cool stuff once in a while, but things were so much more interesting back then.
Stay Unique, and you'll have more users then the Town's Very Own Shared "Bicycle". :thumbup1:
^ I agree with above.
Most people don't realize that lots of users play lots of hotels not just one. When one goes down they switch to there other back up hotels that they play. Sure DDoS all those hotels and they are forced to play yours but most wont.
Lots of my users when I get DDoS'd just meet up on actual Habbo... So you don't really achieve anything.
I'm sort of happy and both sad that this has come around. It's a bittersweet thing. On one hand;
Now cloudflare domains will get suspended for larger attacks its going to be a case of: survival of the fittest and learning how both servers and networking works. Which in this community won't happen for the majority. People are going to need to use their wits, backbone and effort into protecting their server and most importantly shell out some extra cash and put real effort into their hotels. These RevCMS, ran on a $20 dollar VPS hotels will struggle which is good, it will either force people to learn and become good or simply quit. If they quit less cancerous hotels in the community, if they learn how stuff actually works (no, not configuring IIS to run PHP, that doesn't count) they might be possible future contributors to RaGEZONE and the community as a whole.
The part that sucks;
Cloudflare is a free CDN, that is all in my books. The optimizations they do are very insignificant and can be done from your webserver anyways (minifiying JS, CSS etc..). Sure they offer DDoS protection but as proved, it comes at a price as do most things. Some hotels aren't deserving of attacks they receive. Some are actually genuine hotels and hours of hard work are put into them. I can count these hotels on my fingers, but they're there. Some have owners who actually care and don't just want a quick buck (which is all you're gonna get). However as always, the asshat has to ruin it for the majority. Which in this case, is these skids with booters. Just throwing this out there: No matter how much you boot or attack a hotel; girls won't like you more, people will not want to be your friend and your dick will not grow. Get over yourselves.
Again, as with most things. Cloudflare (free/pro) is just a false sense of security. Oh, you're getting a large attack huh? Allow me to just change your DNS records to the IP you're trying to hide and forward traffic to it.
Anyways, well done habbo community. You ruined a perfectly good and free CDN for your selves and a good way to optimise your shitty, slow CMS'. Ya dun goof'd (more than once).
In all honesty these revCMS hotels that are fucking trash-garbage that are put up EVERY damn day will suffer for a bit though some stupid faggot Ragezone, DevBest, and Otaku members will post a tutorial thread on how somebody can setup an alternative type of protection to continue to protect themselves.
Honestly the issues with the English retro community did not originate from these booting problems, they originated from stupid faggots like mexican immigrant spic ass Kryptos who release these trash-ass poor excuses for a CMS but that isn't really the subject at hand. Ultimately I am not worried about network attacks and new developments in the retro world like this as they will not harm my hotel any longer than a few days in which my partner and myself have already protected against. If i'm honest i'm actually quite happy about things like this as it does slow down the production of stupid ass 10 player revCMS hotels that shut down after a week.
You should also take note that in the beginning of this CloudFlare issue only quality hotels were being attacked; this is because the stupid revCMS faggots were on HackForums and read a thread about the changes with CloudFlare and thought to themselves "Hey, instead of trying to figure out why the hotels above me get more players I will just hit them and hope they come to me even know I run a trash revCMS hotel with more staff members than I have players!".
I'll stop ranting now though I do just wish a miracle would come out of the sky and set us back a few years to where retro competition was based on QUALITY and not "This hotel has been here the longest, lets play even though it is shit and restarts every day along with a database reset every other week...*cough*Zap hotel*cough*."
Make your own cdn...As for cloudflare, its useless unless you pay.
What would be the point though ? Thinking about it logically, the investment, time and effort wouldn't be worth it imo for what? So your SWF's load 2 seconds faster ? And that's costing you $$$ in B/W when you could just host off a server running Nginx which costs <$30. Ontop of that, the majority of people who play habbo are retarded. They don't care if your site loads instantly or takes 5 seconds to load. They will still play.Quote:
Originally Posted by XenoGFX
So much talk about such silly stuff jesus christ, get Cloudflare business if you can afford it if not then that's your problem.
Unbelievable that some of you are moaning, that you're now having to spend ill gained money in order to better protect and optimize your method of gaining money illegally. What is with you guys. It's even worse that some of you moan that your illegal product is being illegally targetted by a person making less money of the illegal product than you. You guys are pathetic.
It just shows that to own a retro, you have to put some money into it.
$200 is already ass low for ddos protection. other companies are starting at $1000
What? That makes no sense, even Habbo has a proxy over their actual core servers.Quote:
Originally Posted by owot
No point in posting your morals and ideals with what is 'illegal' and 'wrong' on a private server forum for Habbo Hotel. No one cares and no matter how much you huff and puff, no one will pay attention to you. You seem very butthurt over the fact that people earn money from their hotels. Servers don't pay themselves, and if Habbo didn't fuck up so much and make so many bad decisions both for the game and the business, people wouldn't be on these hotels wasting their parents money anyways. They would be on habbo.com which is grossley over priced for what they offer anyways. You can't blame hotel owners for taking advantage of this situation. There are many things which are illegal in this world, and on the list: People running habbo replicas is at the very bottom. Put your time and energy into bitching about something else (Aren't you like 25 now or something?).Quote:
Originally Posted by DominicGunn
asdee
What do you mean illegally? People're paying money for a PHP script to run a SQL query on a database, last I checked this was entirely legal.Quote:
Originally Posted by DominicGunn
and its even WORSE that you moan that we are moaning about our illegally products being illegally targeted in a forum where we disccuss the illegal products that are being illegally targeted illegally.Quote:
Originally Posted by DominicGunn
illegal
I don't understand.
NOTE: Did not read comments
CloudFlare is not completely useless it is a good VPN for domains connecting to ips
But you must understand, I'm a Dragonborn!
I'm not moaning about money. I could care less about the money. I'm talking about the little kids who only care about the money and/or they don't even know how to set up a hotel, yet they own one. I don't make a dime off any hotels because I just help out on the ones I am titled normally as "Co-Owner". You could call me pathetic, but I take no offense because I'm not trying to attack anyone who's making more or less money or anything then me. I would rather have a hotel of 10 free users who are actually decent people to talk to, rather then a hotel of 1,000 paying users who care nothing but for the rares and possible staff positions.Quote:
Originally Posted by DominicGunn
It wouldn't matter if you were rich, you still need the skill to set it all up otherwise you're just wasting your time anyway. I hate when people message me like "I got 50 euros in my paypal, If you set me up a hotel I'll let you be co-owner". Fuck that, do all the work and then get the shit job as opposed to some dickhead who'll just take advantage of the users.Quote:
Originally Posted by Moogly
(On the Contrary, I am a Co-Owner now for a hotel that was already set up by a friend of mine, but I helped him out in some cases, but it is now bought out by another owner who is very friendly, and I enjoy working with. Just clearing that up, before I get flamed from the previous comments I made.)
Looks like habbo.com are using cloudflare to their advantage....
Quote:
On April 9, 2013, CloudFlare received a DMCA copyright infringement complaint regarding:
reflectionhotel.info
Below is the complaint we received:
Reporter's Name: Olga Sanchez
Copyright Holder's Name: Yes I am
Reporter's Email Address: olga.sanchez@sulake.com
Reporter's Company Name: Sulake Corporation Oy
Reporter's Telephone Number: +34 915623648
Reporter's Address: Francisco Remiro 2, edif. D 2º Spain, Madrid ES
Reported URLs:
Reflection Hotel - Make friends, join the fun, get noticed!
Original Work: The following information is presented for the purposes of removing web content that infringes on our copyright per the Digital Millennium Copyright Act. We appreciate your enforcement of copyright law and support of our rights in this matter. We request you to remove the above detailed website from your server. The website in question is an “emulation” server which uses code and images for our product Habbo Hotel (www.habbo.com) created and copyrighted by Sulake Corporation (hereinafter “Sulake”).
Our copyright ownership is clearly stated on the site thus:
“© 2004 – 2012 Sulake Corporation Oy. Habbo is a registered trademark of Sulake Corporation Oy in the European Union, the USA, Japan, the People’s Republic of China and various other jurisdictions. All rights reserved.”
I have a good faith belief that none of the materials or activities listed above has been authorized by Sulake, its agents or the law. I hereby confirm that all of the above information is accurate and that I am authorised to act on behalf of Sulake, the owner of the copyrights identified above.
We have provided the name of your hosting provider to the reporter. Additionally, we have forwarded this complaint to your hosting provider as well.
Regards,
CloudFlare Abuse
Its called mail.comQuote:
Originally Posted by rory129
can't help but laugh for some odd reason.Quote:
On April 9, 2013, CloudFlare received a DMCA copyright infringement complaint regarding:
fresh-hotel.org
Below is the complaint we received:
Reporter's Name: Olga Sanchez
Copyright Holder's Name: Yes I am
Reporter's Email Address: olga.sanchez@sulake.com
Reporter's Company Name: Sulake Corporation Oy
Reporter's Telephone Number: +34 915623648
Reporter's Address: Francisco Remiro 2, edif. D 2º Madrid, Madrid ES
Reported URLs:
Vote | VotingAPI.com ~ Blast Forward
Original Work: The following information is presented for the purposes of removing web content that infringes on our copyright per the Digital Millennium Copyright Act. We appreciate your enforcement of copyright law and support of our rights in this matter. We request you to remove the above detailed website from your server. The website in question is an “emulation” server which uses code and images for our product Habbo Hotel (www.habbo.com) created and copyrighted by Sulake Corporation (hereinafter “Sulake”).
Our copyright ownership is clearly stated on the site thus:
“© 2004 – 2012 Sulake Corporation Oy. Habbo is a registered trademark of Sulake Corporation Oy in the European Union, the USA, Japan, the People’s Republic of China and various other jurisdictions. All rights reserved.”
I have a good faith belief that none of the materials or activities listed above has been authorized by Sulake, its agents or the law. I hereby confirm that all of the above information is accurate and that I am authorised to act on behalf of Sulake, the owner of the copyrights identified above.
We have provided the name of your hosting provider to the reporter. Additionally, we have forwarded this complaint to your hosting provider as well.
Regards,
CloudFlare Abuse
Are these legit, cause as far as i'm aware they're from abuse@cloudflare.comQuote:
Originally Posted by Muscab
No. Somebody would of contacted CloudFlare, but certainly not Sulake. Sulake don't aim for DMCA's, they aim for investigations against you. Trust me.Quote:
Originally Posted by rory129
I've gotten about 100 of those. lool.Quote:
Originally Posted by Muscab
Reporter's Name: Olga Sanchez
Copyright Holder's Name: Yes I am
Hello sir Yes I am.
If it was real the name "Olga Sanchez" would have á for Sánchez. Not just Sanchez.
For instance, if you're using Phoenix and someone DoS's your Emulator Port, Phx shows all the incoming connections then blocks it and logs it under a file name dos.txt, or something like that.Quote:
Originally Posted by Moogly
phoenix DOESNT do this....Quote:
Originally Posted by owot
When I owned my Retro or worked on other retros I found cloudflare to be more of a problem than it should be. Y'all are better off not even using it
Sent from my SPH-M820-BST using Tapatalk 2
My cloudflare works well?
Well usually there will be times that cloudflare wont let anyone on your server. Sometimes 10 minutes sometimes 2 or 3 hours. It gets really annoying. If it works for you fine congratulations lol like 80% of the people using cloudflare get errors and downtime so they know the annoyance of itQuote:
Originally Posted by Prizm
Sent using Tapatalk 2
Just wait until someone does a large layer7 attack.Quote:
Originally Posted by Prizm
HAHAHA. People expect to much of the Phx >_____<"Quote:
Originally Posted by jaydenn
What about an Proxy "Client" that is based on Java.. Can't that program forward the incomming port 80 connections to somewhere else... I mean if the connection numbers are to high.. Or the packets to high.. But yeh... Still doesn't fix the problem as you attack another port.
Maybe this sounds pathetic but.... Give me your hotel link :)?Quote:
Originally Posted by Prizm
-- Btw: This should not been possible... You can't attack an domain... You attack an IP.... Which is cloudflare.. How can they suspect that the freaking attack went to your domain.. This is bullshit... There are more websites running on that same ip..
When you attack the domain.. It will resolve into a cloudflare IP....
Or do they have like 100000000000000000000000 ips for all websites that is running by Cloudflare? Don't think so...
Maybe they do.. But i don't believe that...
Seriously, Anti-DDoS from company's isn't really needed, if you have money for that, then you probably have money for a hardware firewall + good software and a nice 1gbps dedicated server in Amsterdam where they have good support when your getting attacked.
I had a botnet attacking me, 45.000 ip's attacking me. My hardware firewall has a great CP, it scanned for attack layers, and blocked all ip's that kept sending the same packet size or huge packets. €400 for the hardware firewall and €25 for software.
This will help you stop most attacks and if that's not enough you just buy a anti ddos proxy for 20$ a month that protects http and ports and these can handle like 15gbps attacks. If you want a nice stable server you need to invest, so stop crying if you have 10$ a month to spend and your getting attacked.
Payant
I use it always, IS IMPOSSIBLE TO DOWN IT ! Best anti-ddos protection (Arbor Peakflow SP).
Cloudflare is really awful the last month, not only because of the DDOS problems. There' s also just downtime and above all they' re helping Sulake in the process of shutting down retros. I moved on to alternative services which are also free and much better.
Only thing that Cloudflare does is forwarding the DMCA complaint, LulzSec used Cloudflare and they didn't remove them so they really don't care about retro'sQuote:
Originally Posted by Miquos
On LulzSec, Censorship & CloudFlare
I must hae misunderstood then, but I remember people showing that they had worked together, but they were probably wrong then. I' m still much happier with the alternative services though.Quote:
Originally Posted by Davidaap
it definitely wouldn't - before my AdSense was deactivated and when I only had 500-600 online a day, I was making nearly $4000 USD a month after server costs. Myself and the other two owners split it in 3 and each of us was left with over a thousand dollars a month income.Quote:
Originally Posted by n0minal