Guild Wars 2

2 source traces, one from Cox communications the other from Cogent. Both route through level3 to get to your servers.

Going from Phx, to Dallas, to LA/Wash to Paris, to Frankfurt, back to texas (where your servers are located)

Connections are being dropped and everyone that is sourcing from Level3 is going to have this issue until a ticket is opened with them.

I have a ticket with Cogent and Cox opened within their Link partner agreement. But you being the affected business should really be riding level3 to fix this.

Tracing route to 206-127-159-116.plaync.com [206.127.159.116]
over a maximum of 30 hops:

1 * * * Request timed out.
2 * * * Request timed out.
3 1 ms 1 ms 1 ms 10.0.0.10
4 1 ms 1 ms 1 ms vl1205.na31.b020427-1.phx02.atlas.cogentco.com [
38.72.64.33]
5 1 ms 1 ms 1 ms gi2-1.ccr01.phx06.atlas.cogentco.com [38.122.89.
125]
6 2 ms 2 ms 2 ms te0-3-0-3.ccr22.phx02.atlas.cogentco.com [154.54
.88.253]
7 13 ms 13 ms 14 ms be2333.mpd22.lax01.atlas.cogentco.com [154.54.41
.249]
8 14 ms 13 ms 14 ms be2076.ccr21.lax04.atlas.cogentco.com [154.54.2.
165]
9 * * 13 ms level3.lax04.atlas.cogentco.com [154.54.14.130]

10 159 ms 158 ms 158 ms vlan80.csw3.losangeles1.level3.net [4.69.144.190
]
11 161 ms 158 ms 158 ms ae-83-83.ebr3.losangeles1.level3.net [4.69.137.4
1]
12 159 ms 158 ms 160 ms ae-12-12.ebr1.washington1.level3.net [4.69.132.8
2]
13 158 ms 158 ms 158 ms ae-71-71.csw2.washington1.level3.net [4.69.134.1
34]
14 159 ms 159 ms 159 ms ae-72-72.ebr2.washington1.level3.net [4.69.134.1
49]
15 158 ms 158 ms 159 ms ae-44-44.ebr2.paris1.level3.net [4.69.137.61]
16 158 ms 158 ms 159 ms ae-45-45.ebr1.frankfurt1.level3.net [4.69.143.13
3]
17 159 ms 158 ms 158 ms ae-91-91.csw4.frankfurt1.level3.net [4.69.140.14
]
18 159 ms 186 ms 158 ms ae-4-90.edge6.frankfurt1.level3.net [4.69.154.20
2]
19 159 ms 158 ms 158 ms 195.16.161.58
20 160 ms 160 ms 158 ms 206-127-157-86.plaync.com [206.127.157.86]
21 159 ms 160 ms 166 ms 206.127.157.102
22 * * * Request timed out.
23 * * * Request timed out.

Tracing route to 206-127-159-116.plaync.com [206.127.159.116]
over a maximum of 30 hops:

1 1 ms <1 ms <1 ms 172.16.100.254
2 * * * Request timed out.
3 12 ms 24 ms 17 ms 172.21.1.38
4 12 ms 32 ms 14 ms 72.215.229.22
5 19 ms 13 ms 11 ms 72.215.229.63
6 69 ms 11 ms 20 ms ae57.bar2.Phoenix1.Level3.net [4.28.82.53]
7 20 ms 11 ms 17 ms ae-0-11.bar1.Phoenix1.Level3.net [4.69.148.113]

8 158 ms 152 ms 158 ms ae-8-8.ebr1.Dallas1.Level3.net [4.69.133.30]
9 156 ms 166 ms 154 ms ae-71-71.csw2.Dallas1.Level3.net [4.69.151.137]

10 157 ms 158 ms 163 ms ae-73-73.ebr3.Dallas1.Level3.net [4.69.151.146]

11 * * * Request timed out.
12 153 ms 155 ms 157 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86]

13 156 ms 160 ms 162 ms ae-71-71.csw2.Washington1.Level3.net [4.69.134.1
34]
14 156 ms 159 ms 164 ms ae-72-72.ebr2.Washington1.Level3.net [4.69.134.1
49]
15 156 ms 152 ms 170 ms ae-44-44.ebr2.Paris1.Level3.net [4.69.137.61]
16 154 ms 156 ms 152 ms ae-45-45.ebr1.Frankfurt1.Level3.net [4.69.143.13
3]
17 156 ms 159 ms 154 ms ae-91-91.csw4.Frankfurt1.Level3.net [4.69.140.14
]
18 155 ms 155 ms 161 ms ae-2-70.edge6.Frankfurt1.Level3.net [4.69.154.74
]
19 162 ms 156 ms 157 ms 195.16.161.58
20 182 ms 201 ms 154 ms 206-127-157-86.plaync.com [206.127.157.86]
21 156 ms 153 ms 162 ms 206-127-157-102.plaync.com [206.127.157.102]
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

So that’s what did it…

+1 pts for you sirsquishy

I wish I understood the opening post. It seems like it would make sense.

No wonder the huge lags, LvL3 seem to be routing traffic around the world to get back to the USA ……

This looks suspiciously like a route injection attack.

Can’t say if it really is, but it sure resembles one.

This is really horrible. So much lag and dc.

Last night I started having major problems with disconnections for the first time since I started playing GW2. Came on here looking for answers or solutions.

It sure seems like you’re on to something SirSquishy. If you run the trace again today, do you receive the same results?

Thanks,
Paul

Pretty sure it’s a DDoS attack atm
http://en.wikipedia.org/wiki/Denial-of-service_attack

With regards to the Level3 routing I just did a few different map IP’s and am getting routed from Washington State (home) to California (Level3) to Texas (Servers) so at least on my end I’m not getting routed around the world…at least right now.

Wasbunny.6531:

Pretty sure it’s a DDoS attack atm
http://en.wikipedia.org/wiki/Denial-of-service_attack

With regards to the Level3 routing I just did a few different map IP’s and am getting routed from Washington State (home) to California (Level3) to Texas (Servers) so at least on my end I’m not getting routed around the world…at least right now.

I was able to replicate the original posters results with 206.127.159.116. But I tried a few other IPs and was not routed across to Europe.

Mine says it’s going from Seattle to Denver to Dallas to Washington to Paris to Frankfurt

All NCSoft games are having this same issue. I wouldn’t be surprised if it was some DDOS crap again.

The issue is that level3 does not have good DoS protection. So when DoS attacks happen, level3 just gets flooded with additional traffic.

Regardless of how the routing is done, as long as those Nodes at Level3 are spiking above 55-65ms on response times, its going to cause issues.

Going from the US to the UK back to the US is just going to add to the issue.

8 158 ms 152 ms 158 ms ae-8-8.ebr1.Dallas1.Level3.net [4.69.133.30]
9 156 ms 166 ms 154 ms ae-71-71.csw2.Dallas1.Level3.net [4.69.151.137]

10 157 ms 158 ms 163 ms ae-73-73.ebr3.Dallas1.Level3.net [4.69.151.146]

11 * * * Request timed out.
12 153 ms 155 ms 157 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86]

13 156 ms 160 ms 162 ms ae-71-71.csw2.Washington1.Level3.net [4.69.134.1
34]
14 156 ms 159 ms 164 ms ae-72-72.ebr2.Washington1.Level3.net [4.69.134.1
49]
15 156 ms 152 ms 170 ms ae-44-44.ebr2.Paris1.Level3.net [4.69.137.61]
16 154 ms 156 ms 152 ms ae-45-45.ebr1.Frankfurt1.Level3.net [4.69.143.13
3]
17 156 ms 159 ms 154 ms ae-91-91.csw4.Frankfurt1.Level3.net [4.69.140.14
]
18 155 ms 155 ms 161 ms ae-2-70.edge6.Frankfurt1.Level3.net [4.69.154.74
]
19 162 ms 156 ms 157 ms 195.16.161.58
20 182 ms 201 ms 154 ms 206-127-157-86.plaync.com [206.127.157.86]
21 156 ms 153 ms 162 ms 206-127-157-102.plaync.com [206.127.157.102]
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

[/quote]

Anet has been blaming players individually for the disconnects, sending ever so more invasive tests to players, not telling them PUPs are in those – and even when one tells Anet’s rep that one is a computer person – one is still ignored.

The net is under attack – gamers are being told they are not important, Pandora is having trouble connecting – Netflix is losing connection and EVERY SINGLE NEWSPAPER website is having issues displaying or using social media.

Anet better get into the war on the net soon. We all lose if the not only the hackers hit us but those who think they OWN the net hit us as well.

http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16265&view=map

Want a shock? Go there and see just how much it isn’t our faults.

Put more bandwidth that is protected into the net – and we can and better soon.

Confirming OP’s traceroute, also from Phoenix AZ via Cox internet:

Host Name IP Address Hop Ping Time Ping Avg % Loss Pkts r/s Ping best/worst

• Unknown Host * 10.36.112.1 1 10ms
• Unknown Host * 172.21.0.116 2 9ms
• Unknown Host * 70.169.73.90 3 8ms
  chnddsrj01-ae2.0.rd.ph.cox.net 70.169.76.229 4 10ms

ae56.bar1.Phoenix1.Level3.net 4.31.188.61 5 8ms

ae-8-8.ebr1.Dallas1.Level3.net 4.69.133.30 6 151ms

ae-81-81.csw3.Dallas1.Level3.net 4.69.151.149 7 155ms

ae-83-83.ebr3.Dallas1.Level3.net 4.69.151.158 8 154ms

• Unknown Host * 0.0.0.0 9 0ms
  ae-2-2.ebr1.Washington1.Level3.net 4.69.132.86 10 153ms

ae-81-81.csw3.Washington1.Level3.net 4.69.134.138 11 152ms

ae-82-82.ebr2.Washington1.Level3.net 4.69.134.153 12 153ms

ae-44-44.ebr2.Paris1.Level3.net 4.69.137.61 13 151ms

ae-45-45.ebr1.Frankfurt1.Level3.net 4.69.143.133 14 154ms

ae-81-81.csw3.Frankfurt1.Level3.net 4.69.140.10 15 153ms

ae-3-80.edge6.Frankfurt1.Level3.net 4.69.154.138 16 153ms

• Unknown Host * 195.16.161.58 17 152ms

206-127-157-86.plaync.com 206.127.157.86 18 157ms

206-127-157-102.plaync.com 206.127.157.102 19 161ms

• Unknown Host * 0.0.0.0 20 0ms

====

This forum is also slow, traceroute to it isn’t being routed to Paris and Frankfurt:

Host Name IP Address Hop Ping Time Ping Avg % Loss Pkts r/s Ping best/worst

• Unknown Host * 10.36.112.1 1 8ms
• Unknown Host * 172.21.0.118 2 7ms
• Unknown Host * 70.169.73.196 3 12ms
  mcdldsrj01-ae2.0.rd.ph.cox.net 70.169.76.225 4 10ms
  ae57.bar2.Phoenix1.Level3.net 4.28.82.53 5 10ms

ae-0-11.bar1.Phoenix1.Level3.net 4.69.148.113 6 8ms

ae-8-8.ebr1.Dallas1.Level3.net 4.69.133.30 7 32ms

ae-91-91.csw4.Dallas1.Level3.net 4.69.151.161 8 32ms

• Unknown Host * 0.0.0.0 9 0ms
• Unknown Host * 4.59.197.34 10 79ms
• Unknown Host * 0.0.0.0 11 0ms
• Unknown Host * 64.25.32.26 12 40ms
• Unknown Host * 64.25.32.82 13 41ms
• Unknown Host * 64.25.40.16 14 40ms

atheria.2837:

8 158 ms 152 ms 158 ms ae-8-8.ebr1.Dallas1.Level3.net [4.69.133.30]
9 156 ms 166 ms 154 ms ae-71-71.csw2.Dallas1.Level3.net [4.69.151.137]

10 157 ms 158 ms 163 ms ae-73-73.ebr3.Dallas1.Level3.net [4.69.151.146]

11 * * * Request timed out.
12 153 ms 155 ms 157 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86]

13 156 ms 160 ms 162 ms ae-71-71.csw2.Washington1.Level3.net [4.69.134.1
34]
14 156 ms 159 ms 164 ms ae-72-72.ebr2.Washington1.Level3.net [4.69.134.1
49]
15 156 ms 152 ms 170 ms ae-44-44.ebr2.Paris1.Level3.net [4.69.137.61]
16 154 ms 156 ms 152 ms ae-45-45.ebr1.Frankfurt1.Level3.net [4.69.143.13
3]
17 156 ms 159 ms 154 ms ae-91-91.csw4.Frankfurt1.Level3.net [4.69.140.14
]
18 155 ms 155 ms 161 ms ae-2-70.edge6.Frankfurt1.Level3.net [4.69.154.74
]
19 162 ms 156 ms 157 ms 195.16.161.58
20 182 ms 201 ms 154 ms 206-127-157-86.plaync.com [206.127.157.86]
21 156 ms 153 ms 162 ms 206-127-157-102.plaync.com [206.127.157.102]
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Anet has been blaming players individually for the disconnects, sending ever so more invasive tests to players, not telling them PUPs are in those – and even when one tells Anet’s rep that one is a computer person – one is still ignored.

The net is under attack – gamers are being told they are not important, Pandora is having trouble connecting – Netflix is losing connection and EVERY SINGLE NEWSPAPER website is having issues displaying or using social media.

Anet better get into the war on the net soon. We all lose if the not only the hackers hit us but those who think they OWN the net hit us as well.

http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16265&view=map

Want a shock? Go there and see just how much it isn’t our faults.

Put more bandwidth that is protected into the net – and we can and better soon.[/quote]

Actually for several hours Anet has talked about the issues on their Twitter feed. They are not blaming players for this.

Confirming OP’s traceroute, also from Phoenix AZ via Cox internet:

How do you guys pull out that information?

Confirmed OP’s post as well. Below is a trace route from Central Kentucky – Comcast.

5 28 ms 14 ms 14 ms xe-7-0-1-0-ar03.nashville.tn.nash.comcast.net [6
8.86.176.85]
6 14 ms 28 ms 15 ms ae-3-0-ar01.goodslettvll.tn.nash.comcast.net [68
.86.148.69]
7 24 ms 23 ms 23 ms he-5-6-0-0-cr01.56marietta.ga.ibone.comcast.net
[68.86.90.89]
8 21 ms 36 ms 23 ms 23.30.207.98
9 * * * Request timed out.
10 124 ms 124 ms 124 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86]

11 122 ms 122 ms 138 ms ae-91-91.csw4.Washington1.Level3.net [4.69.134.1
42]
12 124 ms 140 ms 139 ms ae-92-92.ebr2.Washington1.Level3.net [4.69.134.1
57]
13 124 ms 123 ms 123 ms ae-42-42.ebr2.Paris1.Level3.net [4.69.137.53]
14 123 ms 123 ms 122 ms ae-47-47.ebr1.Frankfurt1.Level3.net [4.69.143.14
1]
15 122 ms 122 ms 123 ms ae-61-61.csw1.Frankfurt1.Level3.net [4.69.140.2]

16 122 ms 124 ms 123 ms ae-1-60.edge6.Frankfurt1.Level3.net [4.69.154.10
]
17 122 ms 121 ms 121 ms 195.16.161.58
18 122 ms 123 ms 123 ms 206-127-157-86.plaync.com [206.127.157.86]
19 130 ms 142 ms 130 ms 206-127-157-102.plaync.com [206.127.157.102]
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

Same here!

C:\Users\Savvy>tracert -h 30 206.127.159.116

Tracing route to 206-127-159-116.plaync.com [206.127.159.116]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms dlinkrouter [192.168.0.1]
2 <1 ms <1 ms <1 ms 10.0.0.1
3 * * * Request timed out.
4 8 ms 7 ms 7 ms Censored [68.86.139.137]
5 9 ms 7 ms 8 ms Censored [68.86.138.26]
6 23 ms 19 ms 19 ms te-2-0-0-6-cr01.miami.fl.ibone.comcast.net [68.8
6.92.13]
7 20 ms 20 ms 18 ms ae12.edge2.Miami1.level3.net [4.68.127.205]
8 126 ms 125 ms 125 ms ae-32-52.ebr2.Miami1.Level3.net [4.69.138.123]
9 * * * Request timed out.
10 126 ms 126 ms 125 ms ae-2-2.ebr1.Washington1.Level3.net [4.69.132.86]

11 126 ms 125 ms 126 ms ae-71-71.csw2.Washington1.Level3.net [4.69.134.1
34]
12 145 ms 127 ms 127 ms ae-72-72.ebr2.Washington1.Level3.net [4.69.134.1
49]
13 123 ms 123 ms 123 ms ae-43-43.ebr2.Paris1.Level3.net [4.69.137.57]
14 125 ms 130 ms 124 ms ae-45-45.ebr1.Frankfurt1.Level3.net [4.69.143.13
3]
15 127 ms 126 ms 143 ms ae-61-61.csw1.Frankfurt1.Level3.net [4.69.140.2]

16 126 ms 126 ms 125 ms ae-1-60.edge6.Frankfurt1.Level3.net [4.69.154.10
]
17 126 ms 126 ms 125 ms 195.16.161.58
18 126 ms 124 ms 124 ms 206-127-157-86.plaync.com [206.127.157.86]
19 130 ms 129 ms 129 ms 206-127-157-102.plaync.com [206.127.157.102]
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * ^C
C:\Users\Savvy>

Here is more info on Anets IP Schema for those that do not know;

This is the First IP i used in my Trace in the OP – 206.127.159.116, all of Anets IP’s terminate in Texas. Different ISPs will route according to what the BGP tables tell them (Network routing stuff). Some of their IP ranges are ported in from Atlanta via L2VPN service into the localized Datacenter in Austin, Tx. But every one of their IP’s are US bound.

Geolocation data from IP2Location (Product: DB4)
IP Address Country Region City ISP
206.127.159.116 United States Texas Austin Nc Interactive Inc.
Google Map for AUSTIN, TEXAS, UNITED STATES (New window)

Geolocation data from IPligence (Product: Max)
IP Address Country Region City ISP
206.127.159.116 United States Texas Austin Nc Interactive Inc.
Continent Latitude Longitude Time Zone
North America 30.2958 -97.8101 CST

Here are all the IP’s that I have recorded belonging to NCSoft and that are in the US – feel Free to Tracert against any of them to verify routing for your local ISP;

206.127.159.116
64.25.38.72

auth1.101.arenanetworks.com
64.25.38.72:6112 – connect succeeded
64.25.38.171:6112 – connect succeeded
64.25.38.172:6112 – connect succeeded
64.25.38.51:6112 – connect succeeded
64.25.38.54:6112 – connect succeeded

auth2.101.arenanetworks.com
206.127.146.73:80 – connect succeeded
206.127.146.74:80 – connect succeeded
206.127.159.77:80 – connect succeeded
206.127.159.107:80 – connect succeeded
206.127.159.108:80 – connect succeeded
206.127.159.109:80 – connect succeeded
206.127.146.73:6112 – connect succeeded
206.127.146.74:6112 – connect succeeded
206.127.159.77:6112 – connect succeeded
206.127.159.107:6112 – connect succeeded
206.127.159.108:6112 – connect succeeded
206.127.159.109:6112 – connect succeeded

auth1.101.arenanetworks.com
64.25.38.72:80 – connect succeeded
64.25.38.171:80 – connect succeeded
64.25.38.172:80 – connect succeeded
64.25.38.51:80 – connect succeeded
64.25.38.54:80 – connect succeeded

File1.ArenaNetworks.com
64.25.39.21:6112 – connect succeeded
64.25.39.21:80 – connect succeeded

Diag.ArenaNetworks.com
206.127.158.31:6112 – connect succeeded
64.25.39.21:6112 – connect succeeded
206.127.158.31:80 – connect succeeded
64.25.39.21:80 – connect succeeded

origincdn.101.arenanetworks.com
64.25.41.2:80 – connect succeeded

- Sometimes I get more than 30 seconds to use a skills

Using the command:
“C:\Program Files (x86)\Guild Wars 2\Gw2.exe” -diag

0 PC.Home [192.168.1.2]
1 Broadcom.Home [192.168.1.1]
2 179.185.128.119.dynamic.adsl.gvt.net.br [179.185.128.119]
3 179.184.74.67.static.adsl.gvt.net.br [179.184.74.67]
4 ethernet2-4.ar1.FCS1.FOR.gblx.net [64.214.196.121]
5 po8-20G.ar1.MIA2.gblx.net [67.16.145.49]
6 ae5.edge2.miami2.level3.net [4.68.111.121]
7 * ae-32-52.ebr2.Miami1.Level3.net [4.69.138.123]
8 ae-2-2.ebr2.Atlanta2.Level3.net [4.69.140.142]
9 * * *

0 PC.Home [192.168.1.2]
0/ 25 = 0% |
1 0ms 0/ 25 = 0% 0/ 25 = 0% Broadcom.Home [192.168.1.1]
0/ 25 = 0% |
2 6ms 0/ 25 = 0% 0/ 25 = 0% 179.185.128.119.dynamic.adsl.gvt.net.br [179.185.128.119]
0/ 25 = 0% |
3 13ms 0/ 25 = 0% 0/ 25 = 0% 179.184.74.67.static.adsl.gvt.net.br [179.184.74.67]
0/ 25 = 0% |
4 12ms 0/ 25 = 0% 0/ 25 = 0% ethernet2-4.ar1.FCS1.FOR.gblx.net [64.214.196.121]
0/ 25 = 0% |
5 114ms 1/ 25 = 4% 1/ 25 = 4% po8-20G.ar1.MIA2.gblx.net [67.16.145.49]
0/ 25 = 0% |
6 154ms 7/ 25 = 28% 7/ 25 = 28% ae5.edge2.miami2.level3.net [4.68.111.121]
0/ 25 = 0% |
7 147ms 0/ 25 = 0% 0/ 25 = 0% ae-32-52.ebr2.Miami1.Level3.net [4.69.138.123]
25/ 25 =100% |
8 —- 25/ 25 =100% 0/ 25 = 0% ae-2-2.ebr2.Atlanta2.Level3.net [4.69.140.142]

0 PC.Home [192.168.1.2]
1 Broadcom.Home [192.168.1.1]
2 179.185.128.119.dynamic.adsl.gvt.net.br [179.185.128.119]
3 179.184.74.67.static.adsl.gvt.net.br [179.184.74.67]
4 ethernet2-4.ar1.FCS1.FOR.gblx.net [64.214.196.121]
5 * po8-20G.ar1.MIA2.gblx.net [67.16.145.49]
6 ae5.edge2.miami2.level3.net [4.68.111.121]
7 ae-31-51.ebr1.Miami1.Level3.net [4.69.138.91]
8 ae-2-2.ebr1.Dallas1.Level3.net [4.69.140.133]
9 ae-91-91.csw4.Dallas1.Level3.net [4.69.151.161]
10 * * *

0 PC.Home [192.168.1.2]
0/ 25 = 0% |
1 0ms 0/ 25 = 0% 0/ 25 = 0% Broadcom.Home [192.168.1.1]
0/ 25 = 0% |
2 6ms 0/ 25 = 0% 0/ 25 = 0% 179.185.128.119.dynamic.adsl.gvt.net.br [179.185.128.119]
0/ 25 = 0% |
3 6ms 1/ 25 = 4% 1/ 25 = 4% 179.184.74.67.static.adsl.gvt.net.br [179.184.74.67]
0/ 25 = 0% |
4 14ms 0/ 25 = 0% 0/ 25 = 0% ethernet2-4.ar1.FCS1.FOR.gblx.net [64.214.196.121]
4/ 25 = 16% |
5 115ms 4/ 25 = 16% 0/ 25 = 0% po8-20G.ar1.MIA2.gblx.net [67.16.145.49]
2/ 25 = 8% |
6 157ms 6/ 25 = 24% 0/ 25 = 0% ae5.edge2.miami2.level3.net [4.68.111.121]
1/ 25 = 4% |
7 116ms 9/ 25 = 36% 2/ 25 = 8% ae-31-51.ebr1.Miami1.Level3.net [4.69.138.91]
0/ 25 = 0% |
8 145ms 7/ 25 = 28% 0/ 25 = 0% ae-2-2.ebr1.Dallas1.Level3.net [4.69.140.133]
18/ 25 = 72% |
9 —- 25/ 25 =100% 0/ 25 = 0% ae-91-91.csw4.Dallas1.Level3.net [4.69.151.161]

Thanks Level3.net and gblx.net for lag my Guild Wars 2
- Sometimes I get more than 30 seconds to use a skills

Pretty much the whole internet infrastructure is under attack right now. It looks like there’s a pretty massive botnet storm that started about 29 hours ago, and is growing exponentially. You can see a live action map here. This map is showing 1% of all attacks currently ongoing. Any higher percentage and the map disappears under the attacks.

http://map.ipviking.com/

(ipviking is a security firm that has some really spooky hooks into the internet architecture, but for now, the important thing is that you can see, in real time, what attacks are happening. Level 3 is under attack, but so is every other Tier 1 provider in the US and Europe. )

In other words; there’s not much Anet can do.

But everyone else should go run your virus protection, and download the freeware version of malwarebytes and run it too. These bots only work because people don’t keep their systems clean.

The problem with Level 3 is much older.
They is affecting even the game servers like the Blizzard.

This is bad for Americans, this worse for Europeans and Brazilians.

Sorry for the English.
English is not my first language.

duckideva.6358:

Pretty much the whole internet infrastructure is under attack right now. It looks like there’s a pretty massive botnet storm that started about 29 hours ago, and is growing exponentially. You can see a live action map here. This map is showing 1% of all attacks currently ongoing. Any higher percentage and the map disappears under the attacks.

http://map.ipviking.com/

(ipviking is a security firm that has some really spooky hooks into the internet architecture, but for now, the important thing is that you can see, in real time, what attacks are happening. Level 3 is under attack, but so is every other Tier 1 provider in the US and Europe. )

In other words; there’s not much Anet can do.

But everyone else should go run your virus protection, and download the freeware version of malwarebytes and run it too. These bots only work because people don’t keep their systems clean.

Harmadda.5971:

Confirming OP’s traceroute, also from Phoenix AZ via Cox internet:

How do you guys pull out that information?

Use a traceroute utility, with the address of the server (206.127.157.102 — I got this from the OPs post).

I use an old traceroute program from the UO (ultima online) mmorg — UOTrace.exe There are a lot of free programs for this, a quick google will show them. As always, avoid the freeware ones with added ‘features’ (like ASK toolbars, etc.). Only download from reputable sites/etc./yada-yada-yada…

From what I’m getting from this, most of it is inside our own country, The US?

ALSO this: http://www.forbes.com/sites/bruceupbin/2014/06/18/were-aswarm-in-denial-of-service-attacks-and-its-getting-worse/

Tracing route to 206-127-159-116.plaync.com [206.127.159.116]
over a maximum of 30 hops:

1 74 ms 98 ms 98 ms dsldevice.lan [192.168.1.1]
2 22 ms 20 ms 22 ms 84-235-124-10.saudi.net.sa [84.235.124.10]
3 20 ms 20 ms 20 ms 84-235-124-89.saudi.net.sa [84.235.124.89]
4 34 ms 22 ms 23 ms 84-235-94-137.saudi.net.sa [84.235.94.137]
5 34 ms 44 ms 20 ms 84-235-94-126.saudi.net.sa [84.235.94.126]
6 22 ms 31 ms 21 ms 84-235-94-113.saudi.net.sa [84.235.94.113]
7 112 ms 112 ms 111 ms 195.50.122.161
8 113 ms 112 ms 110 ms vl-3507-ve-121.csw1.London1.Level3.net [4.69.166
.10]
9 110 ms 115 ms 110 ms ae-59-114.ebr1.London1.Level3.net [4.69.153.125]

10 110 ms 110 ms 110 ms ae-21-21.ebr2.Frankfurt1.Level3.net [4.69.148.18
6]
11 111 ms 110 ms 109 ms ae-82-82.csw3.Frankfurt1.Level3.net [4.69.140.26
]
12 110 ms 109 ms 109 ms ae-3-80.edge6.Frankfurt1.Level3.net [4.69.154.13
8]
13 109 ms 108 ms 108 ms 195.16.161.58
14 108 ms 108 ms 107 ms 206-127-157-86.plaync.com [206.127.157.86]
15 109 ms 108 ms 108 ms 206-127-157-102.plaync.com [206.127.157.102]
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * * * Request timed out.
20 * * * Request timed out.
21 * * * Request timed out.
22 * * * Request timed out.
23 * * * Request timed out.
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

Nick Danger.9821:

Harmadda.5971:

Confirming OP’s traceroute, also from Phoenix AZ via Cox internet:

How do you guys pull out that information?

Use a traceroute utility, with the address of the server (206.127.157.102 — I got this from the OPs post).

I use an old traceroute program from the UO (ultima online) mmorg — UOTrace.exe There are a lot of free programs for this, a quick google will show them. As always, avoid the freeware ones with added ‘features’ (like ASK toolbars, etc.). Only download from reputable sites/etc./yada-yada-yada…

It’s much safer to use the Windows Command Prompt (cmd).
Type: tracert [insert the IP you want to trace]
and press Enter.

TyranosEH.3768:

Nick Danger.9821:

Harmadda.5971:

Confirming OP’s traceroute, also from Phoenix AZ via Cox internet:

How do you guys pull out that information?

Use a traceroute utility, with the address of the server (206.127.157.102 — I got this from the OPs post).

I use an old traceroute program from the UO (ultima online) mmorg — UOTrace.exe There are a lot of free programs for this, a quick google will show them. As always, avoid the freeware ones with added ‘features’ (like ASK toolbars, etc.). Only download from reputable sites/etc./yada-yada-yada…

It’s much safer to use the Windows Command Prompt (cmd).
Type: tracert [insert the IP you want to trace]
and press Enter.

Or to be even safer from Linux the command is traceroute [insert the IP you want to trace]

Yumiko Ishida.3769:

From what I’m getting from this, most of it is inside our own country, The US?

ALSO this: http://www.forbes.com/sites/bruceupbin/2014/06/18/were-aswarm-in-denial-of-service-attacks-and-its-getting-worse/

See also this: http://news.techworld.com/security/3531040/wave-of-100gbps-mega-ddos-attacks-hits-record-level-in-2014/

According to various sources I’m watching, some of the attacks currently are well over 25ogbps…that is enough to destroy almost any provider on the planet. It’s ugly out there right now. Banks are getting hit, Tier 1 providers like L3 are getting pounded, tier 2 providers are randomly getting pushed offline; at any given point 25% of them could be down…it’s a nightmare…and again; it’s not anything that L3 or Anet can fix; all they can try to do is try hold the gates closed against the barbarians.

scirocco.9805:

Or to be even safer from Linux the command is traceroute [insert the IP you want to trace]

Don’t be silly. I’m as big of fan of Linux as anyone…but there is nothing insecure about windows traceroute, or it wouldn’t be a core function of Nmap for goodness sake. It’s an outgoing request, there’s nothing returned that can be insecure.

However, the syntax for tracert can confuse people. Here’s some core syntax:

There are several command-line switches that can be used with TRACERT, but they are usually not needed for standard troubleshooting.

TRACERT syntax:

tracert [-d] [-h maximum_hops] [-j host-list] [-w timeout] target_name

Parameters:

-d
Specifies to not resolve addresses to host names.

-h maximum_hops
Specifies the maximum number of hops to search for target.

-j host-list
Specifies loose source route along the host-list.

-w timeout
Waits the number of milliseconds specified by timeout for each
reply.

target_name
Name or IP address of the target host.

You can use the -j option to force the outgoing datagram to pass through a specific router.

That said; you can do all the traceroutes you want, using whatever toolset makes you happy…and it’s not going to change the fact that the internet is under massive attack right now on all Tier one providers. The very backbone of the infrastructure is being targeted. Stuff is falling down all over.

I refer folks again to IPViking’s map , which shows 1% of all the attacks being recorded by honeypots at the moment…in real time.

For other real time/short window time/ maps, see also:

http://www.trendmicro.com/us/security-intelligence/current-threat-activity/global-botnet-map/index.html

http://www.shadowserver.org/wiki/pmwiki.php/Stats/DDoSMaps (Updated daily, not real time.)

http://cybermap.kaspersky.com/

http://atlas.arbor.net/worldmap/index

Google has one too, but it seems to be behind by 3-5 days: http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&time=16265&view=map
http://www.akamai.com/html/technology/dataviz1.html

scirocco.9805:

TyranosEH.3768:

Nick Danger.9821:

Harmadda.5971:

Confirming OP’s traceroute, also from Phoenix AZ via Cox internet:

How do you guys pull out that information?

Use a traceroute utility, with the address of the server (206.127.157.102 — I got this from the OPs post).

I use an old traceroute program from the UO (ultima online) mmorg — UOTrace.exe There are a lot of free programs for this, a quick google will show them. As always, avoid the freeware ones with added ‘features’ (like ASK toolbars, etc.). Only download from reputable sites/etc./yada-yada-yada…

It’s much safer to use the Windows Command Prompt (cmd).
Type: tracert [insert the IP you want to trace]
and press Enter.

Or to be even safer from Linux the command is traceroute [insert the IP you want to trace]

I think you’re both being too paranoid. As long as one exercises basic care (download from reputable site and do ‘custom’ installation to prevent addons like ASK toolbar, third party programs offer benefits. For example, the old UOTrace I’ve been using since ‘96 from Ultima Online (where hackers/etc were common) offers DNS, WHOIS, ping, traceroute, poll, copy to clipboard, and easy configurations (TTL, max hops, timeout, buffer, # retries, etc.). It’s why I keep using it after these past 18 (18! yikes! It’s been that long since UO debuted?!?!) years, long after I gave up on UO.

It’s arguably better for someone who’s not up on traceroute stuff (like the guy I replied to) than command line stuff or delving into Linux distros.

Seems Uncle Sam is finally taking notice:

http://www.govinfosecurity.com/senate-weighs-botnet-busting-changes-a-7071