Georg Grabler (STiAT) - blog

Life is like an endlessly recursive fractal of perverse pain and suffering.

Why CIP and Prolexic are incompetent.

Okay, to be fair, this is going to be a rant, but I’ve been annoyed by those two companies now for month, so have several players of the MMORPG “Tibia”.

The state is, that Tibia is facing heavy DDoS attacks, as they did in the past. They took the step to get a professional DDoS mitigation company to their side, to protect them – since they couldn’t handle the situation themselves, which I consider a good thing to do.

Well, now guess what? Now this “professional” anti DDoS provider can’t either. This has been an on-going problem for two month now.

So – do I have proof for the problem? Yes. And I can get you another mtr report every day if you want, I just have to wait until 18:00 CEST, and can reproduce the problem just fine until midnight – every day.

Note that I filtered my own network and my public IP below – necessary due to this being a public post.

[******@ggpc]$ mtr --report --no-dns --tcp --port 7171 193.200.156.112

Start: Mon Dec 22 21:53:25 2014
HOST: ggpc                        Loss%   Snt   Last   Avg  Best  Wrst StDev
1.|-- <localnet>                0.0%    10    0.8   1.1   0.5   1.7   0.0
2.|-- ???                       100.0    10    0.0   0.0   0.0   0.0   0.0
3.|-- <my-public-ip>               0.0%    10    9.8  12.8   9.1  24.5   4.5
4.|-- 84.116.228.149             0.0%    10   26.2  26.1  22.9  30.5   2.2
5.|-- 84.116.136.118             0.0%    10   22.5  23.7  22.5  25.3   0.7
6.|-- 84.116.132.186             0.0%    10   31.9  24.8  21.9  31.9   3.0
7.|-- 195.219.50.106             0.0%    10   50.0  37.4  33.9  50.0   4.7
8.|-- 195.219.50.110             0.0%    10   24.5  25.0  22.1  28.4   1.9
9.|-- 72.52.48.35                0.0%    10   22.6  24.2  21.6  26.7   1.4
10.|-- ???                       100.0    10    0.0   0.0   0.0   0.0   0.0
11.|-- 72.52.22.94                0.0%    10   40.3  42.1  39.0  44.7   1.8
12.|-- 193.200.156.112           20.0%    10   84.6 977.2  83.4 3096. 1351.2

So what is this? The Server 72.52.22.94 is “unknown.prolexic.com”, until that server there is no issue. The server “behind” the prolexic “entry gate” (which is just one of dozens around the world as it seems, depending on your provider and location you’ll hit this route) is having issues – a lot of issues considering a 20 % package loss and a average response time of 1351,2ms.

Yet, this “professional” provider, failed to do anything. I wonder what kind of company Prolexic is, since a DDoS protection provider they’re obviously not.

So what about CIPSoft? They say, despite of hundreds, maybe thousands of customers having problems, that there is no problem. Way to go! They just state that Prolexic has no problems – what is probably what Prolexic says, but still, they have a lot of traces of their customers and a lot of evidence that there in fact is an issue.

Denying won’t help, not Prolexic, and for sure not CIPSoft. It’s an unprofessional behavior, besides that CIPSoft fails to communicate to their customers – there is no official stance towards the problem.

There are no comments

Leave a Reply

Your email address will not be published. Required fields are marked *