NEWS [UO.Com] Server Migration for the Week of January 13th, 2025

[skett]

@Rimeny atl has had at least 8 small roll backs last couple days (almost)

 

[OREOGL]

Has there actually been rollbacks? I see Atlantic is still offline

I saw a few were but I assume some of those were part of the migration.

I was able to log in to feed my dying fish. Had 1 floater this morning. Really have to remember to feed them more often.

 

[Wilma]

Walmart has rollbacks all the time!

 

[Rimeny]

I guess Atlantic is still offline due to the Server migration..

 

[Morgana Grim]

thats why i write:

• take down all shards for some months or more

I hope not I have boats out holding items on shards I have no house!!

 

[Cork]

UO is a video game, however it is also a business, and DDOS is a Federal Cybercrime. Whoever is doing it, and doing it to mess up a game in their mind, they may be facing up to 10 years in prison if and when caught. Only a very immature person, and someone with partial knowledge would commit such a thing, to a video game. However what these people or persons do not know may hurt them a lot, and land them in a federal prison. There are special forensic techniques not known to the public, that can unmask fake addresses and VPN's that the highschool-level hacker may be using to commit this. Everything on the web is recorded, all events at all times. If they do not get caught now, they may get caught later. Then it would not be very funny.
The move to a new more hacker resistant environment and with a good DDOS shield is a good one, even though the move of the servers is inconveniencing to players. I think if security then will be better, that it is worth it, and a good investment by the Dev team.

I think you don't realize that if someone is actually doing a DDoS attack that they are likely in a country that the US has no extradition treaty with. That means they can do this all day long every day with zero consequences.

 

[skett]

just pay the pasos and pizza demands and move on

 

[Cork]

Once they get things moved to the cloud they will at least have some DDoS protection. The question is if they are going to pay for more than the basic protection you get for free. A cloud provider can easily absorb/redirect the DDoS attacks so that it doesn't affect the servers but it costs money

 

[Stinky Pete]

Once they get things moved to the cloud they will at least have some DDoS protection. The question is if they are going to pay for more than the basic protection you get for free. A cloud provider can easily absorb/redirect the DDoS attacks so that it doesn't affect the servers but it costs money

It's hard to mitigate DDOS with unencapsulated TCP packets. You gotta use a reverse proxy. Cloudflare's "Spectrum" service is what they need, but it's not cheap. X4B works alright on a budget. I've been fighting with this script kiddie for a year or more now.

 

[Ivory Norwind]

I guess Atlantic is still offline due to the Server migration..

Now it's back up and I don't miss anything, even the things I did last night, at a time when the server was there. Atlantic's migration was scheduled for Thursday the 16th but I see in the notes that it has been moved to today. I'm connected now and everything seems fine so I hope they've already done the migration

 

[Omnicron]

thats why i write:

• take down all shards for some months or more
• change the Producer and programmers
• fix code
• restart all shards

Take them all down for months and restart them?

That my friend would literally kill this game. The proverbial final nail and all that.

 

[Merlin]

Isn't everything hosted by Amazon now?

Thought they included some DDoS shielding to their subscribers.

I thought they were on Amazon and protected by CloudFlare, but I am not certain. Fingers crossed wherever the servers are being migrated to will be able to address the DDOS attacks more forcefully.

I do hope that they complete these server migrations sooner than later. Considering UO has been mostly unplayable the last two days (atleast for Atlantic), I’d welcome just shutting all shards for a day in order to do the migration and just get it over with.

I counted 5 giveaways not sure about a 100 if your talking about brother &*$#% they do that on and off over the year from what ive seen

Same. I saw a small handful of giveaways, but not 100’s. I would guess this is unrelated, but that’s just a presumption.

maybe you could put a place here on the forums for Discord invites so people can share their channel if they want to

I’d like to… problem is some of these servers have code-sellers in there and I don’t want to be posting up something publicly that is outside of my control. There is a post on Stratics that has some of the servers listed and I am happy for anyone to PM me on Discord and I would gladly invite them to whatever types of servers they’re interested in as a way to expand the community.

UO is a video game, however it is also a business, and DDOS is a Federal Cybercrime. Whoever is doing it, and doing it to mess up a game in their mind, they may be facing up to 10 years in prison if and when caught. Only a very immature person, and someone with partial knowledge would commit such a thing, to a video game. However what these people or persons do not know may hurt them a lot, and land them in a federal prison. There are special forensic techniques not known to the public, that can unmask fake addresses and VPN's that the highschool-level hacker may be using to commit this. Everything on the web is recorded, all events at all times. If they do not get caught now, they may get caught later. Then it would not be very funny.
The move to a new more hacker resistant environment and with a good DDOS shield is a good one, even though the move of the servers is inconveniencing to players. I think if security then will be better, that it is worth it, and a good investment by the Dev team.

I don’t disagree with you that any attacks were likely a cybercrime. The difficulty is that these hackers are more sophisticated than they were even just a few years ago, and can now use various measures to shield the location of their attacks. In example, if the attacks are coming from Brazil or the Ukraine (as has been speculated), how can the U.S. Federal government really stop that? Hopefully the new severs will have better protections – I assume we will find out.

thats why i write:

• take down all shards for some months or more
• change the Producer and programmers
• fix code
• restart all shards

This would end Ultima Online.

Has there actually been rollbacks? I see Atlantic is still offline

I noticed about an hour roll back last night between 11pm and 1am.

 

[Rimeny]

I noticed about an hour roll back last night between 11pm and 1am.[/QUOTE]


Yeah, I just logged in and my Atlantic shopping spree had been reverted and my vendor sales short.

Ah well; hopefully it’s stable now

 

[skett]

well he just took down ATL again if its ddos

 

[Ivory Norwind]

I noticed about an hour roll back last night between 11pm and 1am.

Yeah, I just logged in and my Atlantic shopping spree had been reverted and my vendor sales short.
Ah well; hopefully it’s stable now [/QUOTE]

And now Atlantic is gone again. I hope it's for the migration, since they brought it forward to today. When I connected 2 hours ago everything was fine, let's hope it's down now for the migration

 

[MaryForUo]

 

[Rimeny]

No words from the Dev's I presume.

 

[Merlin]

The same person from yesterday is once again bragging in some Discord servers about taking down various shards... even after the migration.

For those quoting me on the official forum demanding I "post proof" - feel free to send me a PM to my Discord @merlin.pendragon

 

[Rimeny]

Europa down as well.

 

[Pawain]

The same person from yesterday is once again bragging in some Discord servers about taking down various shards... even after the migration.

For those quoting me on the official forum demanding I "post proof" - feel free to send me a PM to my Discord @merlin.pendragon

I just said sources on this forum said... the main loudmouth spoke ill of you when he read the posts on this topic.

Its just 2 idiots. They deserve nothing.

 

[Stinky Pete]

I thought they were on Amazon and protected by CloudFlare, but I am not certain.

The base cloudflare protection that AWS offers works for websites and stuff, but not the type of traffic UO produces.

 

[Stinky Pete]

I just said sources on this forum said... the main loudmouth spoke ill of you when he read the posts on this topic.

Its just 2 idiots. They deserve nothing.

It's one idiot, and he has the potential to sustain an attack for a long time.

 

[Merlin]

It's one idiot, and he has the potential to sustain an attack for a long time.

This person is known to take down the free-shards using the same types of attacks.

The person conducting the attacks is now asking for money to keep certain shards up.

In short, this is getting ugly.

 

[MaryForUo]

This person is known to take down the free-shards using the same types of attacks.

The person conducting the attacks is now asking for money to keep certain shards up.

In short, this is getting ugly.

he really asking money? omg...

 

[Stinky Pete]

This person is known to take down the free-shards using the same types of attacks.

The person conducting the attacks is now asking for money to keep certain shards up.

In short, this is getting ugly.

Yeah, it's been going on for over a year. We were the first to tell him to kick rocks (in a not so polite manner) and we've been under attack the entire time.

 

[Rimeny]

Not sure what the Dev's can do about this with their limited resources. If its been going on for over a year, they can't have closed the exploit in the code

 

[Pawain]

It's one idiot, and he has the potential to sustain an attack for a long time.

I meant 2 idiots on the forum over there.

Seems like this is turning into extortion.

 

[Rimeny]

They are giving it large in the UO discord, unless that's just someone messing. very sad state of affairs.

 

[Stinky Pete]

Not sure what the Dev's can do about this with their limited resources. If its been going on for over a year, they can't have closed the exploit in the code

It's not an exploit in the code, it is a traditional DDOS attack using a botnet. You need to hide the actual public IP with a proxy that has enough bandwidth to tank the attack, it's really the only way.

 

[Pawain]

What would EA do? First they would have to find a higher up that knows about EA owning UO and it being operated by Broadsword. EA will not pay or give resources for a game that is a tiny sliver of the pie.

Good Luck BS!

 

[Rimeny]

EA would probably be like, Ultima Online, still going? really? and its part of our catalogue.. man alive.

 

[Federico Piccinini]

ATL down again

 

[Ivory Norwind]

ATL down again

I connected for 15 minutes on Atlantic and everything was fine. After 10 minutes the line goes dead and Atlantic is no longer there. It doesn't matter, at least I end up with a dead pet. But it seems to me that they are mainly targeting Atlantic or am I wrong?

 

[Rimeny]

Atlantic is the prime target, its the busiest shard, so biggest impact.

 

[Lord Ron Fellows]

They are giving it large in the UO discord, unless that's just someone messing. very sad state of affairs.

People like this thrive off of attention. Sitting there talking to them isn't going to make anything better.

 

[MaryForUo]

Atlantic UP fpr 2 min then down again
Hope they'll do something quick to fix this situation

 

[Ivory Norwind]

From what I'm seeing it's the most affected server. I've been playing for at least 2 hours on Catskills where I played before moving to Atlantic. It didn't give me any problems. So they're betting everything on Atlantic, which goes up and down every 10 minutes. Probably because it is the most populated. Let's hope they resolve everything as soon as possible. Of course EA doesn't seem very interested in Ultima Online Furthermore, there are internet connection problems with the entire UO

 

[tiara1971]

OMG this is getting old pacific crashed again

 

[Ivory Norwind]

Catskills also down. Ok that's enough for now, they're making fun of us. I close everything and go back to playing the piano. Give them what they want and let's stop this ********. Either we play or everything closes. Goodnight everyone and see you tomorrow

 

[Ivory Norwind]

But were there these migrations?????? Has nothing changed?

 

[mihali]

I thought they were on Amazon and protected by CloudFlare, but I am not certain. Fingers crossed wherever the servers are being migrated to will be able to address the DDOS attacks more forcefully.

I do hope that they complete these server migrations sooner than later. Considering UO has been mostly unplayable the last two days (atleast for Atlantic), I’d welcome just shutting all shards for a day in order to do the migration and just get it over with.


Same. I saw a small handful of giveaways, but not 100’s. I would guess this is unrelated, but that’s just a presumption.


I’d like to… problem is some of these servers have code-sellers in there and I don’t want to be posting up something publicly that is outside of my control. There is a post on Stratics that has some of the servers listed and I am happy for anyone to PM me on Discord and I would gladly invite them to whatever types of servers they’re interested in as a way to expand the community.




I don’t disagree with you that any attacks were likely a cybercrime. The difficulty is that these hackers are more sophisticated than they were even just a few years ago, and can now use various measures to shield the location of their attacks. In example, if the attacks are coming from Brazil or the Ukraine (as has been speculated), how can the U.S. Federal government really stop that? Hopefully the new severs will have better protections – I assume we will find out.


This would end Ultima Online.


I noticed about an hour roll back last night between 11pm and 1am.

I suspect the cybercriminal(s) doing this are feeling pretty secure that they will not be caught due to whatever they are doing, including using fake addresses and VPNS. Our Feds have some of the most sophisticated systems/resourced to uncover these. This being a federal crime, and UO being a business impacted by this, even though it is just a game, the criminals may be up for an unpleasant surprise when the bell rings and there are FBI agents at the door. The feds have more important geese to fry, but after all, this is a def crime. Also whoever is doing it are derelict and reckless enough to repeat these attacks, thus leaving a footprint in time and webspace. I would not be surprised hen they get caught if they are not sophisticated hackers, but just have read "internet for dummies". Maybe they do not know the seriousness or gravity of this activity. I hope they find out soon.

 

[skett]

well now that the fbi doesnt have anything to do because trump won maybe they could look into this ddos person

 

[Stinky Pete]

We alerted the FBI a year ago. So far... nothing. My predictions... more nothing.

 

[OREOGL]

well now that the fbi doesnt have anything to do because trump won maybe they could look into this ddos person

Pretty sure that’s not how that works…

 

[skett]

 

[OREOGL]

 

[Ivory Norwind]

Today I connected twice. With my time, (Italian) at 4pm and now, which is 6.26pm. Both times all servers were there. There is nothing written on the post. Has the problem been fixed or is it just a coincidence that it found all the servers? Can we know something more specific, please? Thank you!

 

[skett]

so far so good we will see

 

[Ivory Norwind]

so far so good we will see

However, I noticed greater fluidity compared to usual. On Atlantic. Let's hope so!

 

[Stinky Pete]

He'll be back.