How come 'DDOS' can affect only one version (1 vs 2) of the game, across all servers?

I urge people that have both games installed to jump to the other one when they see ping/connection issues.

I can start having issue with one game, jump to the other one (same server) and have a flat sub 50ms stable connection. Jump back and spikes come back. yet on the other client it will be very stable on all severs.

These ping spikes for me happen on all servers on that version of the game, even ones across the ocean, just matter of severity. So till today I was convinced issue is with my ISP. This happens both ways for me, issues with 1 -> 2 is fine, issues with 2 -> 1 is fine.

Ddos is a standard excuse in gaming

cause it is not DDOS .....

Or perhaps they are hosted on different servers?

"

AintCare#6513 wrote:

I can start having issue with one game, jump to the other one (same server) and have a flat sub 50ms stable connection. Jump back and spikes come back. yet on the other client it will be very stable on all severs.

Please elaborate on what you mean by “same server”.

Do you just mean “server in the same country”, or? Remember that each particular gateway location can have dozens or even hundreds of individual servers in use at any one time.

"

Sarno#0493 wrote:

Please elaborate on what you mean by “same server”.

Do you just mean “server in the same country”, or? Remember that each particular gateway location can have dozens or even hundreds of individual servers in use at any one time.

This is the type of thread that happens when someone has absolutely no base knowledge to draw upon...yet assumes they know what they are talking about just "because". And thinks they found a "gotcha" moment, raising their "street cred" as it were.

You can read the experiences of players from different countries and some nerds sharing their data of pinging GGG servers. You can read, that Washington DC server is DC'ing US players since europeans are using that server as solution.
HC SSF players have not the problem, why? Is the DDOS attacker a SSF HC player? The disconnections are mostly on SC servers. Maybe because GGG is sharing this servers with the new console players?!

"

DiabloPLUS#0395 wrote:

You can read the experiences of players from different countries and some nerds sharing their data of pinging GGG servers. You can read, that Washington DC server is DC'ing US players since europeans are using that server as solution.
HC SSF players have not the problem, why? Is the DDOS attacker a SSF HC player? The disconnections are mostly on SC servers. Maybe because GGG is sharing this servers with the new console players?!

lol....you can read whatever you want from wherever you want to...doesn't make it true or even remotely accurate. Again, base knowledge: you need to know what you are reading to even begin to assess whether its accurate or just random idiots online posting any old thing that pops into their heads. And then "claiming" they did research.

SC disconnects more because 90% or more of the entire playerbase is on SC. Even with or without a DDoS attack, SC is going to be way more affected in ALL scenarios. You are also likely going to get a crap ton more data and complaining, because.....magnitudes more players. Additionally, I haven't DC'd a single time since launch playing Washington DC as a local US player. Same with the two friends I regularly play with. That is sort of meaningless since its just my own personal experience, but it does cast an immediate doubt over what you wrote or "read". Sharing with console players would have absolutely no effect on the server load, because the amount of console players being added is practically negligible in the total playerbase.

"

Sarno#0493 wrote:

"

AintCare#6513 wrote:

I can start having issue with one game, jump to the other one (same server) and have a flat sub 50ms stable connection. Jump back and spikes come back. yet on the other client it will be very stable on all severs.

Please elaborate on what you mean by “same server”.

Do you just mean “server in the same country”, or? Remember that each particular gateway location can have dozens or even hundreds of individual servers in use at any one time.

yes I mean same gateway. I get that there are tons of individual servers there, but what I'm trying to understand is the part that w/e gateway i choose I get ping spikes, and overall weird ping behavior only for that game version. Like I mentioned I always assumed its my ISP because it was happening on every gateway, till i switched games and to my surprise I got flat stable connection.

"

AintCare#6513 wrote:

yes I mean same gateway. I get that there are tons of individual servers there, but what I'm trying to understand is the part that w/e gateway i choose I get ping spikes, and overall weird ping behavior only for that game version. Like I mentioned I always assumed its my ISP because it was happening on every gateway, till i switched games and to my surprise I got flat stable connection.

It's a fair question!

So, just as we have physical addresses for buildings in the real-world, we have IP addresses for infrastructure in the digital world. If you ask your web browser to take you to google.com, that domain name will be converted into, say, 216.58.216.164.

I would assume there is a certain degree of sophistication going on, and that the perpetrators - who I assume are just out for a ransom, but who knows - are leveraging any knowledge they might have about the game client and its servers to defeat (or at least mitigate) any potential defences against DDoS attacks that GGG and partners of theirs would be putting into place.

In computer networking, a ping is essentially a request for a response - you can think of it as asking a server "are you online?", "hi r u there", or whatever. Often when people think of DDoS attacks, they assume large numbers of different devices sending mass pings to the target in a bid to overwhelm them. There's nothing to say that this is what's actually happening, however - using tools such as Wireshark, it is trivial to monitor the communication happening between software on your device and remote resources. Thus, the DDoS attack could instead be repeating previously sent legitimate packets - perhaps advising the instance server that you wish to portal back to your hideout, or that you are a sending a message in guild chat. If someone is launching a DoS or DDoS attack against you by spamming pings, there are companies such as Cloudflare who can intercept those requests and essentially stifle them. Those third companies are going to be much more reticent to intervene in cases of apparent game traffic, however - for fear of causing as much (or more!) damage to GGG's services as those launching the attacks. There's no easy 'good options' for them.

For Steam users, %ProgramFiles(x86)%\Steam\steamapps\common\Path of Exile\logs is where the Client.txt log file will be for Path of Exile. You can copy & paste that address right into File Explorer's address bar - it should work regardless of e.g. which drive letter you're using - and Notepad will be perfectly capable of opening the file for you, in the event Windows asks which program to use - which I wouldn't expect it to feel the need to. For standalone / Epic Games Store client users, the location will be different; but I'd expect it to be a subdirectory of where the game itself is installed.

In Path of Exile's log file, I see the instance server I most recently connected to has the IP address 88.211.251.204. For PoE II Early Access, the IP address was instead 88.211.250.52. The servers might be in the same country, the same city - hell, even the same data centre - but that doesn't mean they're the same physical devices. I'd be shocked if the same servers were running both PoE 1 and PoE 2 at the same time; just as I'd expect any update, authentication, and web servers to be distinct devices. So I guess the tl;dr is "some servers getting DDOS'd; other servers not getting DDoS'd." I realise that might not be an enormously satisfying answer, but it's all I've got. :)