According to one of my players, I was told that once someone named "Smash" left, he began to DDoS me. I opened my console to found this to be true.
Some of the IPS:
42.117.7.4
59.28.163.177
61.76.167.81
80.80.162.84
120.24.66.99
121.146.40.188
210.51.9.146
210.91.217.82
222.116.182.92
One or two of these may have been just normal players, but most of them were definitely his.
Any information regarding these IPs, or ways to protect against DDoSing in the future would be well appreciated.