Author Topic: DDoS attacks on different servers? (Read 14659 times)

Figure · August 31, 2017, 01:38:47 PM

inb4 drydess did it the whole time!!1!

Ad Bot · Advertisement

C-Zech Chrome Ind. · August 31, 2017, 02:43:06 PM

I believe a person named JizzCake (BL_ID 37674) is responsible. He crashed Crown's server and, shortly after, joined Pecon's server and crashed that as well.

http://imgur.com/a/uiVaQ for proof.

Cadlage · August 31, 2017, 02:48:01 PM

Quote from: C-Zech Chrome Ind. on August 31, 2017, 02:43:06 PM

I believe a person named JizzCake (BL_ID 37674) is responsible. He crashed Crown's server and, shortly after, joined Pecon's server and crashed that as well.

http://imgur.com/a/uiVaQ for proof.

that isn't proof. jizzcake is known to troll and crashed a singular server using events. You don't need to join the server in order to ddos it either.

Drydess · August 31, 2017, 02:54:13 PM

Quote from: Figure on August 31, 2017, 01:38:47 PM

inb4 drydess did it the whole time!!1!

haha yes it was me all along...it was a plot to bring power to my own servers!

CRITAWAKETS · August 31, 2017, 03:10:42 PM

Quote from: C-Zech Chrome Ind. on August 31, 2017, 02:43:06 PM

I believe a person named JizzCake (BL_ID 37674) is responsible. He crashed Crown's server and, shortly after, joined Pecon's server and crashed that as well.

http://imgur.com/a/uiVaQ for proof.

Heres an image too of evidence he crashes servers himself anyway even if hes not ddosing.

PhantOS · August 31, 2017, 03:12:16 PM

on the long list of intelligent things to do with your server, banning jizzcake permanently is one of the items

Mr Queeba · August 31, 2017, 03:43:12 PM

i think the next step here is to collect ip addresses from affected servers

Refticus · August 31, 2017, 04:52:26 PM

Quote from: Mr Queeba on August 31, 2017, 03:43:12 PM

i think the next step here is to collect ip addresses from affected servers

so you want us to publicly post the ip address of a server that has been ddosed?
that'll just expose it to more ddos attacks, not prevent it.

the ddos attack is from approximately 240-260 individual random ip addresses (likely done through a botnet), even if you are able to get all of those ip addresses, blocking them would only work temporarily.

you're making no sense here queeba.

JoeysWorldTourLIFE · August 31, 2017, 06:13:41 PM

Recent DDOS attacks on some popular servers, took notes here:

Code: [Select]

6:52, Cxero's server goes back up (or at least I was told it was back up then).  Claimed that noone was moving and he was able to move around, until everyone seemed to disconnect.  Claimed that it was his internet, and that it periodically goes down.
6:57, server goes down a second time, see console video
6:58, all servers seem to have ping except cxero'
6:59 PM, Miura's Top Down RP goes down 
7:00PM, TheHellSpy's server seems to be down, not sure if thats scheduled
7:02 PM, all servers seem to be functioning normally, except for Miura's server which went down earlier
7:05 PM, attacks seemed to have stopped and all servers seem to be functioning.  interesting message in the console

It seems that almost every server but tezuni's was affected. Interesting.

I also recorded my console while I refreshed the server lists some and joined some downed servers if this is any help (Yes i apologize for the stuffty music, it wasn't a priority when I was doing this). I don't even know if this is any help to the cause, but I figured, i mine as well record something semi-useful.

vid here: https://www.youtube.com/watch?v=GJPBEhxUPf4&feature=youtu.be

Badspot · August 31, 2017, 08:02:23 PM

Quick roundup of the usual suspects:

Users with past DDoS threats/activity and new accounts
Germestar:
219175 Germestar
219572 Blockhead219573

sell0ut / chloroxsquad:
35419 Laughing Jack
51363 Practoid

Moon Wolf:
219733 Jadedacat1976

Problem users with new accounts
bedpost / someguyfromtennesee:
53270 Bedpost

Freedom Bringer / The Jd super? Recently Self Delete spammed blhack https://forum.blockland.us/index.php?topic=312578.0

Meth · August 31, 2017, 08:09:26 PM

i remember when freedom bringer was actually ok
what's gotten into u buddy :(

Drydess · August 31, 2017, 08:09:40 PM

Quote from: Meth on August 31, 2017, 08:09:26 PM

i remember when freedom bringer was actually ok
what's gotten into u buddy :(

^^

torin� · August 31, 2017, 08:09:59 PM

Quote from: Meth on August 31, 2017, 08:09:26 PM

i remember when freedom bringer was actually ok
what's gotten into u buddy :(

hes going through that age

Frankie� · August 31, 2017, 08:13:53 PM

Quote from: Refticus on August 31, 2017, 04:52:26 PM

so you want us to publicly post the ip address of a server that has been ddosed?

http://master2.blockland.us/
its already public information dude

JoeysWorldTourLIFE · September 01, 2017, 07:37:42 AM

Some more information that I found while doing my investigation yesterday. I was playing Caxos' Military RP and it got really popular. He said that it was hosted on BLG, and he got this message when it started to happen:

Now, I am not familiar with BLG hosting, so this may even be a normal message that everyone gets, I am not sure.

After this he said he was being pinged by various IP addresses, the server was lagging horribly, but it never actually crashed completely. He even said that his internet was down for a solid minute. This might be normal considering his server was BLG dedicated, and that could explain why it didn't go down completely. We were still able to talk to each other and while everyone else on the server lagged out, Caxos and I were still connected.

Maybe they are getting the IP's from Glass hosting, through an exploit?

Also, I forgot to mention that the attacks only lasted for a definite amount of time before they stopped completely, this was evident when I did my investigation yesterday and while the notes say it lasted for almost 12 minutes, they were functioning normally again after 10. Also, Caxos said that his internet went down for a solid minute. Could be the program they are using?