Servers Under Attack!!

[Moo]

Both TTT and ZS are being ddos'd by a russian botnet and coolz is currently gathering the ip address(s) of the current attackers and it will posted shortly in this thread for anyone to use

[coolzeldad]

Thanks for posting this for me while I gathered IP addresses.

After I figured out the attack type, I was able to start analyzing the connections - who was doing it.

It does appear to be a russian-based botnet.

There can be up to millions of IP's and I am limited in my power to stop these connections.

I made sure on about 133 of these and am stopping as it seems quite useless.

I'll resume inbound connections to the zs and ttt boxes so you will be able to connect whenever the attack stops.

Hopefully there is a shared understanding of the events at the moment.
-coolz

92.243.181.222
220.245.199.245
95.30.60.21
178.176.69.54
92.242.121.222
81.30.189.70
94.179.26.70
93.81.88.114
75.65.42.230
83.239.235.12
94.181.149.208
2.60.58.242
188.114.9.61
110.137.30.192
85.198.171.222
89.250.3.246
188.116.174.109
203.152.171.78
109.237.149.24
178.187.39.48
95.170.187.66
2.60.105.68
178.76.216.20
91.211.57.30
178.47.0.201
189.68.163.192
64.203.116.117
82.160.167.4
178.187.186.41
178.120.100.16
178.187.69.196
178.206.190.114
78.25.168.218
92.126.99.72
124.184.178.13
218.147.213.66
193.106.24.98
77.79.152.110
109.184.46.203
109.184.64.97
195.22.140.117
93.72.43.249
94.181.135.115
78.108.79.106
109.195.6.193
64.203.116.117
178.187.225.130
91.122.173.140
95.169.135.195
92.127.176.2
94.79.45.29
93.73.224.195
119.152.84.4
64.203.116.117
188.122.237.73
90.157.105.95
64.203.116.117
95.104.59.162
24.85.39.89
92.113.35.201
94.153.254.6
71.165.12.59
79.105.162.7
210.124.251.206
217.66.16.84
217.199.233.92
64.203.116.117
109.194.191.157
2.60.36.243
95.54.228.179
109.94.1.65
78.139.73.181
89.251.107.5
93.178.115.197
77.45.199.39
125.60.172.179
109.94.1.65
64.203.116.117
92.47.88.93
2.60.67.116
87.253.26.49
109.169.139.155
193.33.233.254
72.199.49.100
178.136.241.22
91.121.222.208
92.248.227.185
84.32.111.137
64.203.116.117
60.180.148.121
178.124.48.166
178.74.96.30
92.126.38.113
89.222.240.144
89.250.152.116
193.43.127.201
178.216.218.171
95.81.217.196
95.57.103.47
178.136.241.22
195.211.188.142
64.203.116.117
94.181.129.27
95.83.31.226
222.123.225.40
94.179.97.43
202.183.185.163
85.192.188.150
178.90.203.154
95.188.22.109
2.60.67.116
178.207.35.162
178.46.207.117
83.142.106.248
125.60.172.179
64.203.116.117
46.50.171.50
81.21.36.226
64.203.116.117
89.178.222.85
95.159.168.167
109.74.175.140
81.18.128.170
92.252.165.196
85.173.66.70
89.185.88.240
64.203.116.117
94.181.18.83
94.125.246.152
81.198.21.125
87.117.185.134
79.117.103.105
94.181.128.46

[ursus]

Both TTT and ZS are being ddos'd by a russian botnet and coolz is currently gathering the ip address(s) of the current attackers and it will posted shortly in this thread for anyone to use

For anyone to use....

Who do we even know that has the knowledge to steal a botnet?

[Shawn]

It does appear to be a russian-based botnet.

There can be up to millions of IP's and I am limited in my power to stop these connections.

Can't you just block all russian IP's?

[ursus]

Can't you just block all russian IP's?

Shawn, imagine this. Think of a TCP/IP or UDP packet as a small book. During a DDoS attack, hundreds of people are all throwing books at us.
Now when you block the IP, you're just telling the server: THESE BOOKS ARE VERY BAD, DON'T READ THEM ITS A WASTE OF TIME

But you're still getting pummeled with books, you see?

If we just block all the IPs attacking us, that doesn't stop the attack. It just means we're ignoring it.

Spoiler (click to show/hide)

I actually have very little idea what I'm talking about, it probably could work anyway

[me4488]

those "hackers" r gonna make me lrn2backtrack and melt ther fuckin motherboard!

[Tomcat]

Time to call ruben

[ursus]

Time to call ruben

i was going to say it, but then i just didnt

[Jman]

those "hackers" r gonna make me lrn2backtrack and melt ther fuckin motherboard!

Please go now.

[Cake Faice]

I think krasher can save us.

[» Magic «]

I think krasher can save us.

prolly

[Myppl9]

so is it situated now? or are they still attackin?

[ursus]

I think krasher can save us.

Yeah, but his botnet is only a few people.

[Pryvisee]

no, Xexxar nids stop dos.

[Hitman]

Nuuuuuuuu!!!111!!

Only myppl8 can save us.  :'(