DDOS Attack

General discussion of the port and Doom-related chat.
Post Reply
User avatar
Vegeta
 
Posts: 45
Joined: Tue Jun 05, 2012 3:04 pm
Location: Argentina

DDOS Attack

#1

Post by Vegeta » Sun May 21, 2017 9:54 pm

Hi, sorry if this is the wrong sub forum.

On last days a friend of mine was getting ddos attacks on his servers. I read that this was also happening to this forums and to some competition servers.

If it helps here is the log and the last ip of the guy that attacked my friend's server.

https://www.dropbox.com/s/a52y4qf0ujkep4x/ddos.txt?dl=0

Or
[spoiler]

Code: Select all

[00:50] CHAT [00:50] (Mercs) General Mike: ddos
[00:50] addban: 172.94.61.90 added to list. It expires on 05/21/2017 01:00.
[00:50] (Mercs) General Mike was kicked from the server! Reason: IP is now banned - Vote kick, 4 to 0 (we only accept mike tyson).
[00:50] client (Mercs) General Mike disconnected.
[00:50] Launcher challenge from: 68.39.117.28:12999
[00:50] Launcher challenge from: 187.207.90.15:57687
[00:50] CHAT [00:50] <uF>bestpt: da
[00:50] CHAT [00:50] <ARG>Vegeta (PT): jaja
[00:50] Launcher challenge from: 70.210.144.54:10407
[00:50] <ARG>drskabio was splattered by <arg>brasuka!'s super shotgun.
[00:50] Launcher challenge from: 98.116.68.141:61185
[00:50] CHAT [00:50] <uF>bestpt: dijo ddos
[00:50] CHAT [00:50] <uF>bestpt: eso de mierdo
[00:50] <uF>bestpt was splattered by <ARG>ZomBieMaD's super shotgun.
[00:50] CHAT [00:50] <ARG>ZomBieMaD: q
[00:50] CHAT [00:50] <ARG>drskabio: esta doseando banealo :)
[00:51] Warning: Can't find masterhostname master.zandronum.com:15300! Either correct masterhostname or set sv_updatemaster to false.
[00:51] CHAT [00:51] <arg>brasuka!: e.e
[00:51] <ARG>Vegeta (PT) timed out.
[00:51] Warning: Can't find masterhostname master.zandronum.com:15300! Either correct masterhostname or set sv_updatemaster to false.
[00:51] Unknown challenge (97) from 213.108.120.2:53. Ignoring IP for 10 seconds.
[00:51] <arg>brasuka! timed out.
[00:52] Launcher challenge from: 191.84.95.42:51249
[00:52] Warning: Can't find masterhostname master.zandronum.com:15300! Either correct masterhostname or set sv_updatemaster to false.
[00:52] Launcher challenge from: 201.215.218.223:12999
[00:52] Launcher challenge from: 186.135.4.62:12999
[00:52] Warning: Can't find masterhostname master.zandronum.com:15300! Either correct masterhostname or set sv_updatemaster to false.
[00:52] <ARG>drskabio timed out.
[00:52] <uF>bestpt timed out.
[/spoiler]

User avatar
Empyre
Zandrone
Posts: 1316
Joined: Sun Jul 08, 2012 6:41 am
Location: Garland, TX, USA

Re: DDOS Attack

#2

Post by Empyre » Mon May 22, 2017 12:49 am

DDOS is a crime. Contact the authorities in the attackers home country. He can spend his time in jail contemplating whether it was really worth it.
"For the world is hollow, and I have touched the sky."

User avatar
Ru5tK1ng
Frequent Poster Miles card holder
Posts: 794
Joined: Fri Jun 01, 2012 9:04 pm

Re: DDOS Attack

#3

Post by Ru5tK1ng » Mon May 22, 2017 2:59 am

I'm not sure how it is in South America, but up here our hosts are shit at doing anything to help when you get attacked. The only exception are businesses and companies and even then they still can get screwed by a DDOS. Your friend should just get his ip changed and not host publicly. It's really the only way if he's going to use his own computer to avoid getting attacked.

User avatar
Combinebobnt
Retired Staff / Community Team Member
Posts: 1893
Joined: Mon Jun 04, 2012 3:37 am
Location: Erth
Contact:

Re: DDOS Attack

#4

Post by Combinebobnt » Mon May 22, 2017 3:41 am

dunno why my post was split as general mike goes on #zandronum quite often talking about hosting the 2 boring rgas and brutal doom etc., heres proof:
2016-11-04-Combinebobnt-irc.zandronum.com-#zandronum.log
14:54 -> GeneralMike has joined #zandronum
14:54 <GeneralMike> theres a problem with complex doom

2017-04-16-Combinebobnt-irc.zandronum.com-#zandronum.log
17:36 -> GeneralMike has joined #zandronum
17:50 <GeneralMike> what is the rga2 sv xp multiply command in the rcon console?
17:50 <GeneralMike> I forget what it is exactly.


quite convenient that vegeta's log starts at him saying the word ddos... Let's see what happened before those lines to clear everything up perhaps? If you guys were messing with him or something and this is the payback, then the motive is obvious.

User avatar
nax
Lead Administrator
Posts: 116
Joined: Fri Aug 30, 2013 4:06 am

Re: DDOS Attack

#5

Post by nax » Sun Jun 11, 2017 12:30 am

the logs aren't clear enough on what's happening here outside of the ddos part. it could be that GeneralMike started feeling serious lag and mentioned "DDOS" because of it.

please send the rest of the logs to one of the master server admins though instead of publishing something with IP's on a forum thread.

Post Reply