Recent Downtime [Massive DDOS]

[Semperosa 12]

Cover the forum in ads, I mean put the damn things all over the place. Those of us with ads enabled can sacrifice a bit.

[Ryn Chirr 224]

WARNING: DO NOT CLICK THE SPOILER IF YOU DO NOT LIKE SAMUEL L JACKSON OR CUSSING...

[Garret Baretta (preston19) 29]

WARNING: DO NOT CLICK THE SPOILER IF YOU DO NOT LIKE SAMUEL L JACKSON OR CUSSING...

Alright. SO how about we find the ddosers sever and take them down. By the way, I volunteer as help!

[mmat 7460]

Alright. SO how about we find the ddosers sever and take them down. By the way, I volunteer as help!

It's not nearly as simple as that, they're using various proxies (the nature of which I am not an expert of) to disguise their IP address and their identity with it.

[Garret Baretta (preston19) 29]

It's not nearly as simple as that, they're using various proxies (the nature of which I am not an expert of) to disguise their IP address and their identity with it.

Alright... Makes me sad that we can't get revenge on the people who ruin our role play.

[Cyndikate 2303]

It's not nearly as simple as that, they're using various proxies (the nature of which I am not an expert of) to disguise their IP address and their identity with it.

Avalier knows who did it.

[Nefarious Aus Shitpost 891]

Just block all IPs from every country except US, Canada, Europe, and the Oceanic server.

Europe isn't a country... and plus a lot of DDoS'ing (including several targeted at us in the past) comes from botnets based in Ukraine. Unfortunately, DDoS'ing is capable to just about anyone with half a brain, hell my older brother back during his RuneScape clan days operated a few botnets for his clan to take down other clans forums and teamspeak's. This isn't something we just just ignore.

Also, no Black Lotus. Pedophiles are bad, mmmkay?

[Space 2335]

1. DDoSing them is just... Stupid. You don't fight fire with fire. And DDoSing is illegal, people HAVE went to jail for hacking. Recently, some 16 or 17 year old kid who hacked youtubers when to jail, and probably is going to be tried a adult.

2. We raised 400.73 bucks. GG

[Rissing 199]

surely this activity is illegal is there no legal route we can take?

There are many things illegal, yet they do happen.

Unfortunately, people tend to launch DDoS attacks from countries (Ukraine) where such activity is not illegal, thus there is no legal route we can take. Once I get my paycheck from work, I will donate.

It is legal in some countries, indeed. A nice suggestion would be - cough - contacting or getting help, which is in some countries legal. There are many people who can offer you these services. And they aren't hard to be found at all, look into it Vaq.

( I even know some of them, well )

Ignore the attacks. Donate on a casual level as we have all along. Let them blow all of their daddy's precious money on DDOS attacks. When the server goes down, stimulate role-play and discussion on the forums, write lore, improve the Wiki. Get out and get some fresh air. Show them that we will enjoy ourselves regardless. Show them that their attacks mean nothing to us. Put them in their place like the dog they are and show them that we will carry on without them.

Make 3:00 PM onward be the most miserable hours they will ever face, investing so much of their time, energy and money towards a lonely and pitiful act that will be met with nothing but the laughter, comradery and indifference of the very community they despise.

If we negotiate, they win. If we exhaust our funds, they win. If we become divided in our allegiances and blinded in our perception of the matter at hand, they win. We've maintained hundreds of supporters for a year now and they're all alone. Let's just do what we do. Disregard them and work around it. $200-$4,000 a month? No. $50,000? No. Too rich for my blood. We don't negotiate with terrorists. Endure it until they peter out.

I'm retired and have too little at stake here to make a truly sound and unbiased judgment, but there's my rant.

P.S. If that doesn't work, I have a wealthy uncle in Uganda that just passed away, leaving me his estate. I'll see what I can do.

Sorry,

But infact: If I would like to do such a thing I would not need more then one single email. To be honest, I would only need my own email. The things that can be used for this are often called Bullets or BulletShells, they are simple injections which some people can shoot into your computer, to say it the easy way.

What that means is, even you can have such a program on your computer now, will you notice something of it ? No.

What are the good points for the DDoS'ers, simple. They don't need a budget to do this.

These "BulletShells / Bullets " can be found easily on google and they are free, most of the time.

So let's put it in an other vision, it could be your own computer that is helping the DDoS'ers.

So run a virusscan, if you wouldn't mind.

Well if he hosts it himself, get a switch put in with adequate firewalls, and anti-ddos scripts (I doubt this is a good hacker, but more of a kiddy-scripter)..

You can't know which qualities this person has. It can be a good one or a bad one. Even a Skitler that is simply using one program and gets paid for it by the real hacker.

Anti-DDoS scripts can help, indeed.

Are they your best option, in my own oppinion and from my own experience: No.

Just block all IPs from every country except US, Canada, Europe, and the Oceanic server.

Please refere to the place where I told how your own computers can be infected.

Alright. SO how about we find the ddosers sever and take them down. By the way, I volunteer as help!

I myself, found this rather a bright idea. ^^

It's true, it isn't hard ot pull a DDoS'er down once you found their server.

It is hard to find them.

But I don't think that they would use more than 7 shadows as that would greatly decrease their functionality and efficienty.

Now what could be done is, but it takes a lot of time ( I know out of my own experience ).

Counter DDoS'ing is a great risk.

You will have to use a secondary server as you really don't want to have them use a secondary one while you are trying to DDoS them.

They will fire at you with two of them.

Instantly pulling you down and keeping you down.

( It's a risk you could take. )

( Or it's a risk you can let be taken. )

1. DDoSing them is just... Stupid. You don't fight fire with fire. And DDoSing is illegal, people HAVE went to jail for hacking. Recently, some 16 or 17 year old kid who hacked youtubers when to jail, and probably is going to be tried a adult.

2. We raised 400.73 bucks. GG

DDoS'ing is illegal, sometimes.

You also go to jail for stealing candy.

If he was caught then he wasn't good enough in what he did.

It isn't stupid, with saying that you more or less call my life stupid..

I say we get anonymous.

Too many people speak about anonymous.

There have been much much greater breaches done by many others.

Examples: GHT and DHA

Anonymous is merely a beginner compared to these people.

( And yes, I do know how good these people are as I speak to them weekly. )

Can't we trace the IP and find out who it is, and post the guys personal info to public, there has got to be one person who will go to his house to kick his ass...

Please, once again.

Refere to where I explain that your own computers can be infected.

EDIT: As you have said yourself, Availer.

It happens on a regular basis.

Which means that it has been programmed and automatised.

Which means that it could have been fully thrown into a program and be distributed among many countries.

Which means that there would be a general link as I don't think that everyone here has gotten "oh a mail ", hehe.

Which means that it is not unlikely that your server, Vaq.

Has already been hacked since a longer time ago.

In fact it is not hard to do so.

As at the first times people don't think all too bad.

But if one would have injected a BulletShell that would mean that he could also distrubute through tunneling.

Of course you could of noticed this.

But you also sleep, just like me.

Now where the funny thing of this all comes is that it may even be so that you haven't protected your server against itself.

[aron. 427]

There are many things illegal, yet they do happen.

It is legal in some countries, indeed. A nice suggestion would be - cough - contacting or getting help, which is in some countries legal. There are many people who can offer you these services. And they aren't hard to be found at all, look into it Vaq.

( I even know some of them, well )

Sorry,

But infact: If I would like to do such a thing I would not need more then one single email. To be honest, I would only need my own email. The things that can be used for this are often called Bullets or BulletShells, they are simple injections which some people can shoot into your computer, to say it the easy way.

What that means is, even you can have such a program on your computer now, will you notice something of it ? No.

What are the good points for the DDoS'ers, simple. They don't need a budget to do this.

These "BulletShells / Bullets " can be found easily on google and they are free, most of the time.

So let's put it in an other vision, it could be your own computer that is helping the DDoS'ers.

So run a virusscan, if you wouldn't mind.

You can't know which qualities this person has. It can be a good one or a bad one. Even a Skitler that is simply using one program and gets paid for it by the real hacker.

Anti-DDoS scripts can help, indeed.

Are they your best option, in my own oppinion and from my own experience: No.

Please refere to the place where I told how your own computers can be infected.

I myself, found this rather a bright idea. ^^

It's true, it isn't hard ot pull a DDoS'er down once you found their server.

It is hard to find them.

But I don't think that they would use more than 7 shadows as that would greatly decrease their functionality and efficienty.

Now what could be done is, but it takes a lot of time ( I know out of my own experience ).

Counter DDoS'ing is a great risk.

You will have to use a secondary server as you really don't want to have them use a secondary one while you are trying to DDoS them.

They will fire at you with two of them.

Instantly pulling you down and keeping you down.

( It's a risk you could take. )

( Or it's a risk you can let be taken. )

DDoS'ing is illegal, sometimes.

You also go to jail for stealing candy.

If he was caught then he wasn't good enough in what he did.

It isn't stupid, with saying that you more or less call my life stupid..

Too many people speak about anonymous.

There have been much much greater breaches done by many others.

Examples: GHT and DHA

Anonymous is merely a beginner compared to these people.

( And yes, I do know how good these people are as I speak to them weekly. )

Please, once again.

Refere to where I explain that your own computers can be infected.

EDIT: As you have said yourself, Availer.

It happens on a regular basis.

Which means that it has been programmed and automatised.

Which means that it could have been fully thrown into a program and be distributed among many countries.

Which means that there would be a general link as I don't think that everyone here has gotten "oh a mail ", hehe.

Which means that it is not unlikely that your server, Vaq.

Has already been hacked since a longer time ago.

In fact it is not hard to do so.

As at the first times people don't think all too bad.

But if one would have injected a BulletShell that would mean that he could also distrubute through tunneling.

Of course you could of noticed this.

But you also sleep, just like me.

Now where the funny thing of this all comes is that it may even be so that you haven't protected your server against itself.

TLDR

[xDK 1205]

Are you sure it's a DDoS attack, and not a DoS attack?

[Moiruh(BlazieGal) 6]

I suggest we contact Mojang.

[Uboob ~Taron Geminine~ 14]

Any update on the current happenings?

[Song Druid 1486]

Thanks for your suggestion. But Vaquxine is a very very capable software engineer.

What? He's all we've got-that doesn't make him capable. Sorry Vaq.

Also, I hope there are plans to make sure the admins get server access and command and can implement things like this in the future- constant DDoS will kill the server.

[Vrahn 5]

It's a little disturbing that we've been down for two days straight with no additional information. Again really anything helps but the longer we go with little communication the bigger this issue will become for us.

As a temporary measure which will work to get us off the ground again and running will be to blacklist ALL inbound connections except a database of whitelisted IPs collected from member's accounts on this forum and then via an application page on the forums. This is not an ideal situation, and it means some manual work and some people being locked out until they get all their IPs whitelisted but as a guy who works in the IT industry and has dealt with this stuff before it will get us at least back on our feet until we can get a more permanent solution.

There are also a variety of other options when it comes to combating a DDOS, none of which are perfect but they are at least steps we can use to mitigate our downtime and get back up.

Also to address a few points:

1) You will not be able to find the attacker, odds are any machines he owns are not actively engaging in the attack, instead it's just a big net of comprimised computers that have been told to hit up this server.

2) IP Addresses do not lead to home addresses. -_-