iBotPeaches Posted August 4, 2010 Report Posted August 4, 2010 It seems that our little attacker is continually spreading more bots and continuing to hit us more and more. I'm constantly tweaking the server trying to figure out a clean way to just eliminate this attack, but am causing various issues here and there. Blame the 12 year old kid that is attacking a modding website. The best way to sum up this guy is by Detox himself. Sorry you don't know how to use tools that do all the work for you, and you get tantrums because you don't know how to edit some values. You can have fun hitting this site you stupid little 11 year old prick ahahaha, it doesn't change the fact that you're a dumbass, a dumbass with some bots that thinks he's smart, because even then, all the work is already done for your fat ass, and you just hit a button to DDoS a site.. DDoSing doesn't mean shit. You don't run shit. You can't even figure out shit that's already figured out. You're a dumbass.. you can remember that.
Rogue Modder Posted August 4, 2010 Report Posted August 4, 2010 http://www.youtube.com/watch?v=W39dvI8XXx4 1
ReDBaRlolz Posted August 4, 2010 Report Posted August 4, 2010 (edited) Lol my No-IP got banned so any bots still attacking you aren't under my control anymore so it's not my problem Also I don't have a botnet anymore. and temporally quit about 2 weeks ago lolz btw I sent the stop command to all of them like 20 mins after the hit which was like ALMOST 2 MONTHS AGO LMFAO and never once have I seen one in http attack mode so either it's someone else, or my bots were beastly. Edited August 5, 2010 by ReDBaRlolz
Lockon Posted August 5, 2010 Report Posted August 5, 2010 Lol my No-IP got banned so any bots still attacking you aren't under my control anymore so it's not my problem Also I don't have a botnet anymore. and temporally quit about 2 weeks ago lolz btw I sent the stop command to all of them like 20 mins after the hit which was like ALMOST 2 MONTHS AGO LMFAO and never once have I seen one in http attack mode so either it's someone else, or my bots were beastly. Retard, Even if you did stop them your still guilty of terrorism. Please learn laws before acting you little retard. -Lockon
iBotPeaches Posted August 5, 2010 Author Report Posted August 5, 2010 Its funny because you've been IP banned since that day. Until a few hours ago when I accidentally reset the logs trying to fix something. So either you've been checking iBotModz non-stop for this moment, or your still attacking with the little army you have left. 1
gruntmods Posted August 5, 2010 Report Posted August 5, 2010 People are n00bs, they don`t even have reasons for doing shit anymore, other then testing out a purchased botnet
iBotPeaches Posted August 5, 2010 Author Report Posted August 5, 2010 lul http://i38.tinypic.com/25rphlj.png look at his youtube page: http://www.youtube.com/user/RtGRanger12
XSChris Posted August 5, 2010 Report Posted August 5, 2010 I'm a noob at web hosting eh. I'll be blocking anyone related to these attacks shortly at the server level and pass it to our upstream provider to block at both locations network level. This DDoS is very ineffective & this is DDoS protected hosting, not all forms and methods of DDoS attacks can be filtered, or filtered properly at that. The systems putting up fine with the attack, whatever little kid is running this attack is just clogging up tubes for no reason. Edit: Jesus christ almost a thousand connections steady.
XSChris Posted August 5, 2010 Report Posted August 5, 2010 Went to store, came back, carefully setup DDoS blocking (If you just go wild on firewall scripts you'll just lock up the networking. 188.72.211.39 # lfd: 5 (sshd) login failures from 188.72.211.39 (DE/Germany/188-72-211-39.local) in the last 300 secs - Wed Aug 4 23:00:14 2010 76.2.158.240 # lfd: (CT) IP 76.2.158.240 (US/United States/nv-76-2-158-240.dhcp.embarqhsd.net) found to have 721 connections - Wed Aug 4 23:40:09 2010 75.167.207.105 # lfd: (CT) IP 75.167.207.105 (US/United States/-) found to have 607 connections - Wed Aug 4 23:40:11 2010 76.99.109.124 # lfd: (CT) IP 76.99.109.124 (US/United States/-) found to have 883 connections - Wed Aug 4 23:40:22 2010 69.233.137.145 # lfd: (CT) IP 69.233.137.145 (US/United States/ppp-69-233-137-145.dsl.irvnca.pacbell.net) found to have 807 connections - Wed Aug 4 23:40:33 2010 68.8.207.173 # lfd: (CT) IP 68.8.207.173 (US/United States/ip68-8-207-173.sd.sd.cox.net) found to have 668 connections - Wed Aug 4 23:40:51 2010 71.75.167.46 # lfd: (CT) IP 71.75.167.46 (US/United States/-) found to have 922 connections - Wed Aug 4 23:41:02 2010 69.231.72.52 # lfd: (CT) IP 69.231.72.52 (US/United States/adsl-69-231-72-52.dsl.irvnca.pacbell.net) found to have 264 connections - Wed Aug 4 23:41:05 2010 71.23.181.126 # lfd: (CT) IP 71.23.181.126 (US/United States/71-23-181-126.chi.clearwire-wmx.net) found to have 853 connections - Wed Aug 4 23:41:32 2010 24.5.24.171 # lfd: (CT) IP 24.5.24.171 (US/United States/-) found to have 511 connections - Wed Aug 4 23:41:49 2010 24.26.241.76 # lfd: (CT) IP 24.26.241.76 (US/United States/-) found to have 1034 connections - Wed Aug 4 23:42:19 2010 99.23.162.32 # lfd: (CT) IP 99.23.162.32 (US/United States/-) found to have 228 connections - Thu Aug 5 00:22:50 2010 70.76.98.58 # lfd: (CT) IP 70.76.98.58 (CA/Canada/s0106001346cd70ad.tb.shawcable.net) found to have 852 connections - Thu Aug 5 00:22:50 2010 184.56.224.10 # lfd: (CT) IP 184.56.224.10 (-/-/cpe-184-56-224-10.neo.res.rr.com) found to have 800 connections - Thu Aug 5 00:22:55 2010 173.26.31.74 # lfd: (CT) IP 173.26.31.74 (US/United States/173-26-31-74.client.mchsi.com) found to have 1120 connections - Thu Aug 5 00:22:56 2010 216.70.3.154 # lfd: (CT) IP 216.70.3.154 (US/United States/-) found to have 1028 connections - Thu Aug 5 00:22:57 2010 71.9.192.253 # lfd: (CT) IP 71.9.192.253 (US/United States/-) found to have 114 connections - Thu Aug 5 00:22:58 2010 58.7.155.161 # lfd: (CT) IP 58.7.155.161 (AU/Australia/dsl-58-7-155-161.wa.westnet.com.au) found to have 737 connections - Thu Aug 5 00:23:00 2010 24.205.242.119 # lfd: (CT) IP 24.205.242.119 (US/United States/24-205-242-119.dhcp.gvrb.ca.charter.com) found to have 831 connections - Thu Aug 5 00:23:00 2010 97.118.228.33 # lfd: (CT) IP 97.118.228.33 (US/United States/97-118-228-33.hlrn.qwest.net) found to have 910 connections - Thu Aug 5 00:23:01 2010 80.217.207.140 # lfd: (CT) IP 80.217.207.140 (SE/Sweden/c80-217-207-140.bredband.comhem.se) found to have 1086 connections - Thu Aug 5 00:23:02 2010 74.65.91.230 # lfd: (CT) IP 74.65.91.230 (US/United States/cpe-74-65-91-230.stny.res.rr.com) found to have 1040 connections - Thu Aug 5 00:23:03 2010 86.24.22.118 # lfd: (CT) IP 86.24.22.118 (GB/United Kingdom/client-86-24-22-118.midd.adsl.tesco.net) found to have 898 connections - Thu Aug 5 00:23:04 2010 98.171.179.149 # lfd: (CT) IP 98.171.179.149 (US/United States/ip98-171-179-149.sb.sd.cox.net) found to have 792 connections - Thu Aug 5 00:23:05 2010 71.75.101.165 # lfd: (CT) IP 71.75.101.165 (US/United States/cpe-071-075-101-165.carolina.res.rr.com) found to have 864 connections - Thu Aug 5 00:23:08 2010 65.185.170.92 # lfd: (CT) IP 65.185.170.92 (US/United States/cpe-65-185-170-92.neo.res.rr.com) found to have 861 connections - Thu Aug 5 00:23:09 2010 220.236.249.143 # lfd: (CT) IP 220.236.249.143 (AU/Australia/d220-236-249-143.dsl.nsw.optusnet.com.au) found to have 721 connections - Thu Aug 5 00:23:10 2010 175.144.244.115 # lfd: (CT) IP 175.144.244.115 (-/-/-) found to have 926 connections - Thu Aug 5 00:23:11 2010 173.19.110.173 # lfd: (CT) IP 173.19.110.173 (US/United States/173-19-110-173.client.mchsi.com) found to have 843 connections - Thu Aug 5 00:23:12 2010 24.14.27.96 # lfd: (CT) IP 24.14.27.96 (US/United States/c-24-14-27-96.hsd1.il.comcast.net) found to have 1349 connections - Thu Aug 5 00:23:13 2010 24.33.147.31 # lfd: (CT) IP 24.33.147.31 (US/United States/cpe-24-33-147-31.woh.res.rr.com) found to have 1015 connections - Thu Aug 5 00:23:15 2010 189.189.180.249 # lfd: (CT) IP 189.189.180.249 (MX/Mexico/dsl-189-189-180-249-dyn.prod-infinitum.com.mx) found to have 590 connections - Thu Aug 5 00:23:16 2010 68.99.103.6 # lfd: (CT) IP 68.99.103.6 (US/United States/ip68-99-103-6.hr.hr.cox.net) found to have 1112 connections - Thu Aug 5 00:23:17 2010 70.235.76.50 # lfd: (CT) IP 70.235.76.50 (US/United States/adsl-70-235-76-50.dsl.mrdnct.sbcglobal.net) found to have 670 connections - Thu Aug 5 00:23:18 2010 98.223.218.65 # lfd: (CT) IP 98.223.218.65 (US/United States/c-98-223-218-65.hsd1.in.comcast.net) found to have 1554 connections - Thu Aug 5 00:23:19 2010 66.36.144.193 # lfd: (CT) IP 66.36.144.193 (CA/Canada/dsl-144-193.aei.ca) found to have 873 connections - Thu Aug 5 00:23:20 2010 71.246.251.5 # lfd: (CT) IP 71.246.251.5 (US/United States/pool-71-246-251-5.washdc.fios.verizon.net) found to have 1749 connections - Thu Aug 5 00:23:21 2010 24.5.118.3 # lfd: (CT) IP 24.5.118.3 (US/United States/c-24-5-118-3.hsd1.ca.comcast.net) found to have 143 connections - Thu Aug 5 00:23:47 2010 66.249.71.227 # lfd: (CT) IP 66.249.71.227 (US/United States/crawl-66-249-71-227.googlebot.com) found to have 55 connections - Thu Aug 5 00:29:22 2010 This is why I don't run tight blocks if you notice the innocent google bot but I set it to 100 originally and it wasn't picking up ANY, will try 75 instead of 50 for a few days. Anybody else with a sharp eye notice their mostly on Comcast? Yall comcast users has viruz's yo - anyways I'll let this cute picture do the talking, who's the DDoS'er? As a host for over 4 years your botnet fails, that french asshole we had a few years ago did a much better job, then suffered with his main system root'd and the botnet stolen, redirected to his residential ISP.
gruntmods Posted August 5, 2010 Report Posted August 5, 2010 http://www.ibotmodz.net/forum/uploads/monthly_08_2010/post-127144-030574500%201280983389_thumb.pngsounds like a commercial
iBotPeaches Posted August 7, 2010 Author Report Posted August 7, 2010 bah. http://i34.tinypic.com/2eezhas.png
Randomrocket Posted August 7, 2010 Report Posted August 7, 2010 bah. http://i34.tinypic.com/2eezhas.pngHave they tried running a site? Its hard keeping up with the demands of people. I have a site so people at school can get around the web block and play games at school lol. The school web block isnt very complicated.
gruntmods Posted August 7, 2010 Report Posted August 7, 2010 Have they tried running a site? Its hard keeping up with the demands of people. I have a site so people at school can get around the web block and play games at school lol. The school web block isnt very complicated.proxy.gruntmods.com
Recommended Posts