About ddos

[NahBruhNotToday 74]

ok wtf is wrong with people? someone ddosed the server 5 times in 2 days just why? can u guys get some ddos protection for the servers?

[Peterr 398]

It's not that easy man. 

[Revise 314]

there's mitigation for it but if someone has a strong enough booter / botnet then mitigation  won't matter much.

[Darrennn 49]

if the box  is on OVH there is a bypass going around right now which makes the ddos protection pretty much non existent

[maiko 132]

1 minute ago, DarrenMacgill said:

if the box  is on OVH there is a bypass going around right now which makes the ddos protection pretty much non existent

there's always been a bypass xd

[Darrennn 49]

Just now, maiko said:

there's always been a bypass xd

Yeah I dont really know much about it. That was just how someone explained it too me

[Tech 672]

3 hours ago, xplayx14 said:

ok wtf is wrong with people? someone ddosed the server 5 times in 2 days just why? can u guys get some ddos protection for the servers?

[HooDi 250]

Imagine having anything better than a stresser zzz couldnt be me

[XOwenX 207]

.

[Python1717 2]

So this ddoser threatened the admins asking for a player to get unbanned, saying he'd ddos the server if they didnt unban. The admins told him to go fuck himself or sumthing and now both servers are down for hours everyday. 

so now I cant do runs despite the fact in FUCKING BROKE. after the admins rigged the casino, changing the rules of blackjack. next time i double down a 5m bet on blackjack when I get an 11 DRAW A FUCKING KING AND THEN THE DEALER 8 8 4 Ace WTF IS THAT SHIT.  (in real blackjack the dealer will stand on 20 and my blackjack wins 10m)

The admins prob wanted to create another huge money sink for the top 5% of players but all they did was wipeout a fuck ton of players with under 10m and who knows how many of those players alt + f4ed and will never come back

Im fucking :Babyrage:

TBH the admins are prob working really hard to solve the ddosing but keep blundering shit like this and they will loose players 

[Penguiny 822]

pp rodriguez thinks ddosing is ugly hoe move

[The Antichrist 251]

What method is the DDOSer using?  Is he botnetting or stress testing?  

If he's stress testing, you just contact the owner of the ip and demand to have all your ips blacklisted or you'll file legal action.  They usually have contact information listed.
If he's botnetting, he'll run out of machines eventually, and he's costing himself more time building up a botnet like than all the players he's inconveniencing combined. 

[Xlax 2719]

On 8/14/2020 at 1:30 PM, anti said:

What method is the DDOSer using?  Is he botnetting or stress testing?  

If he's stress testing, you just contact the owner of the ip and demand to have all your ips blacklisted or you'll file legal action.  They usually have contact information listed.
If he's botnetting, he'll run out of machines eventually, and he's costing himself more time building up a botnet like than all the players he's inconveniencing combined. 

A stresser is usually just a web api to control a botnet, so regardless of if he is using a web stresser, or a normal type botnet, it's basically the same thing. The only way to get the IP of the cnc servers for the web stressers would be to confiscate an infected machine and try to find the traffic from the cnc server (Cnc = control and command, main botnet server basically). 

You don't really run out of bots, it's a keep-alive type connection, meaning it stays alive. You can lose bots depending on what you're scanning for, if people are using default ssh logins, all it takes is a password change / reboot and you'll be good. If they are using an exploit, the only way to really kill those bots is if the device manufacturer releases a patch for that exploit and they update their machine. So, he's really not costing himself much building it.

TLDR; It's not hard what he's doing, he clearly has a lot of time to waste on his hands and this DDoSing cannot easily be stopped. As far as mitigation and DDoS protection go, botnets can be strong, which will make mitigation useless to a certain extent, and there are various methods to bypass certain DDoS protection, such as OVH, CF, etc... So, there's no easy way of getting around this.

Edited August 16, 2020 by Xlax

[Slav 323]