SA-MP DDOS attacks

Mave

TMS Founder
Administrator
Messages
234,515
Location
Belgium
Kye sent this report:

-------------------------------------------------------

Hello,

I represent San Andreas Multiplayer http://www.sa-mp.com, which is a online multiplayer game with around 150,000 active players.

Over the past 2 weeks, we have been subjected to some very large DDoS attacks (several Gigabits per second) instantiated by a user on your network. As a result, we have decided to block IP ranges 92.232-237.*.* from our services. We are also currently looking for cyber-crime units within the UK to report this issue.

The admitted attacker goes by the online alias Ryan Cleary or Ryan A. Savage. His attacks are strong enough to take down boxes in the same data centre as us connected to the same router. The attacks consist of scanning for web servers with open RFI exploits. His other online alias is "viraL", and he is closely associated with the group raidchan.org.

The IP address I have provided is from (time/dates +10 GMT):

Session Start: Wed Jun 04 11:25:22 2008
[11:25] Session Ident: Ryan_ (~ryan@92-237-248-66.cable.ubr07.basi.blueyonder.co.uk)

Session Start: Mon Jun 16 00:00:00 2008
[21:00] * Ryan_ (~ryan@92-237-248-66.cable.ubr07.basi.blueyonder.co.uk) has joined #GL.beta

Recently, he has been using an encryption service called perfect-privacy.com for all of his online transactions, so I'm unable to get his current IP address.

Some admissions of launching DDoS attacks:

Session Start: Mon Jun 16 21:00:46 2008
[21:00] Session Ident: Ryan_ (~ryan@92-237-248-66.cable.ubr07.basi.blueyonder.co.uk)
[21:00] Ryan_ is ~ryan@92-237-248-66.cable.ubr07.basi.blueyonder.co.uk * Ryan_
[21:00] saint is about to cry to you and try and get me banned from life
[21:01] because I ddosed him a month or two ago, and refuse to pay for his bandwidth

Session Start: Sun Sep 28 20:33:14 2008
[20:33] Session Ident: pie2 (~john@berlin.perfect-privacy.com)
[20:41] my big suprise is
[20:41] 4 people from that IRC channel
[20:41] are about to experience
[20:41] internet issues
[20:41] tell them :)

I can provide an additional 10 or so witnesses/victims who have been attacked online by this person. A New Zealand ISP claimed that one of their international links was disrupted when he attacked a user on IRC. I can try to get further information about this also.

-------------------------------------------------------

ffs why would they attack sa-mp main site...

sad mofo's



for anyone who wants to be up-to-date for kye's blog http://kyecoder.blogspot.com/
 
thx for information mave.
The ddos attacker are so idiots, nobody cares that sa-mp.com is down.. It isnt worth attacking.
 
I care :wow: but it's indeed sad of the damn hackers :\

1 gigabyte per second :O thats a massive attack :s
 
you are right ;D
I meant it so:
we have an unofficial forum (http://forum.sa-mp.co.uk/index.php)
we have an unofficial wiki (http://samp.martoks-place.de/wiki.sa-mp.com/wiki/Main_Page.html)
we have favorites, instead of "internet list" and "official list".
and we have news from kye´s blog (http://kyecoder.blogspot.com/)
AND we have themavesite ;D.
So we can live without sa-mp.com´s stuff.
The only thing I care is, that sa-mp.com has to pay for all the traffic xD.
 
sa-mp.com isnt down still is it? i can get on and still do everything normally.
 
ohhhhhh!!
[me="[SAFE]GPow69"]feels like a dumbass :-[[/me]

hey! look! / me works on here too!! :tongue: didnt know that
 
Back
Top Bottom