DDOS Attacks from Infinity

[KingGoon]

Hey guys :-=

Maybe some of you have notice some large scale DDOS attacks on gaming communties the last couple of months . This is a young Italian guy who goes around demanding people to give him free stuff,make him moderator or community leader if not he starts to DDOS the site,IRC,game servers what ever he can find.
Hes using sunc flood with spoofed ip's so its hard to track him . The attacks are so big thats even cloudflare temp suspended my account .

A few days ago this guy send me a PM telling me to make him mod or els the site goes offline . He banned him and moments later the site went down and my server was shut down because of a large scale ddos attack .

While my site was offline i started to search for his names on google a little and found this

http://www.sky-fighter.org/board/index.php?page=Thread&threadID=1312

So i search some more about him and the ddos on sk fighter and found this

http://forum.ragezone.com/f611/find-whats-happening-world-ace-879312-print/

Check the first link with chat logs specialy this part

http://freetexthost.com/exlu30z136
He does like server4you.net a lot doesnt he ? LOL

So i google some more and checked out his youtube channel
http://www.youtube.com/user/MIKELE600 (verified its his here where he also mentions his attack on Battlefield.com )

Now lets look at one of his ddos videos
[ame]http://www.youtube.com/watch?v=VfnuB5UiiEk[/ame]
Check the login as :rofl: whats does it say ?
root@golf876
root@india109
root@echo357
Other video etc
root@puck896
root@puck846

Now i search some more and BINGO ! :pirate:
host: puck896.server4you.net
host: golf876.server4you.net
host: india109.server4you.net
host: echo357.server4you.net
host: puck896.server4you.net
host: puck846.server4you.net

He likes server4you.net so much because thats where his DDOS servers are located. These are only a few of his servers there is more :139: im trying to track them all down so i can file a abuse report .

I find it rather stange that server4you.net hasnt noticed these attacks as been going on for months now !

 

[Loonycgb2]

small ddos attacks like these can go unnoticed if people do not report the offending ip to the host's datacenter.

As for being hurt by these attacks telnet ddos attacks are rather small and can only hold a certain limit of bots. Which means the server admin is not even trying to block them as they are as easy as blocking the host dns.

 

[KingGoon]

Lol this is everything but a small attack
Cloudflare first reply

I asked how big the attack was

SplitIce can also verify the size

 

[Loonycgb2]

One thing of advice is if you have the servers which are causing this have you tried knocking out the servers your self by redirecting the ddos attack to the servers one by one till they are all knocked out?

you can use the netfilter module included in most linux systems to do this :P