amuck-landowner

Robert Clarke DDoS'd Brings the Internet Down...

MannDude

MannDude

Just a dude
vpsBoard Founder
Moderator
Pretty sure Tinet dumped Avante/ChrisK because of this.

What is the back story? What was Robert hosting on their network that was targeted?
 
Aldryic C'boas

Aldryic C'boas

The Pony
What he was hosting probably wasn't even the issue.  Kid probably either ran his mouth, or tried to run a 0day on someone again, and got smacked for it.
 
Patrick

Patrick

INIZ.COM
Verified Provider
They had a pretty good blend of bandwidth before they switched to GTT/Tinet single homed.

http://bgp.he.net/AS36137


MannDude said:
Pretty sure Tinet dumped Avante/ChrisK because of this.

What is the back story? What was Robert hosting on their network that was targeted?
Click to expand...

From IRC last night, all his IPs were getting attacked. 
 
Last edited by a moderator:
drmike

drmike

100% Tier-1 Gogent
Robert Clarke needs some parents that take the internet away and instead send him outside to dig ditches and befriend the squirrels.

From Twitter (blech!)

ServerCrate ‏@ServerCrate 5h

We’ve got staff arriving on site within the hour to work on bringing up new DDOS mitigation technology, more updates to follow.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 5h

@StealthMCPE @WilliamTDR The last 12 hours have been hell, but we’re working as hard as we can on it.
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 5h

@StealthMCPE @WilliamTDR Yes, we’re currently bringing up 100gbit of DDOS protection capacity.
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 6h

The DDOS attack still affecting our network is hitting a major US network backbone, we’re still working on mitigating.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 10h

@GageHiggins1 ATM we’re working to mitigate.
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 12h

@GageHiggins1 If you friend’s account got attacked, you should contact Mojang.
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 12h

@GageHiggins1 Why was the server hacked?
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 12h

@rickjames676 Why do you think the server was hacked?
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 13h

We’re getting hit again, currently looking into mitigating the attack.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 15h

All servers are now back online with the exception of certain dedicated clients which we’re currently working on, full RFO coon.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 16h

Some services are back online, we’re still restoring network issues.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 16h

The attack we’ve been dealing with is 73.7gbit.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 17h

@some_punk_kid None at this time, we’re doing our best to mitigate the attack.
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 18h

@GodknowJ We’re working on it.
View conversation
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 19h

We’re currently tanking a DDOS which is affecting network backbones around Dallas, we’re dealing with a pretty huge attack here.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 19h

We’re still here and able to answer any questions that customers may have, we’re actively working on network issue affecting Dallas.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 20h

We’re still actively working on this large network issue.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 20h

We’re dealing with a large DDOS attack against our network, more updates to follow.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 20h

Still working on fixing our Dallas net issue.
Expand
Reply Retweet Favorite More
ServerCrate ‏@ServerCrate 21h

Investigating a large scale network outage currently affecting all of Dallas, we’re looking into it.
Click to expand...
 
drmike

drmike

100% Tier-1 Gogent
With Avante being single homed to Tinet that means Avante should be offline now.

Clarke's servers seem offline.

mtr output showing some high latency to their neighborhood.  Still getting attacked I'd say.
 
drmike

drmike

100% Tier-1 Gogent
Why can't the internet bullies stick to swat teaming him :) ?



Crashing the 'net all over the place with these attacks. Kudos to whoever is swinging such a big botnet.   Impressive.
 
Wintereise

Wintereise

New Member
Avante/Centarra is actually not single homed as of a day or so, most of what hit him was taken up with Atrato -- Tinet only saw very little of it.

That BGP graph of HE's is VERY slow updating.
 
SrsX

SrsX

Banned
Well, I could of saw this coming. One search of his network showed he's running OpenSSH 5.3 which is vulnerable to a 0day.
You go on and see the Apache, it was also vulnerable.

He pissed of some pretty powerful people.
 
R

RyanC

New Member
I really wonder how much money robbie is spending on BW. Word on the street is that he managed to get a plenty of overage on cnservers.
 
Last edited by a moderator:
SrsX

SrsX

Banned
RyanC said:
I really wonder how much money robbie is spending on BW. Word on the street is that he managed to get a plenty of overage on cnservers.
Click to expand...
Don't doubt it. What I'm trying figure out if you're who I think you are, or just some other kid.
 
You must log in or register to reply here.
Top
amuck-landowner