More like intensely spamming it to make it crash

 

Basically if 2 computers want to talk to each other, for example if I want to connect to Skyblock.NET, they do what's called a "TCP Handshake". What it means is, literally, I say "Hi" to Skyblock, which is known as a SYN. Then Skyblock.NET says "I got your hi, Hi Back!" That's known as a SYNACK. Then I say "Got your Hi, Lets start transmitting" That's known as an ACK.

What used to happen in the old days of the internet (20 yrs ago) was people found out that if u sent alot of "Hi"s (SYNs) to the server, it could cause a server to crash, because when you said "Hi", the server assumed that you were going to join and started reserving resources for you (RAM, CPU etc). So what hackers did was to send alot of "Hi"s, quickly, and not complete the TCP Handshake, IE. Reply the SYNACK with the ACK. That meant that the server thought there were going to be people connecting, and went ahead to reserve all the resources for people that were never going to join, thus preventing people who actually wanted to join from joining. It's like calling up MacDonalds and ordering 100 burgers, which would prevent people in store from actually getting burgers.

 

It is pretty unimaginable, especially without amplification, SYN floods are 1 for 1 unlike other attacks using amplification like NNTP or SMNP. They would have to have 10's of thousands if not 100's of thousands of clients.

 

LOL

 

i don't understand any of this

 

In it's simplest form the attacker(s) sent 10's or 100's of thousands of "Hi's" as blaq called them and this pretty much put the server into hyper drive trying to reply to all those "Hi's". Every time the "Hi" is sent it needs memory or RAM to store or recognise that. So what the attacker(s) did was send so many "Hi's" that the server ran out of room to store them and then shut down. This used all the data that is meant to store or recognise that people are joining or saying "Hi" so that is why no-one could join because there was no data to store the information or "Hi" that they were sending. Also as you guys said this could of only been capable off mass amounts of clients and good enough connection to stay stable while all the "Hi's" were being sent. This pretty much makes it impossible for a single man or client to actually pull this off, my best bet is it was probably a group of no lives with nothing better to do or people that just want to be known as "that guy". I might be completely misinterpreting this so please pick up on mistakes because I believe they are evident.
In real life context basically if you join the server you send a (I'm just gonna call it a bleep) so you send a bleep to the server or in this case you throw a ball at someone. So when the server receives it they send it back so basically they catch the ball and throw it back at you. What these attackers are doing is throwing thousands of balls at you. So much that you can't catch them and just over whelm you.

 

I'm still skeptical that any group would have enough bandwidth to pull off a SYN attack at 400gbits. The only reason why you can pull of hundreds of gigabits is through using amplification attacks through the internet's large iron routers.

 

Noobcrew you should not be sorry! It was not your fault that the server went down. This group called "PutinSkquad" is most likely going to jail. ( the members in PutinSkquad )

In reality DDosing someone in ANY way, frying there router, scrambling it, Or even sending them a *Rat* is still considered a FEDERAL CRIME!

 

We got VERY lucky to survive these attacks

 

Im also very concerned that these Ddosers are looking at the forums. My internet has been going down maybe 3-4 times a day after i posted this thread...... now im being Ddosed

 

It is unlikely that they are able to obtain your IP from the forums, unless they've hacked it. Your internet going down constantly is probably just a coincidence.

 

Umm im not sure if you get this..... but if they know how to Ddos someone i guarantee that they know how to get an IP witch is something you need in the process of Ddosing

 

i think its being ddos again both .net and mineverse are down

 

Well .net just got attacked again :/

 

And i have now reset my router and changed my Ip making it impossible for the Ddosers to attack me

 

Getting the IP of a Minecraft (or any) server like Skyblock.net is as easy as connecting to the server once and watching the flow of traffic between your computer and theirs. When you request a domain, a global lookup service replies to your computer with the IP so you can initiate a connection.

Getting the IP of an arbitrary Internet user is an entirely different story. There is no global service that catalogues IP addresses you've used and usernames you've used -- to create one would be an exercise in futility. However, websites typically record visitors' IP addresses, so the owners of sites you visit can correlate your IP with any usernames you use on them. Also, as above, if you ran a website from your home computer that identified you as erikmax1234 (i.e. erikmax1234.com or "Erikmax's Blog") and perhaps linked to that site in your profile, anyone who visited it would know your IP, and be able to correlate it with your username.

That said, these guys did claim to have dumped half a million MC accounts from Mojang's database in early June, and presumably cracked several thousand or more, but they surely have "better" things to do than target randoms who complain about them on forums.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by staff members**