View previous topic :: View next topic |
Author |
Message |
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Wed May 05, 2004 3:07 pm Post subject: front page story |
|
|
the story on the front page about ryan1918, if you take the link to www.ryan1918.com you get to nukecops.
i wonder what the hecks with that?
www.ryan1918.com/org
tmov |
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Wed May 05, 2004 4:26 pm Post subject: DDOS- COMPLAINT FILED- internet crime complaint center |
|
|
complaint filed with the dept of justice.
re:the DDoS attack on computercops and nukecops this past weekend.
you may add to the complaint on file at this link and by using this copied case number and password.
TMOV
see this post also: http://www.computercops.net/postt38954.html
Thank You:
Thank you for taking the time to complete a complaint with the IFCC.
Your complaint has been successfully submitted.
Please retain the following information for future contacts with the IFCC
Complaint number:
I04050516054707
Password:
doqopo
If you have any additional information to provide to the IFCC please use the following link and log in with the above complaint number and password.
https://www.ifccfbi.gov/update
IFCC Home |
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Wed May 05, 2004 6:20 pm Post subject: users online very low |
|
|
i have never seen the number of people logged on at this low a number, right now there are less than 250 users and only 15 are registered users.
ryan 1918 had re-directed his site to ccsp and then he was admonished by some folks on the thread at jaguar to stop doing it and it looks like he was really the reason that the site was swamped.
tmov |
|
Back to top |
|
|
Ikeb
General
Premium Member
Joined: Apr 20, 2003
Posts: 3397
Location: Ottawa, Ontario, Canada
|
Posted: Thu May 06, 2004 12:14 am Post subject: |
|
|
That's a serious charge TMOV. Do you have the evidence to support that contention? First of all, redirecting a site to CCSP won't in and of itself cause CCSP to be swamped. CCSP has been the target of a concerted DDoS attack, possibly a DRDoS attack. Are you suggesting that one ryan 1918 (whoever that really is) masterminded that attack?
_________________
Ikester
I like SPAM .... on my sandwich! |
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 12:50 am Post subject: |
|
|
Ikeb wrote: |
That's a serious charge TMOV. Do you have the evidence to support that contention? First of all, redirecting a site to CCSP won't in and of itself cause CCSP to be swamped. CCSP has been the target of a concerted DDoS attack, possibly a DRDoS attack. Are you suggesting that one ryan 1918 (whoever that really is) masterminded that attack? |
IKE,
I THINK YOU KNOW ENOUGH ABOUT ME THAT YOU CAN BE SURE THAT I AM A CREDIBLE WITNESS.
THE THREAD STARTS HERE WITH PAUL AND THE FIRST INDICATION OF A PROBLEM.
THEN YOU'LL SEE THAT RYAN1918 GETS TO ACTING UP.
HERE YOU GO :
http://jaguarpc.com/forums/showthread.p...adid=11083
AND YOU WILL SEE IN RYAN1918'S OWN ENTRY THAT HE'S A BIT BELLIGERENT ABOUT IT TOO.
I POSTED A COMPLAINT WITH THE INTERNET CRIME COMPLAINT CENTER.
TMOV
|
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 1:11 am Post subject: |
|
|
Ikeb wrote: |
That's a serious charge TMOV. Do you have the evidence to support that contention? First of all, redirecting a site to CCSP won't in and of itself cause CCSP to be swamped. CCSP has been the target of a concerted DDoS attack, possibly a DRDoS attack. Are you suggesting that one ryan 1918 (whoever that really is) masterminded that attack? |
i'm just making reports here just like a journalist that will report only a fact that can be back tracked.
this is the one i should have pointed you to the first time i posted ananswer here..
this is on the front page of ccsp right now.
Anonymous writes "Not certain if your aware, but I came across your site simply because www.ryan1918.com/org points to it. Ryan1918 is normally a script kiddie site that hosts all kinds of trojan viruses for the kiddies to download and compile. Probably one of the biggest on the net, having all your favorites, sdbot, gaobot, phatbot and so on. I despise them and have been trying to get the site taken off the net for a while now, legally. As I work for a ISP and deal with the abuse issues and s***** like these kids only create issues.
Just my guess that this is the source of the DDoS attacks since your attacks started at the same time these domains got pointed towards your sites.
Maybe your already aware of this.
Just some info.
Thanks,
Edge
"
|
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 1:16 am Post subject: |
|
|
yeah and if you go to :
http://www.ryan1918.com/org
right now, he still has everything going to nukecops.
2217wed05may2004
tmov
_________________
TMOV
Tomorrow is a new day.Crisis is opportunity riding on the dangerous wind !!!
I support COMPUTERCOPS .NET;you can too! |
|
Back to top |
|
|
Ikeb
General
Premium Member
Joined: Apr 20, 2003
Posts: 3397
Location: Ottawa, Ontario, Canada
|
Posted: Thu May 06, 2004 1:34 am Post subject: |
|
|
TMOV, I certainly don't question your integrity, just the evidence.
Comments by ryan 1918 from the thread you quoted: (which I'd also been following BTW)
05-04-2004 12:38 AM -
05-04-2004 02:56 PM -
Quote: |
nukecops seems to be down.. it's 2:56PM EST arg |
05-05-2004 04:34 PM -
Quote: |
no ;/ as in keep it up, i liked it. |
05-05-2004 05:44 PM -
Quote: |
eh? I didn't do any ddos attack, All I did was point my domains to it, since I closed my site, I thought they could use extra vistors, if anyone ddos my site and it affected there site it's not my fault, yet i'm sorry if they ddos'd mine and it affected yours, who knows, damn packet kiddies |
Now all of this could be a ruse. What should I read between the lines? You can be sure of one thing though -- the evidence presented so far wouldn't even make it to a court of law.
_________________
Ikester
I like SPAM .... on my sandwich!
|
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 2:32 am Post subject: |
|
|
this one was edited.
it was just plain no, until someone got afterhim.
05-05-2004 04:34 PM - Quote:
no ;/ as in keep it up, i liked it.
it ended at the forward slash, he added the rest later.
did you not read the part about him directing the traffic to nuke cops and then his response to people confronting him?
tmov.
i'm not here accusing him of doing anything, i'm looking and watching this develop like all others.
he stated that he had stopped directing traffic to nuke cops and that it would take a while to get corrected.
i wonder why when i made my last post that the traffic was still going to nuke cops?
check this out, see the date time group on his post where he said he had redirected the trafic away from nuke cops.
then tell me what you think.
did he really redirect traffic away from nukecops?
you be the judge.
ryan1918
JPC Member
Registered: Mar 2004
Location: michigan
Posts: 12
eh? I didn't do any ddos attack, All I did was point my domains to it, since I closed my site, I thought they could use extra vistors, if anyone ddos my site and it affected there site it's not my fault, yet i'm sorry if they ddos'd mine and it affected yours, who knows, damn packet kiddies
__________________
Report this post to a moderator | IP: Logged
05-05-2004 02:44 PM
stephen2417
JPC Member
Registered: Apr 2004
Location:
Posts: 9
Well direct your damn site else where!
Put a page up or something that says your site is closed.
Report this post to a moderator | IP: Logged
05-05-2004 02:50 PM
ryan1918
JPC Member
Registered: Mar 2004
Location: michigan
Posts: 12
I did a while ago it takes time to update.
__________________
_________________
TMOV
Tomorrow is a new day.Crisis is opportunity riding on the dangerous wind !!!
I support COMPUTERCOPS .NET;you can too! |
|
Back to top |
|
|
dmolavi
Cadet
Joined: May 05, 2004
Posts: 2
Location: USA
|
Posted: Thu May 06, 2004 12:29 pm Post subject: |
|
|
what's happened is that the goabot worm sends DoS attacks to a few sites, including ryan1918.com/org/net:
http://sarc.com/avcenter/venc/data/w32.gaobot.afj.html
http://us.mcafee.com/virusInfo/defa...&virus_k=125006
mr ryan1918 has redirected all of his traffic to the NukeCops/ComputerCops domains, thus averting a DoS on his sites (though still rendering them useless). |
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 12:37 pm Post subject: 06MAY2004 TIME0922PDT PLEASE HELP INVESTIGATORS |
|
|
AT THIS TIME THE FEDERAL GROUP THAT INVESTIGATES COMPUTER CRIME AND TERRORISM IS COMPILING DATA TO FORM A REQUEST FOR A WARRANT TO PRESENT TO A FEDERAL JUDGE REGARDING THE MATTER OF THE DDOS ATTACK ON CCSP AND NUKECOPS.
THE INTELLIGENCE ANALYSTS NEED A LOT TO GO ON,NOT JUST INUENDO.
PLEASE HELP BY POSTING ANY FINDING OF YOURS HERE ON THIS THREAD FOR CONTINUITY SO THAT THE REPORTS ARE NOT ALL OVER THE PLACE.
TANK864 JUST POSTED AND INTERESTING FIND ON THE THREAD AT THE HOSTING COMPANY,JAGUARPC.COM.
APPARENTLY THE REDIRECT FROM RYAN1918.COM IS A REDIRECT OF GAOBOT TO OUR LOVED SITES TO BRING THEM DOWN.
PLEASE MAKE YOUR SUBSEQUENT POSTS HERE AT LEAST AND IF YOU WANT TO POST ELSEWHERE DO THAT ALSO.
THANK YOU ALL FOR ANY ASSISTANCE IN THIS MATTER.
PLEASE DON'T EXPECT ANY FEEDBACK FROM FEDERAL INVESTIGATORS AS IT IS NOT THEIR PRACTICE TO DISCLOSE ANY FINDINGS IN ANY MATTERS THAT THEY ARE INVESTIGATING UNTIL THE TIME TO TAKE THE MATTER TO COURT.
REGARDS,
TMOV
THE FOLLOWING IS THE REPLY FROM THE UNITED STATES DEPARTMENT OF JUSTICE, FOLLOW THE LINKS TO THE COMPLAINT AMENDMENT FORM AT THE FOLLOWING LINK AND USE THE PASSWORD TO GET TO INTO THE CASE NUMBER TO ADD INFORMATION.
YOU WILL NOT BE ABLE TO VIEW THE INITIAL REPORT OR ANY SUSEQUENT ADDITIONS.
HERE'S THE LINK: https://www.ifccfbi.gov/update
Thank You:
Thank you for taking the time to complete a complaint with the IFCC.
Your complaint has been successfully submitted.
Please retain the following information for future contacts with the IFCC
Complaint number:
I04050516054707
Password:
doqopo
If you have any additional information to provide to the IFCC please use the following link and log in with the above complaint number and password.
https://www.ifccfbi.gov/update
IFCC Home |
|
Back to top |
|
|
phoenix22
Site Admin
Premium Member
Joined: Mar 08, 2002
Posts: 4521
Location: "DEROS"
|
Posted: Thu May 06, 2004 7:03 pm Post subject: |
|
|
?? becomes where did tank864?? no such user
tank863 post it....no record on file of that post....
_________________
"De Oppresso Liber" (We Liberate the Oppressed) Got Cawotts?? Got Ammo?? Holy Shinola Bat Babe! ....for Buddy...who lived it! |
|
Back to top |
|
|
phoenix22
Site Admin
Premium Member
Joined: Mar 08, 2002
Posts: 4521
Location: "DEROS"
|
Posted: Thu May 06, 2004 7:16 pm Post subject: |
|
|
i put it there for reference...like a clipboard....so we could use it later...
_________________
"De Oppresso Liber" (We Liberate the Oppressed) Got Cawotts?? Got Ammo?? Holy Shinola Bat Babe! ....for Buddy...who lived it! |
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 10:08 pm Post subject: |
|
|
phoenix22 wrote: |
i put it there for reference...like a clipboard....so we could use it later... |
i gotcha
tmov
|
|
Back to top |
|
|
TMOV
Major
Premium Member
Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired
|
Posted: Thu May 06, 2004 10:11 pm Post subject: |
|
|
phoenix22 wrote: |
?? becomes where did tank864?? no such user
tank863 post it....no record on file of that post.... |
ok i'll go back to jaguar and check on the uname to be sure.
tmov
|
|
Back to top |
|
|
|