New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 22)
· Marcia's (CO8)
· Bill G's (CO10)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· Recommend Us
· RegChat
· Reviews
· Search (Topics)
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 727
Comments: 19
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

06MAY2004 TIME0922PDT PLEASE HELP INVESTIGATORS
Goto page 1, 2  Next
 
Post new topic   Reply to topic       Computer Cops Forum Index -> General Site
View previous topic :: View next topic  
Author Message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Wed May 05, 2004 3:07 pm    Post subject: front page story
Reply with quote

the story on the front page about ryan1918, if you take the link to www.ryan1918.com you get to nukecops.

i wonder what the hecks with that?

www.ryan1918.com/org

tmov
Back to top
View users profile Send private message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Wed May 05, 2004 4:26 pm    Post subject: DDOS- COMPLAINT FILED- internet crime complaint center
Reply with quote

complaint filed with the dept of justice.

re:the DDoS attack on computercops and nukecops this past weekend.
you may add to the complaint on file at this link and by using this copied case number and password.

TMOV

see this post also: http://www.computercops.net/postt38954.html
Arrow Arrow Arrow Arrow Arrow Arrow Arrow Arrow Arrow Arrow Arrow Arrow Arrow
Thank You:



Thank you for taking the time to complete a complaint with the IFCC.
Your complaint has been successfully submitted.
Please retain the following information for future contacts with the IFCC


Complaint number:
I04050516054707
Password:
doqopo

If you have any additional information to provide to the IFCC please use the following link and log in with the above complaint number and password.

https://www.ifccfbi.gov/update






IFCC Home
Back to top
View users profile Send private message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Wed May 05, 2004 6:20 pm    Post subject: users online very low
Reply with quote

i have never seen the number of people logged on at this low a number, right now there are less than 250 users and only 15 are registered users.
ryan 1918 had re-directed his site to ccsp and then he was admonished by some folks on the thread at jaguar to stop doing it and it looks like he was really the reason that the site was swamped.
tmov
Back to top
View users profile Send private message
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3397
Location: Ottawa, Ontario, Canada

PostPosted: Thu May 06, 2004 12:14 am    Post subject:
Reply with quote

That's a serious charge TMOV. Do you have the evidence to support that contention? First of all, redirecting a site to CCSP won't in and of itself cause CCSP to be swamped. CCSP has been the target of a concerted DDoS attack, possibly a DRDoS attack. Are you suggesting that one ryan 1918 (whoever that really is) masterminded that attack?
_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 12:50 am    Post subject:
Reply with quote

Ikeb wrote:
That's a serious charge TMOV. Do you have the evidence to support that contention? First of all, redirecting a site to CCSP won't in and of itself cause CCSP to be swamped. CCSP has been the target of a concerted DDoS attack, possibly a DRDoS attack. Are you suggesting that one ryan 1918 (whoever that really is) masterminded that attack?


IKE,
I THINK YOU KNOW ENOUGH ABOUT ME THAT YOU CAN BE SURE THAT I AM A CREDIBLE WITNESS.
THE THREAD STARTS HERE WITH PAUL AND THE FIRST INDICATION OF A PROBLEM.
THEN YOU'LL SEE THAT RYAN1918 GETS TO ACTING UP.

HERE YOU GO :

http://jaguarpc.com/forums/showthread.p...adid=11083

AND YOU WILL SEE IN RYAN1918'S OWN ENTRY THAT HE'S A BIT BELLIGERENT ABOUT IT TOO.

I POSTED A COMPLAINT WITH THE INTERNET CRIME COMPLAINT CENTER.
TMOV
Back to top
View users profile Send private message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 1:11 am    Post subject:
Reply with quote

Ikeb wrote:
That's a serious charge TMOV. Do you have the evidence to support that contention? First of all, redirecting a site to CCSP won't in and of itself cause CCSP to be swamped. CCSP has been the target of a concerted DDoS attack, possibly a DRDoS attack. Are you suggesting that one ryan 1918 (whoever that really is) masterminded that attack?


i'm just making reports here just like a journalist that will report only a fact that can be back tracked.
this is the one i should have pointed you to the first time i posted ananswer here..
this is on the front page of ccsp right now.


Anonymous writes "Not certain if your aware, but I came across your site simply because www.ryan1918.com/org points to it. Ryan1918 is normally a script kiddie site that hosts all kinds of trojan viruses for the kiddies to download and compile. Probably one of the biggest on the net, having all your favorites, sdbot, gaobot, phatbot and so on. I despise them and have been trying to get the site taken off the net for a while now, legally. As I work for a ISP and deal with the abuse issues and s***** like these kids only create issues.

Just my guess that this is the source of the DDoS attacks since your attacks started at the same time these domains got pointed towards your sites.

Maybe your already aware of this.

Just some info.

Thanks,
Edge
"
Back to top
View users profile Send private message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 1:16 am    Post subject:
Reply with quote

yeah and if you go to :

http://www.ryan1918.com/org

right now, he still has everything going to nukecops.

2217wed05may2004

tmov

_________________
TMOV
Tomorrow is a new day.Crisis is opportunity riding on the dangerous wind !!!

I support COMPUTERCOPS .NET;you can too!
Back to top
View users profile Send private message
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3397
Location: Ottawa, Ontario, Canada

PostPosted: Thu May 06, 2004 1:34 am    Post subject:
Reply with quote

TMOV, I certainly don't question your integrity, just the evidence.

Comments by ryan 1918 from the thread you quoted: (which I'd also been following BTW)

05-04-2004 12:38 AM -
Quote:
I love nukecops!

05-04-2004 02:56 PM -
Quote:
nukecops seems to be down.. it's 2:56PM EST arg

05-05-2004 04:34 PM -
Quote:
no ;/ as in keep it up, i liked it.

05-05-2004 05:44 PM -
Quote:
eh? I didn't do any ddos attack, All I did was point my domains to it, since I closed my site, I thought they could use extra vistors, if anyone ddos my site and it affected there site it's not my fault, yet i'm sorry if they ddos'd mine and it affected yours, who knows, damn packet kiddies


Now all of this could be a ruse. What should I read between the lines? You can be sure of one thing though -- the evidence presented so far wouldn't even make it to a court of law.

_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 2:32 am    Post subject:
Reply with quote

this one was edited.

it was just plain no, until someone got afterhim.

05-05-2004 04:34 PM - Quote:
no ;/ as in keep it up, i liked it.
it ended at the forward slash, he added the rest later.

did you not read the part about him directing the traffic to nuke cops and then his response to people confronting him?

tmov.

i'm not here accusing him of doing anything, i'm looking and watching this develop like all others.

he stated that he had stopped directing traffic to nuke cops and that it would take a while to get corrected.
i wonder why when i made my last post that the traffic was still going to nuke cops?


check this out, see the date time group on his post where he said he had redirected the trafic away from nuke cops.

then tell me what you think.
did he really redirect traffic away from nukecops?

you be the judge.

ryan1918
JPC Member

Registered: Mar 2004
Location: michigan
Posts: 12
eh? I didn't do any ddos attack, All I did was point my domains to it, since I closed my site, I thought they could use extra vistors, if anyone ddos my site and it affected there site it's not my fault, yet i'm sorry if they ddos'd mine and it affected yours, who knows, damn packet kiddies


__________________




Report this post to a moderator | IP: Logged

05-05-2004 02:44 PM



stephen2417
JPC Member

Registered: Apr 2004
Location:
Posts: 9
Well direct your damn site else where!

Put a page up or something that says your site is closed.



Report this post to a moderator | IP: Logged

05-05-2004 02:50 PM



ryan1918
JPC Member

Registered: Mar 2004
Location: michigan
Posts: 12
I did a while ago it takes time to update.


__________________

_________________
TMOV
Tomorrow is a new day.Crisis is opportunity riding on the dangerous wind !!!

I support COMPUTERCOPS .NET;you can too!
Back to top
View users profile Send private message
dmolavi

Cadet
Cadet



Joined: May 05, 2004
Posts: 2
Location: USA

PostPosted: Thu May 06, 2004 12:29 pm    Post subject:
Reply with quote

what's happened is that the goabot worm sends DoS attacks to a few sites, including ryan1918.com/org/net:

http://sarc.com/avcenter/venc/data/w32.gaobot.afj.html

http://us.mcafee.com/virusInfo/defa...&virus_k=125006

mr ryan1918 has redirected all of his traffic to the NukeCops/ComputerCops domains, thus averting a DoS on his sites (though still rendering them useless).
Back to top
View users profile Send private message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 12:37 pm    Post subject: 06MAY2004 TIME0922PDT PLEASE HELP INVESTIGATORS
Reply with quote

AT THIS TIME THE FEDERAL GROUP THAT INVESTIGATES COMPUTER CRIME AND TERRORISM IS COMPILING DATA TO FORM A REQUEST FOR A WARRANT TO PRESENT TO A FEDERAL JUDGE REGARDING THE MATTER OF THE DDOS ATTACK ON CCSP AND NUKECOPS.
THE INTELLIGENCE ANALYSTS NEED A LOT TO GO ON,NOT JUST INUENDO.
PLEASE HELP BY POSTING ANY FINDING OF YOURS HERE ON THIS THREAD FOR CONTINUITY SO THAT THE REPORTS ARE NOT ALL OVER THE PLACE.
TANK864 JUST POSTED AND INTERESTING FIND ON THE THREAD AT THE HOSTING COMPANY,JAGUARPC.COM.
APPARENTLY THE REDIRECT FROM RYAN1918.COM IS A REDIRECT OF GAOBOT TO OUR LOVED SITES TO BRING THEM DOWN.
PLEASE MAKE YOUR SUBSEQUENT POSTS HERE AT LEAST AND IF YOU WANT TO POST ELSEWHERE DO THAT ALSO.
THANK YOU ALL FOR ANY ASSISTANCE IN THIS MATTER.
PLEASE DON'T EXPECT ANY FEEDBACK FROM FEDERAL INVESTIGATORS AS IT IS NOT THEIR PRACTICE TO DISCLOSE ANY FINDINGS IN ANY MATTERS THAT THEY ARE INVESTIGATING UNTIL THE TIME TO TAKE THE MATTER TO COURT.
REGARDS,
TMOV
Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation Exclamation
THE FOLLOWING IS THE REPLY FROM THE UNITED STATES DEPARTMENT OF JUSTICE, FOLLOW THE LINKS TO THE COMPLAINT AMENDMENT FORM AT THE FOLLOWING LINK AND USE THE PASSWORD TO GET TO INTO THE CASE NUMBER TO ADD INFORMATION.
YOU WILL NOT BE ABLE TO VIEW THE INITIAL REPORT OR ANY SUSEQUENT ADDITIONS.

HERE'S THE LINK: https://www.ifccfbi.gov/update


Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad Evil or Very Mad

Thank You:



Thank you for taking the time to complete a complaint with the IFCC.
Your complaint has been successfully submitted.
Please retain the following information for future contacts with the IFCC


Complaint number:
I04050516054707
Password:
doqopo

If you have any additional information to provide to the IFCC please use the following link and log in with the above complaint number and password.

https://www.ifccfbi.gov/update






IFCC Home
Back to top
View users profile Send private message
phoenix22

Site Admin
Site Admin
Premium Member
Premium Member


Joined: Mar 08, 2002
Posts: 4521
Location: "DEROS"

PostPosted: Thu May 06, 2004 7:03 pm    Post subject:
Reply with quote

?? becomes where did tank864?? no such user
tank863 post it....no record on file of that post....

_________________
"De Oppresso Liber" (We Liberate the Oppressed) Got Cawotts?? Got Ammo?? Holy Shinola Bat Babe! ....for Buddy...who lived it!
Back to top
View users profile Send private message Visit posters website
phoenix22

Site Admin
Site Admin
Premium Member
Premium Member


Joined: Mar 08, 2002
Posts: 4521
Location: "DEROS"

PostPosted: Thu May 06, 2004 7:16 pm    Post subject:
Reply with quote

i put it there for reference...like a clipboard....so we could use it later...
_________________
"De Oppresso Liber" (We Liberate the Oppressed) Got Cawotts?? Got Ammo?? Holy Shinola Bat Babe! ....for Buddy...who lived it!
Back to top
View users profile Send private message Visit posters website
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 10:08 pm    Post subject:
Reply with quote

phoenix22 wrote:
i put it there for reference...like a clipboard....so we could use it later...

i gotcha
tmov
Back to top
View users profile Send private message
TMOV

Major
Major
Premium Member
Premium Member


Joined: Feb 05, 2004
Posts: 1374
Location: 122.54.30W 42.20.30N using caps when my eyes get tired

PostPosted: Thu May 06, 2004 10:11 pm    Post subject:
Reply with quote

phoenix22 wrote:
?? becomes where did tank864?? no such user
tank863 post it....no record on file of that post....

ok i'll go back to jaguar and check on the uname to be sure.
tmov
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> General Site All times are GMT - 5 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops