[Justiful]

The DDOS attacks are coming from a french group using this domain. http://WWW.DCRI.EC

DCRI is https://www.facebook.com/DirectionCe...ementInterieur --- They are spoofing the name of a french intelligence agency. This agency vigorously defends fraud of their name, and address. DCRI.EC is using their address as the business address for their website on Whois http://WWW.DCRI.EC --- In addition to using it on CLOUDFLARE a website tool that stops DDOS attacks, that they have licensed for their site.

1. Report the cloudflare violation. -- go to cloudflare.com -- False use of an address breaks Terms of use.
2. Report the name/adress violation directly to https://www.facebook.com/DirectionCe...ementInterieur
3. http://www.interpol.int/Forms/Contact_INTERPOL -- Report the HTTP://www.DCRI.EC for false use of a government mailing address, distribution of hacking tools for illicit purposes, and extortion.

[Fraolinch]

Bump because why not. Keeps me busy at least.
I mean doing this shit keeps me busy. Not the bumping.

[EpicToaster]

''Website offline'' <-- does this mean their servers are down and DDOS has stopped or is it irrelevant?

[Ehngage]

Justiful posted:

The DDOS attacks are coming from a french group using this domain. http://WWW.DCRI.EC

DCRI is https://www.facebook.com/DirectionCe...ementInterieur --- They are spoofing the name of a french intelligence agency. This agency vigorously defends fraud of their name, and address. DCRI.EC is using their address as the business address for their website on Whois http://WWW.DCRI.EC --- In addition to using it on CLOUDFLARE a website tool that stops DDOS attacks, that they have licensed for their site.

1. Report the cloudflare violation. -- go to cloudflare.com -- False use of an address breaks Terms of use.
2. Report the name/adress violation directly to https://www.facebook.com/DirectionCe...ementInterieur
3. http://www.interpol.int/Forms/Contact_INTERPOL -- Report the HTTP://www.DCRI.EC for false use of a government mailing address, distribution of hacking tools for illicit purposes, and extortion.

An intelligent post about the DDOS and something we actually CAN do that doesn't involve a witch hunt. +1 for you OP

[Ravin]

Too bad this isn't a DDoS... Its a completely different kind of attack.

[HEALVUR]

Ravin posted:

Too bad this isn't a DDoS... Its a completely different kind of attack.

DDoS is a broad term that includes many different kinds of attacks. Any attack that disrupts access to a service is a Denial of Service and any DoS that comes from many different machines is a Distributed Denial of Service attack.

[Ravin]

HEALVUR posted:

DDoS is a broad term that includes many different kinds of attacks. Any attack that disrupts access to a service is a Denial of Service and any DoS that comes from many different machines is a Distributed Denial of Service attack.

Wrong. this is a security issue with Rust Servers themselves. Its an exploit. Its a kind of DDoS, but doesn't follow the same kind of attack as a DDoS. They are not even slamming servers with packets of Data.

[Ehngage]

Ravin posted:

Too bad this isn't a DDoS... Its a completely different kind of attack.

Regardless of what kind of attack this is, OP still has a valid point.

[Ravin]

Ehngage posted:

Regardless of what kind of attack this is, OP still has a valid point.

Didn't deny that OP has a good point. However, people keep looking for solutions in the wrong places. Thats why it has taken four days to fix this problem because its not a simple DDoS attack. It is a direct issue with the Rust servers they are exploiting to give them the results of a DDoS attack without even having to use a DDoS attack.

You don't tell someone with a knife wound its a bullet wound just because they bled the same way.

[Deltadude]

Cloudflare doesnt give a damn.

[UK_Jonn]

If anybody else wants to get there stuff down, it's hosted on 1 VPS; TS+Website.
Cloudflare Resolved:
Mail: 50.17.226.60
Direct: 50.17.226.60
Direct-Connect: 50.17.226.60
Direct-Connect-Mail: 50.17.226.60
CPanel: 50.17.226.60
server: 50.17.226.60
www: 50.17.226.60

[Gothwaite]

Ravin posted:

Wrong. this is a security issue with Rust Servers themselves. Its an exploit. Its a kind of DDoS, but doesn't follow the same kind of attack as a DDoS. They are not even slamming servers with packets of Data.

Wrong.

"In computing, a denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DoS attack may vary, it generally consists of efforts to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet."

Just because it isn't a vanilla DDoS attack doesn't mean it isn't one at all.

[Justiful]

Lets get back on topic. Keep reporting them to those three links. If anyone lives in france, or speaks french please report it to the proper authorities.

[Sharia]

How do we even know its these guys that are doing it?

Sorry but I don't know you OP and reporting someone on your say so does not fly...what proof do you have?

[Justiful]

Go on their teamspeak. Speak french. Ask them about it. They freely admit it. They also have been offering tools to participate to many people. They are not hiding it. They are convinced nothing will happen to them.

[Nigel]

TeamSpeak IP?

[Justiful]

I saw someone else who posted the TS info get banned. But... it is the "standard" redirect based on website... Like most website redirects to it... So go ahead and do that :-p.

[meuqsaco]

The term DOS is correct in this case. Service is being denied.

[huNt3r87]

Justiful posted:

Go on their teamspeak. Speak french. Ask them about it. They freely admit it. They also have been offering tools to participate to many people. They are not hiding it. They are convinced nothing will happen to them.

In saying this I assume you can translate or speak French fluently. Otherwise, this post is as meaningless and fraudulent as many others... such as the one earlier talking about it being Apple ddosing them. Shit cracked me up so hard.

[Justiful]

Hunt -- No I do not. But yes I sent in a few separate translators from my community. They did confirm it.

[CloseShave113]

Pretty much these guys doing it...