DDoS attack on aa419.org

[Eniac]

As some of you may have noticed, aa419.org has been under a severe DDoS attack the last days. The attack origins from a russian bot net, it seems some criminal syndicate was very pissed off because we killed lots of money mule and other job scam sites. It is also possible that the russian bot net was hired by our romanian friends who suffered heavy losses of their fake sites in the past months.

The attack is still ongoing, the criminals are pounding our server at 400GB/h and the hoster has taken it offline for a while.

Of course we keep on fighting against the gangsters from here and other places in the internet.


Eniac

[peg]

Funny, I haven't been over there in a while, and today I was going to go there to add to a post on bresti.ro which was up then down, then up , then down, etc...

Well today, I noticed it was up again.

Of course when I went to the forums at aa419, I found that I couldn't. I guess that explains why.

Anything we can do to help you here, let us know..... Happy to oblige.

[Eniac]

If you want to help us, than search and destroy as much money mule and escrow sites as possible. Ivan and Vlad will have to pay a high price for doing this.

Meanwhile scampatrol.org is offline, 419eater.com and scamwarners.com are also down. Seems to be a massive russian attach against antifraud sites.

I will continue the fight from here.


Eniac

[Earl]

As some of you may have noticed, aa419.org has been under a severe DDoS attack the last days.

...sign of success

[Earl]

Seems like they have planned this for a long time, attacking all at the same time. All these are on pause for the moment:

http://www.scamfraudalert.com
http://www.fraudwatchers.org
http://www.419eater.com
http://www.scamwarners.com
http://www.aa419.org

Look upon the attacks as a sure proof of the successfull anti-fraud work done by these organizations, otherwise, why would the criminals put such vast energy and resources into trying to disable the websites. I suppose escrow-fraud.com is next. Peg, watch your door...

Anyway, it won't stop anybody from digging up criminal sites and getting hosters to suspend them, the attacks are just a good inspiration to work harder.

[peg]

Seems like they have planned this for a long time, attacking all at the same time. All these are on pause for the moment:

http://www.scamfraudalert.com
http://www.fraudwatchers.org
http://www.419eater.com
http://www.scamwarners.com
http://www.aa419.org

Look upon the attacks as a sure proof of the successfull anti-fraud work done by these organizations, otherwise, why would the criminals put such vast energy and resources into trying to disable the websites. I suppose escrow-fraud.com is next. Peg, watch your door...

Anyway, it won't stop anybody from digging up criminal sites and getting hosters to suspend them, the attacks are just a good inspiration to work harder.

I have been keeping an eye on things, but I haven't seen anything as of yet. I know they have been running a SYN ATTACK on me for a while but I have implemented measures that prevent it.

I will continue to monitor it.

[Earl]

fraudwatchers is back, see
http://www.fraudwatchers.org/forums/sho ... hp?t=11662

[JaxHot]

The link worked momentarily.
I read this post:
More fraud awareness sites attacked

--------------------------------------------------------------------------------

Perhaps you've noticed, the same happened to aa419.org, scamfraudalert.com and scam.com (maybe more?). They are still completely down, you apparently still have some problems too.

I know that this year scam.com has been attacked a lot by (I think) the same outfit, and they even have been threatened with legal action by the assigners of the attackers.

If you ever get such threats (very possibly by William Stanley (Klagenfurt, Austria), Robert Russo (Portland Maine US) or Alex Finch (Orlando Florida US)), please be advised to publish them openly, consequently wipe your ass with them and bring in the Feds.

If anyone can supply me with more information about who these people are and copies of their emails I would appreciate it.

[suziecue]

http://forum.aa419.org is back up, with the gracious assistance of ISC and CastleCops.

Still getting DDoS'ed, but they are able to handle it better than we could on our own. Everything is still a little iffy for a while, cross your fingers

[lightfair]

Could somebody bring me up to speed on the current situation of aa419.org? PM if you think this shouldn't be public.