Author |
Message |
dr stephen williams
Baiting Guru
Joined: 06 Aug 2007
Posts: 16749
Location: Dreadful Hater-ville
|
Posted:
Mon Aug 11, 2008 4:32 am |
|
Thanks, Rover, for keeping the site up and running! |
_________________ x10 Acra-Ctnu Tgo-Pnjari Lgos-Ctnu Lgos-Ynde Lgos-Mndmba Lgs-Prku PrtHrcrt-Abche Lgos-Nttngu Bmko-Ctnu (wDQ) Frnce-Dbln (wPadme)
x2 x7 x7 x6 Team Turd Lgs-Dla Bnn-Lbra Acra-Dkar Dkr-Bnjul- Dkr-Tmbktu-Abche-Adre-N'djmna Lgos-Cairo-Aswn-Jail Ctnu-Lgos Ctnu-acra Lgos-Jbrg-Drbn-Prt-Elzbth-CT-Sprngbk-CT-Drbn-CT-Hrre-Lska-DsSlm-Mmbsa-Nirbi-Kmpla 28,510 Miles
x2 x6 x4 Team Woody Acra-Sngpre Acra-Dkr-Rsso-Bmko Acra-Ctnu
Lgos-Dkr-Rsso (wKLG)
x22 SS x3 x303 :
|
|
|
|
irishemigrant
** REMEMBERED **
Joined: 22 Jul 2007
Posts: 4933
Location: 40*45' S 172* 34'E
|
Posted:
Mon Aug 11, 2008 5:12 am |
|
Nice job Rover,
I'm stocking the bunker bar now, and getting the pizza out of the freezer, Vodka and gin are in the chiller, beer is in Obis' fridge, pimms I have had diverted from the Mod lounge to the Bunker, although if the Mods turn up it may be messy |
_________________ SeniorNet NZ Local Branch ongoing workshops about internet scams
http://www.scamwarners.com/ For when you want to remember why we bait
Goodbye Mike (Paranoid) Friend, confidant, partner. Till we meet again.
Personal Message From The Axeman
<-- Because you have earned them. x8 a few x 13 |
|
|
|
music man
Baiting Guru
Joined: 22 Sep 2005
Posts: 14807
Location: East Harlemshire , yo!
|
Posted:
Mon Aug 11, 2008 6:16 am |
|
Looks like aa419 is down |
_________________ x2 x2 x104 x213 x4 x20 x4 x2 x1 x2 x2 x2 x2 x2 x13
You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)
Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
|
|
|
|
Fo'andles
Elite Baiter
Joined: 06 Jul 2007
Posts: 1654
Location: busy doing nothing, somewhere
|
Posted:
Mon Aug 11, 2008 7:09 am |
|
Thanks Rover for your hard work, now do you manage to get any sleep. |
|
|
|
|
thomas-the-tank
Elite Baiter
Joined: 18 Aug 2007
Posts: 1087
Location: Wherever I want the lads to think I am
|
Posted:
Mon Aug 11, 2008 8:16 am |
|
Thanks for the hard work, Rover. Glad to know that you are capable of fending off some very pissed-off lads. |
_________________ "You body parts will picked on the scene of a fatal accident that you will be involved in seven days time"
"I hate associating with men who are camelions"
"I have knowledge in goats since i learnt that in way back in secondary institution."
"I have come to learn the world is pregnant."
"Besides i am on a GLOBAL ASSIGNMENT WITH THE UN, so be reasonable and leave insults"
"suck your blood untill you resemble stockfish"
x 3 x 2 x 2
Wole A x 4!! :
<= don't ask about the goat! |
|
|
|
Dutch
Baiting Guru
Joined: 22 Nov 2007
Posts: 4204
Location: Dislocated
|
Posted:
Mon Aug 11, 2008 8:27 am |
|
I noticed it was sluggish last night. All seems to be running smoothly now. Seems to be a really effective little script you've got running there, Rover |
_________________ deadified fake websites) x 374
x11 x a couple
Yes we can! (with a bit of help) |
|
|
|
packman
Elite Baiter
Joined: 15 Dec 2007
Posts: 1498
Location: In his own little world but it's ok, they know him there.
|
Posted:
Mon Aug 11, 2008 11:35 am |
|
I donning my tinfoil hat and underware. your the man Rover. keep hitting them with a big pointy sticks. |
_________________ Pancratic Cancer is beyond suck.
Our Forum Mods. can beat up your Forum Mods
SB Eye Regime.
The receipt you send is totally invisible ok-Kelly
FUCK YOU SMALL BOI YOU ARE POOR IN HEAD AND SOUL
AND GOD WILL PUNISH YOU FOR SCAMMING HOUNST MEN LIKE ME.. Segun Akintemi
Click here to support 419Eater.com
<-- I got a pony WAHOO
x3
Last edited by packman on Mon Aug 11, 2008 12:15 pm; edited 1 time in total |
|
|
|
Rover
Site Admin
Joined: 13 Apr 2004
Posts: 16189
Location: North of the Limpopo
|
Posted:
Mon Aug 11, 2008 12:10 pm |
|
The attack has slowed down as of this morning we only had four bots attacking!)
I see aa419.org is still down
Let's not let our guard down just yet - the first round could simply have been the "scouting party"
Well if anything the attack gave us a chance to test out the anti-ddos measures that I put in place last year. What I can say is that the systems did extremely well at blocking the attack (actually I think it did better than expected)
I will continue to check the firewall for dropped packets and let you know once I see no more bot attacks |
_________________ Rover
Latest Anti Fraud News | Email Header Analysis | Help keep Eater running | Join 419Eater on Facebook |
|
|
|
Sir Cumfrence
Master of Master Baiters
Joined: 20 Feb 2007
Posts: 907
Location: Relatively here.
|
Posted:
Mon Aug 11, 2008 12:17 pm |
|
Thanks Rover,
We definitely appreciate the effort required to keeping this site in lad-battle readiness. |
_________________ x 1245 |
|
|
|
Titania
Hell on wheels
Joined: 06 Jun 2008
Posts: 2442
Location: Rollin' rollin' rollin'
|
Posted:
Mon Aug 11, 2008 2:32 pm |
|
Rover deserves the highest honor we can bestow upon him in his battle with the bots:
THE CROIX DE DDOS
Thank you, Rover, for having seen to our defences. |
_________________ i do not know you.you need to expanciate more - C0llins W3aver
those words really made me felt completely bad..and i had to dust my ass and wipe tears Micheal David
x 8
Stanley's Christmas Adventure 2008 - Lagos to Abuja - massbait |
|
|
|
Rover
Site Admin
Joined: 13 Apr 2004
Posts: 16189
Location: North of the Limpopo
|
Posted:
Mon Aug 11, 2008 2:45 pm |
|
|
|
|
wokabo
Master of Master Baiters
Joined: 23 Sep 2004
Posts: 825
Location: best beer country in onomatopoeia world
|
Posted:
Mon Aug 11, 2008 3:20 pm |
|
Rover, great job. But when you say you're shutting the bots down, do you mean you just block them at the firewall, or are you actually doing something to stop them sending the attacks?
Just curious, if you don't want to give out any detail on what you do exactly, that's ok of course. |
_________________
Fight My Brute |
|
|
|
Rover
Site Admin
Joined: 13 Apr 2004
Posts: 16189
Location: North of the Limpopo
|
Posted:
Mon Aug 11, 2008 3:37 pm |
|
What I mean is "shutting them down from slowing down our server" So yes effectively I am just blocking them at the firewall using various automated scripts that I have written that detect bots as opposed to regular users. I wish there was a way for me to stop them sending attacks. Unfortunately not. Sorry for the misunderstanding there but no I am not stopping them from attacking us. They continue to attack us, we just drop all their packets. |
_________________ Rover
Latest Anti Fraud News | Email Header Analysis | Help keep Eater running | Join 419Eater on Facebook |
|
|
|
Donato
Baiting Guru
Joined: 07 Jan 2007
Posts: 2922
|
Posted:
Mon Aug 11, 2008 3:40 pm |
|
Tech question. I kinda understand that 'someone' uses (hijacks?) various unprotected pc's to send more bots. But is there anyway to figure out the originator? |
_________________ ^^^ damn tree hugging hippy. -imike
Your are a complete ASSHOLE!! Dont you dare mail me again BASTARD!!!-george harrison
- lots
<i><b>Free Pastor Frank!!!</b></i> |
|
|
|
Rover
Site Admin
Joined: 13 Apr 2004
Posts: 16189
Location: North of the Limpopo
|
Posted:
Mon Aug 11, 2008 3:57 pm |
|
|
|
|
Donato
Baiting Guru
Joined: 07 Jan 2007
Posts: 2922
|
Posted:
Mon Aug 11, 2008 4:07 pm |
|
I gotta ask then what a bot looks like. I'm guessing that it's code of some type?
Oh and what firewall do you recommend? I'm running McAfee at the moment. |
_________________ ^^^ damn tree hugging hippy. -imike
Your are a complete ASSHOLE!! Dont you dare mail me again BASTARD!!!-george harrison
- lots
<i><b>Free Pastor Frank!!!</b></i> |
|
|
|
Rodus
Baiting Guru
Joined: 13 Dec 2006
Posts: 3685
Location: Back under the cold shower
|
Posted:
Mon Aug 11, 2008 4:36 pm |
|
^^Here is a decent firewall mate. Possibly a little more hardcore then the average home user needs. If not then what the hell are you up to?
http://www.honeynet.org/ Everything you wanted to know about botnets |
_________________ I will kiss you romance u,suck and penetrate u - Williams Muyeke
now am as poor as a church rat - Lou1s Mar1on
I AM FINANCIALLY DEAD RIGHT AWAY - Louis in Accra
u can keep sending money to Gomer and leave me alone - Agent Smith cracks up
Lou1s Mar1on - Lagos to Accra (satellite IP) - "so, what i need to do to get out of these place?"
- 18 mths: Louis
The*Catb1ngo Hotel*
*My Church*
x23 |
|
|
|
full auto
*** BANNED ***
Joined: 30 May 2007
Posts: 555
Location: Lost in a digital age/provided by tor.
|
Posted:
Mon Aug 11, 2008 5:22 pm |
|
Ahh pissed off Ivans/Vlads. Guess I'll have to get some... "extra" kills in on my 3 days off. |
|
|
|
|
The Man
Baiting Guru
Joined: 11 Apr 2007
Posts: 2885
Location: La La Land
|
Posted:
Mon Aug 11, 2008 6:00 pm |
|
Thanks for all you do Rover!
I'll pick up a new tin foil hat on the way home from work. Might grab some tin foil underbritches too just to be safe. Don't want the "boys" botted! |
_________________ ---
The Man
YOU ARE A CHILD OF SATAN WITH YOUR HUNGRY DIRTY BODY ,TUNDER FIRE YOU BIG HEAD IDIOT !!! HA HA HA HA HA
IS THIS HOW YOU DECIDED TO TREAT US AFTER ALL WE WENT THROUGH?YOU MADE US TRAVELLED TO ABUJA AND INDEBTED US.
"Cursed is your mother that gave birth to a family-disgrace like you. Cursed is your father he could not control his lust for anything under skate"
"hey u crakhead motherf*cking nitwit, from the way u express the cockamamy sh*t that ur dumb brain is made up of it's so obvious that u never really made it past elementary school but anywayz dogs don't have to go to school afterall."
(Lagos to Abuja)
x2
<---in lieu of a brownie. TS
x8 |
|
|
|
Rover
Site Admin
Joined: 13 Apr 2004
Posts: 16189
Location: North of the Limpopo
|
Posted:
Mon Aug 11, 2008 6:39 pm |
|
Donato wrote: |
I gotta ask then what a bot looks like. I'm guessing that it's code of some type?
Oh and what firewall do you recommend? I'm running McAfee at the moment. |
As far as firewalls are concerned - there are many to choose from a hardware firewall is probably your best bet as opposed to a software firewall.
Every ddos we have had the bots have looked different. Typically you pick them up in the logs. They look just like regular users except they hit your server at a rapid rate. Far faster than any user would hit your machine.
There are many strategies to employ here (I'm not going to get into what strategies we use on eater as there are multiple) however one of the tricks is to discern what the pattern is. Once you have that figured out you look for that pattern and block it as it comes in. It works really well for us. As the scripts I have written are unique (i.e only used by us) the bots have no idea what I am checking for in order to decipher if they are a bot or not. As it is a home written script we can adapt it as need be i.e for yesterdays attack I changed it three times in order to catch all the incoming bots.
Anyway - enough on that - Eater is running smoothly at the moment so lets hope they do not come back any time soon.
I did get word that aa419.org may be down due to an isp problem and not due to a ddos attack |
_________________ Rover
Latest Anti Fraud News | Email Header Analysis | Help keep Eater running | Join 419Eater on Facebook |
|
|
|
music man
Baiting Guru
Joined: 22 Sep 2005
Posts: 14807
Location: East Harlemshire , yo!
|
Posted:
Mon Aug 11, 2008 6:56 pm |
|
@Full Auto
As aa419 is down you can't get any targets to dead!!
@Rover
Castlecops is down as well which would tie-in with an ISP issue. |
_________________ x2 x2 x104 x213 x4 x20 x4 x2 x1 x2 x2 x2 x2 x2 x13
You will rot in jail.watch your back- any shadow could be mine ! YOU ARE VERY EASY TO TRACK IN YOU NEIGHBOURHOOD ! DRUNKARD AND A SCUMBAG LIKE YOU!
mike lawrence (cheque scammer)
Go fuck your dead parents asshole!!!How can a deaf fool make clean money..The money that you have will never be spent on anything reasonable.
So fuck off..dont reply me again until the cops get your stinking ass...
Lyord Melson- cheque scammer
$4.002million and £214K in fake cheques taken out of circulation. (updated May 2009)
|
|
|
|
Jayhawk
Baiting Guru
Joined: 07 Jul 2006
Posts: 5727
|
Posted:
Mon Aug 11, 2008 6:57 pm |
|
Bots piss me off!
Thanks Rover. It's got to be a pain in the butt not only keeping the site up but protecting it against evil-doers. I imagine there are quite a few folks out there that would like to see this site go away. Thanks for all you do. |
_________________ x8 < slacking?
just checked the site for update now, shipment smurfs in Porto Novo. Yes!! - Stanley
i will not share my smurfs with anybody again - Stanley (again)
Yes pets are allowed as far as you will occupy the apartment alone, you can release the Kraken.
i will kill you even if it take me to go to jail i will do that because i hate you with all my life....
assisin killer to Feathers McGraw
PLEASE I BEG YOU TO LET ME KNOW THAT PIGGIES OF YOURS PLEASE... assisin killer to Feathers again
x5 Team Humphere
Long Live Silver Peak Orphanage! - Loan Lad Langwenya Andile |
|
|
|
Rover
Site Admin
Joined: 13 Apr 2004
Posts: 16189
Location: North of the Limpopo
|
Posted:
Mon Aug 11, 2008 7:03 pm |
|
|
|
|
Akai Ryu
Chuck Norris
Joined: 11 Jun 2007
Posts: 1369
|
Posted:
Mon Aug 11, 2008 7:10 pm |
|
Quote: |
I did get word that aa419.org may be down due to an isp problem and not due to a ddos attack |
This has happened before. The folks who run Castle Cops (and also host aa419) have been having a lot of problems with their old servers and have been trying to raise funds to get new ones.
This is just a guess on my part, as I've not been able to contact anyone at aa419 since 2 days, but as Castle Cops also is timing out at the moment (with the same timeout error message), that seems to lend further credibility to the ISP issue.
However, seeing as Castle Cops are constantly fending off DDoS themselves, I think perhaps the issues they are having with their servers + any DDoS activity may be having its effect, unfortunately. |
_________________ Several hundred fake escrows (and others) deaded--no longer counting.
aa419.org --dead a fake site today.
No, Akai, you're a wonderful bitch. --Reaper |
|
|
|
Dutch
Baiting Guru
Joined: 22 Nov 2007
Posts: 4204
Location: Dislocated
|
Posted:
Mon Aug 11, 2008 7:17 pm |
|
Rover wrote: |
Jayhawk wrote: |
.... I imagine there are quite a few folks out there that would like to see this site go away..... |
The scary thing with your statement Jay is that some of those people that you are talking about are members of this site! |
If you can link them it shouldn't be too difficult to at least kick those members? Or is it member's zombie PC's you're talking about? Then they should at least be warned of malware at their PC's. |
_________________ deadified fake websites) x 374
x11 x a couple
Yes we can! (with a bit of help) |
|
|
|
|