DDOS attack by CraftLandia.

[Dazureus]

Sadface.

 

[Northac]

So are we still pursuing this guy or have we decided to just mind our own business?

Well yes and no. What can be legally done has been, all the reports we can file and people we can tell have been filed and told. We even had a forum signature made to help spread awareness about what they are doing.
As a communtiy we decided that we WILL NOT lower outselves to their level and retaliate. First because it is illegal and we do not support such actions, and secondly no good will come from such actions.

Yes it does seem like nothing is being done, but these reports take time to be filed, gone through and action taken.
And we will not be "kept in the loop" by those conducting the investigations, we no longer have a "need to know". It falls to the ISPs and law enforcement to finish what we started, and since it is international it may take a while.

Kainzo and company have done an amazing job getting the server back up and protected as fast as they did, usally takes a few weeks and they did it in less than one.

If you do feel that you need to do something, donate some towards the upkeep of the protection (not manditory).
But please don't do anything illegal or that could cause fallout to hit us or the server, it's not worth it.

 

[j2gay]

Well yes and no. What can be legally done has been, all the reports we can file and people we can tell have been filed and told. We even had a forum signature made to help spread awareness about what they are doing.
As a communtiy we decided that we WILL NOT lower outselves to their level and retaliate. First because it is illegal and we do not support such actions, and secondly no good will come from such actions.

Yes it does seem like nothing is being done, but these reports take time to be filed, gone through and action taken.
And we will not be "kept in the loop" by those conducting the investigations, we no longer have a "need to know". It falls to the ISPs and law enforcement to finish what we started, and since it is international it may take a while.

Kainzo and company have done an amazing job getting the server back up and protected as fast as they did, usally takes a few weeks and they did it in less than one.

If you do feel that you need to do something, donate some towards the upkeep of the protection (not manditory).
But please don't do anything illegal or that could cause fallout to hit us or the server, it's not worth it.

Well said.

 

[CheezDrakon]

They are funny to think DDoSing someones server will make it the best server. Yet its only a matter of time till that server falls it self. When others attack them with DDoS.

 

[j2gay]

They are funny to think DDoSing someones server will make it the best server. Yet its only a matter of time till that server falls it self. When others attack them with DDoS.

They will fall because they are jackholes, we will not advocate stooping to the level of jackhole in order to fight back.

 

[Kidwatson]

Lol I just checked out their site and they have 25 people on average... Imagine how pissed they will be when the new map releases and we have around 100 people playing everyday. Lol. HC has over 100 people on their site everyday and that's just on the site. Man I can't wait for the new map and not for this bs with the ddos that went on, but so I can play! It's been a while.

 

[LightningCape]

Herocraft is awesome. nuff said.

 

[jazza411]

If the server is DDoS'd when the new map comes out I am going to find the closest Brazilian and kick them in the nuts.

 

[Mrk3004]

I made some corrections to the content of portuguese email for GVT:

Chegou ao nosso conhecimento que um dos seus subscritores, RICARDO ALEXANDRE MOURA RUBIO, está envolvido em várias atividades ilegais. Especificamente, o indivíduo acima mencionado está ativamente envolvido na distribuição de software pirata além de orquestrar ataques distribuídos de negação de serviço (DDoS) contra vários sites, serviços e pessoas
físicas.

O indivíduo é conhecido por ter sido associado com os endereços IP seguintes nos tempos indicados:

189.58.32.65.dynamic.adsl.gvt.net.br (08/09/12 @ incerto)
201.22.88.65.dynamic.adsl.gvt.net.br (08/10/12 @ 11:09 CST)

O indivíduo está ativamente distribuindo software pirateado através de um domínio que ele possui,
http://www.craftlandia.com.br/.

O software pirata está localizado na http://www.craftlandia.com.br/craftlandia.zip.

Os proprietários da propriedade intelectual deste software já foi notificado, e a empresa que hospeda o site também.

O proprietário do site está também ativamente envolvido em ataques de negação de serviço, que são ilegais. Temos registros de IP destes ataques, bem como registros de bate-papo IRC do proprietário do site de admitir esta e ameaçar continuar. Esta não é a primeira vez que esse indivíduo esteve envolvido neste tipo de comportamento; Craftlandia.com.br e Ricardo Rubio é amplamente conhecido por orquestrar esses ataques contra serviços concorrentes.

Estamos ansiosos para receber um retorno, já que este é um assunto urgente. Por favor, veja a lista de evidências a seguir.

Atenciosamente,
A Comunidade Herocraft

http://www.craftlandia.com.br/craftlandia.zip - cópia pirata do Minecraft hospedado em um servidor GoDaddy por Craftlandia

http://www.craftlandia.com.br/site/como-jogar - explica (em Português) como instalar uma cópia pirata de Minecraft

http://pastebin.com/2azysbST - IRC Log 1 (spunkiiez / spkz é um apelido usado pelo proprietário de Craftlandia)

http://pastie.org/4446456 - IRC Log 2 ("spkz - you had the opportuniy to end up things..." Ele está se referindo a acabar com o ataque DDoS)

Mail to Center for Information and Coordination of Point BR <[email protected]>

It has come to our attention that http://www.craftlandia.com.br, is violation of your Terms of Service and may also be involved in illegal activity.
Specifically, the aforementioned site is actively involved in the distribution of pirated software as well as orchestrating distributed denial of service attacks (DDoS) against multiple competing sites.

The site is currently blocking all non-Brazilian IPs from accessing any page of their site, so a Brazilian proxy or a cache tool must be used to view this page.

Denial of service attacks are illegal in the US under the Computer Fraud and Abuse Act (18 U.S.C. § 1030). We have IP logs of these attacks as well as IRC chat logs of the owner of the site admitting to this and threatening to continue. This is not the first time this individual has been involved in this type of behavior; Craftlandia.com.br is widely known for orchestrating these attacks against their competitors.

We look forward to hearing back from you soon as this is an urgent matter. Please see the list of evidence below.

Regards,
The Herocraft Community

http://www.craftlandia.com.br/craftlandia.zip - Pirated copy of Minecraft hosted on a GoDaddy Server by Craftlandia
http://www.craftlandia.com.br/site/como-jogar - Explains (in Portuguese) how to install a pirated copy of Minecraft
http://pastebin.com/2azysbST - IRC Log 1 (spunkiiez/spkz is an alias used by the owner of Craftlandia)
http://pastie.org/4446456 - IRC Log 2 ("spkz - you had the opportuniy to end up things..." He is referring to ending the DDoS attack)

Details of Ricardo Alexandre Moura Rubio
CPF (register of natural person): 007.434.199-52
Telephone: +55 44 3269-7940
Address:
Street Arthur Thomas,
edifice Arthur Thomas,
apartment 804 259
CEP (zip code): 87013-010
State: Paraná
City: Maringá

------------------
EDIT:

Cert reply 1:

> Date: Thu, 6 Sep 2012 11:34:25 -0300
> From: [email protected]
> To: [email protected]; [email protected]; [email protected]; [email protected]
> CC: [email protected]
> Subject: Re: Illegal Activity
>
> Hello,
>
>I'm investigating this incident
>
> Thank you for reporting
> --
> Luiz Eduardo Roncato Cordeiro
> CERT.br
> <[email protected]>
> http://www.cert.br/
>

--------------------------------

EDIT:

Godaddy reply 1:

From: [email protected]
To: [email protected]
Subject: RE: Hosting pirated files
Date: Thu, 6 Sep 2012 10:20:46 -0700

Dear Sir or Madam,

Thank you for contacting Go Daddy's Network Abuse Department.

GoDaddy.com does not allow illegal content on our customer's websites. However, as a hosting provider, it is not our place to determine if the site you have mentioned is actually engaging in illegal activities.

GoDaddy.com regularly works with courts and law enforcement from the local to the international level. If you suspect any of our customers are using their website to engage in any illegal activities, please help us by contacting your local law enforcement agency, and request them to investigate this situation.

Law enforcement can contact us at [email protected] if they need the website(s) taken down, or if they need more information pursuant to an investigation. We have a long-standing history of cooperation with law enforcement and the courts.

If you find that you are unable to contact the registrant because the contact information given on the Whois database is invalid, please write to [email protected] and let them know.

Regards,
Network Abuse Department
GoDaddy.com
ARID1009

----- ~ -----

[DOUBLEPOST=1347019662,1346928922][/DOUBLEPOST]I found various legal processes against him, i will act with caution. But that's a personal thing, he will pay ...

You Can Run.... But You Can't Hide!

 

[Connor5454]

Thanx Kain for fighting back with everything you have left.

N-o w-o-r-r-i-e-s,
He will probs get an immense fine and 10+ years jail time,
ALSO

2:20 Is Craftlandia spawn. THAT is called competition? they should probably be in like 3000's server ranks. not first. Its a fucking terrible server >.> Lava pillars >.> Modern roads TERRIBLE housing <,< and finally floating structures and no order, just chaos.
these guys wanna be first? They are first on my hit list. Time to go to brazil.

ur right! go kick some ass man!