# Be Aware Russian DDOS Hacker Ivan Ivanov of Khabarovsk **URL:** \ **Category:** NGINX\ **Created:** [August 12, 2011, 12:01pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629 "2011-08-12T12:01:23Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![luislavena](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/l/0ea827/32.png) [@luislavena](https://www.ruby-forum.com/u/luislavena)\ **Post date:** [August 12, 2011, 12:01pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629/1 "2011-08-12T12:01:23Z")
Since last week, Our website [SuntekStore.com](http://SuntekStore.com) has been under DDOS (Distributed Denial Of Service)attack by someone who goes by the name of Ivan Alekseevich Ivanov from Khabarovsk, Russia and he demanded $3,500 to stop the attack. We ignored him and decided to try Amazon Cloud Service. Please beware of Russians!! I also searched the Internet for better ways to prevent DDOS ATTACK. All I got was ‘prevention is better than cure’. It said that DDOS happens because of vulnerable softwares/applications running on a machines in a particular network. If there is any good idea, please tell me here:) First Name - Ivan Alekseevich Last Name - Ivanov country - Russia City - Khabarovsk removed\_email\_address@domain.invalid Above is what we know about the hacker. Posted at Nginx Forum: > **[Be Aware!! Russian DDOS Hacker Ivan Ivanov of Khabarovsk](https://forum.nginx.org/read.php?2,213729,213729#msg-213729)** > > Since last week, Our website SuntekStore.com has been under DDOS (Distributed Denial Of Service)attack by someone who goes by the name of Ivan Alekseevich Ivanov from Khabarovsk, Russia and he demanded $3,500 to stop the attack. We ignored him and... ---
**Author:** ![ex2501](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/e9bcb4/32.png) [@ex2501](https://www.ruby-forum.com/u/ex2501)\ **Post date:** [August 12, 2011, 12:34pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629/2 "2011-08-12T12:34:50Z")
Sounds like a dark PR of Amazon Cloud Services. Well, I can image, hating Russians is profitable… Would it be possible to tell me your name, residence address and occupation please? ----- ex2501 [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > idea, please tell me here:) > > First Name - Ivan Alekseevich > Last Name - Ivanov > country - Russia > City - Khabarovsk > [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) > > Above is what we know about the hacker. – Regards, Valery K. ---
**Author:** ![ex2501](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/e9bcb4/32.png) [@ex2501](https://www.ruby-forum.com/u/ex2501)\ **Post date:** [August 12, 2011, 1:40pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629/3 "2011-08-12T13:40:32Z")
I got another similar threat for another Russian who’s name was _Igor_ Sysoev. He wanted $100,000,000,000!!! Just kidding! Out of serious though there are cloud services to help mitigate against DDoS attacks. I have friends that work for this one: [Authoritative DNS - Managed DNS Services - Vercara](http://www.ultradns.com/Services/SiteProtect) which starts at $500 a month. I’d be happy to get you some information. but I think there are others that may be less expensive. Rami On Fri, Aug 12, 2011 at 6:34 AM, Valery K. \< ---
**Author:** ![ex2501](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/e9bcb4/32.png) [@ex2501](https://www.ruby-forum.com/u/ex2501)\ **Post date:** [August 12, 2011, 7:28pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629/4 "2011-08-12T19:28:42Z")
If things are so complex, could you at least ban him? Jim O. wrote: > I don’t know his motives but such stories of DDoS attacks originating in > > > > Service. > > > City - Khabarovsk > > > [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) > > > > > > Above is what we know about the hacker. – Best regards, Valery K. ---
**Author:** ![ex2501](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/e9bcb4/32.png) [@ex2501](https://www.ruby-forum.com/u/ex2501)\ **Post date:** [August 12, 2011, 3:36pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629/5 "2011-08-12T15:36:19Z")
On 8/12/11 6:34 AM, Valery K. wrote: > Sounds like a dark PR of Amazon Cloud Services. Well, I can image, hating > Russians is profitable… I don’t think this has anything to do with Amazon. > Would it be possible to tell me your name, residence address and occupation > please? I can tell you that he uses a proxy server in Texas, but my best guess is he’s from Hong Kong based on his email domain. I don’t know his motives but such stories of DDoS attacks originating in states of the former Soviet Union, and in China for that matter, are not that uncommon. In fact, the huge recent DDoS attack on [WordPress.com](http://WordPress.com) was based in China. So maybe we shouldn’t trust Chinese either. (j/k) However, there are criminals everywhere. > > It said that DDOS happens because of vulnerable softwares/applications – Jim O. ---
**Author:** ![ex2501](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/e9bcb4/32.png) [@ex2501](https://www.ruby-forum.com/u/ex2501)\ **Post date:** [August 12, 2011, 7:54pm UTC](https://www.ruby-forum.com/t/be-aware-russian-ddos-hacker-ivan-ivanov-of-khabarovsk/210629/6 "2011-08-12T19:54:42Z")
On 8/12/11 1:28 PM, Valery K. wrote: > If things are so complex, could you at least ban him? I don’t understand what you see as being “complex”. It’s pretty straightforward actually. As it happens though, I banned him and his IP hours ago, before I even made my reply. It won’t stop him from re-registering with a new email and IP, or simply joining the mailing list. Continuing to reply to this thread will, however, give him the attention that he desires. I suggest that everyone let the thread die. I hope my comments about origins of DDoS attacks are not hurting people’s feelings, but the truth is often inconvenient. Russian botnets are often used in DDoS extortion schemes. This is surely neither the place nor the time to discuss it, and I’ll be happy to discuss it privately with you anytime, but Russian based “botnets for hire” are widely known to exist and are available for this purpose. This is neither rumor nor innuendo. It’s fact. Here’s one of _many_ references to such gangs: > **[news](https://www.informationweek.com/latest-news)** > > news As I said, perhaps this is an inconvenient truth, but still it’s a fact. Also, as I said, there are criminals everywhere, including in my country. > > > > Since last week, Our website [SuntekStore.com](http://SuntekStore.com) has been under DDOS > > > > softwares/applications > > > > running on a machines in a particular network. If there is any good > > > > idea, please tell me here:) > > > > > > > > First Name - Ivan Alekseevich > > > > Last Name - Ivanov > > > > country - Russia City - Khabarovsk > > > > [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) > > > > > > > > Above is what we know about the hacker. – Jim O.