New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Also be sure to document everything properly and also be sure to move your documentation to another country every hour or so.
When it's over go and sue the living hell out them!
yes i have a good lawyer here and a jurist one , also we have called to 112 (urgency number) to have note of this aubuse.
I want to know how long it will take to return to normal or data migration.
for what i understand is take it prefix with prefix (ipv4) and for the moment we dont know what is look for only is a child pornographic (seems some chat online) . What is doing is put some kind of server in each subnet and let him some hours.... is strange anyway. I will keep update in our whmcs portal the subnets what we can put them in the greetunel .
best of luck my romanian brother
Jesus @cociu take care mate, I wish you all the best and hopefully the trolls can back off for a while, at least until things have settled.
This sounds like they are trying to figure out which server is hosting a hidden service or similar on darkweb, when you pull specific prefix and hidden service goes down, then try one by one or binary search it.
How would they have found out it was hosted at hostsolutions if it was a secretservice? They'd know the real IP in that case.
Francisco
Perhaps that’s why the police turned off @cociu’s entire network, and it seems they’ll be tracing it from here.
....no, you don't get it.
They either know the exact IP that is hosting the service, or they know nothing.
There's no way they can trace it to an ASN and then not know the exact IP.
I've worked with the police in the USA, Canada, & Luxembourg. They all work this way. Infact the Luxembourg police were insistent on resolving the complaint without them making a DC trip because they knew it's damaging/disruptive to innocent customers. That ultimately hurts their local economy and may spook companies from wanting to do business there.
I'm biting my tongue at the moment. Maybe RO's backwards but given the shit that used to host inside their borders in the past, I'm not so sure.
Good luck to all those affected.
Francisco
i had 2 posibility : 1 let them to install a "router" before our main core, or suspend our and continue with this mess, for me the first option was totaly not acceptable meantime i dont knw what is this machine and i risck to espose all network so ... This night i have talk "with a friendly police " from this equipe (6 persons) and was told me this action is made in paralele with another country , also hi personal estimation was "i think we will finish in some hours" ....
What is strange like @Francisco was told , normaly is know the ip and is easy to locate a service via ip adress (at least for us) , unfortunatly is not share us this data because i ask them in order to make this process more fast.
The police can and will get court orders for port mirroring. In those cases you provide them PCAP's, or a server with a switch port mirroring the traffic to them.
I would check whatever documents they gave. Every single complaint i've ever had from all 3 jurisdictions I've worked with includes IP's. Infact I've had contact from police divisions in countries outside of those jurisdictions and they always include an IP, domain, etc, in their requests.
Again, either Romania's completely backwards and no one should ever host in that country ever again, or you're not noticing the IP in the court order.
Francisco
i have solved a warrant with fbi , they were easy to communicate and cooperative. Before threatening to block network via isp or pulling outserver. (but must issue image of vps to solve)
normally i got abuse notice, for child absue content from cybertip(thanks they scanning few of subnets) which include ip and url so its easy to takedown rather wait for authority action.
no idea how video stream tracebacked. i understand handling local authorities is a pain.
wishing @cociu to back soon. avoid taking risk and focus on business with legit clients always.
update : we have isolate some racks (dedicated servers in all ) and we work to put all the rest online , this will take time because we need to change the network structure. (some hours)
In times of pandemic, when there are more than 10.000 new confirmed cases per day in Romania, when romanian people can't go outside without a written declaration of where and what; SRI has nothing better to do than to disrupt for hours, thousands of active online services which generate profits and pay taxes, in order to convince the company into data center mirroring. And then they wonder why people run away from such country. Doh!
By taking down the main router and the owner came out and said he was working with police, won't that alert the suspect(s)?
I agree with others, that they should narrow it down first.
I dunno...
Unless they are interested in knowing what happens there at the DC level, even though more discretion would likely be more efficient for that.
Maybe the government is trying to show that they are a good bet for some industries, and that they are serious in dealing with illegal activity. Timing is interesting:
https://tekdeeps.com/the-president-of-romania-he-klaus-iohannis-officially-opens-the-9th-edition-of-gotech-world-2020-the-new-reality/
There is no discretion because they need to teach him a lesson. Voxility data center had the same issue, but they had a good lawyer and avoided a public scene, restoring it's connection fast. However, they ended up mirroring all data center traffic to Romanian Intelligence Service. There is no privacy in Romania, only a feeling of privacy to contain and control it's poverty.
Privacy is luxurious commodity. Don't expect it for budget service
actually even premiun service will not offer such luxury. Hard times to live in.
Great, my servers online again after more than 24 hours down.
Sad. 24 hours is an extremely long downtime.
Yeah, but it is still within 99% of yearly uptime and 97% of 60 days uptime.
you are lucky because still have to wait for many others .... due time give for the court is 20.00 after this is obligate to let us to function. I will update lather.
So we will all be back online at 8/soon?
Sterkte @cociu
Hey brother,
I was hoping if you could share the docs (if it is not a legal issue that is). Would love to know what and protect ourself, just incase some other country decides to pull the same
You guys still looking to move after the Hetzner raid eh?
...It wasn't a raid -_-. So judgmental.
And I am still salty about them just swapping my disk without any notification. Different case. Oh and yeah, it wasn't CP either (thanks god). Just incase anyone was wondering.
Seem I missed something recently ... Long story short ?
I'm more interested in the full story...