treesmokah
treesmokah
About
- Username
- treesmokah
- Joined
- Visits
- 1,108
- Last Active
- Roles
- Member
- Thanked
- 811
Comments
-
Fresh batch of sanctions against Aeza's new shell companies, and Yalishanda as a bonus. https://home.treasury.gov/news/press-releases/sb0319 https://www.minister.defence.gov.au/media-releases/2025-11-20/sanctions-imposed-russian-cybercrime-service-…
-
The list of IOCs/C2's taken down by Endgame 3.0 https://threatfox.abuse.ch/browse/tag/OpEndgame/ Hits sorted by provider: 82 51396|PFCLOUD, DE 81 24940|HETZNER-AS, DE 38 215826|PARTNER-HOSTING-LTD, GB 36 396073|MAJESTIC-HOSTING-01, US 26 210644|AEZ…
-
CrazyRDP seizure confirmed, they were indeed located in The Hague. Looks like besides malware, they also had copious amount of CSAM. (Image) https://nltimes.nl/2025/11/14/dutch-police-seize-thousands-servers-used-ransomware-child-sex-abuse-footag…
-
I have found the ASN that used to host CrazyRDP nodes, which is also down and of course also operated by Serverion. It used InterEdge upstream which is Serverion's "transit network", operating in similar fashion to CrazyRDP's one. HAWAIIA…
-
MasterCard's threat intel company, Recorded Future made a blog post about Aurologic/Combahton, that goes over Aeza and their other malicious downstreams. We secured a LES backlink too, as they cited some posts https://www.recordedfuture.com/resear…
-
(Quote) You don't need anything, it works out of the box. They have a built in relaying server, and there is no need to self-host one, unless you have some issues with it.
-
Datapacket has introduced new policies, they now have AUP, DMCA, and DSA policies. Here is the new DDoS protection policy (Quote) But what I find more concerning, is the following policy which is also new and allows for very broad overreach (Quot…
-
(Quote) Yup, looks like it. I've heard of other providers also getting a boot from CDN77/DP for using them as a pre-filter. Again, a reasonable move from DP, but sucks. All it took was game hosting kids to ruin it all. For comparison, real enterpr…
-
(Quote) Sucks, we all benefit from more DDoS protection providers, but its completely reasonable for DP to pull the plug considering the issues these attacks brought. Hopefully their backup "game protection" infra at OVH won't get targete…
-
Still down, 16h and counting. So are many of their downstreams, which appeared to be singlehomed with NeoProtect. No further updates have been posted to their status page.
-
(Quote) Afaik pretty much their all infra was just dedis from Datapacket, rented. So if they were to get kicked out entirely, I could see it being a massive issue, larger than it already is.
-
(Quote) To be fair, I don't blame Datapacket for dropping them at all, realistically NeoProtect are a small customer abusing the fuck out of DP's dirt cheap, large capacity ddos protection. Datapacket charges only $100 for their "advanced"…
-
(Quote) They use them for pre-filtering basically, they have their own filtering for more sophisticated and application layer attacks, but all these big attacks are tanked by DP. NeoProtect doesn't have much of their "own" capacity, they …
-
https://rustdesk.com/ is amazing, its foss, you can self-host the relaying server, and even allows you to "brand" the end user application. I have used it many times, no complaints. Works as good as Anydesk.
-
What is your relation to ITM Nord/NordicVM, the known scammers that have been banned here before under different names? I suspect you will be utilizing their ASN for this location, as you don't have skylink transit on your own ASN (which also links …
-
(Quote) If this is the post you have in mind (Image) PQ/THE always bundled VPS with NS hosting from what I remember, so you can use these nameservers for anything you want. https://dns.the.hosting/ Also, looks like they started a "registar&q…
-
(Quote) That email was public on RIPE. Looks like they have updated it, and for whatever reason my archive links aren't working.
-
Krebs just covered it, seems like WorkTitans B.V. is one of MIRhosting shells. And MIRhosting is basically Serverius for the Russian market, they share(or shared) employees and operate from the same facilities. https://krebsonsecurity.com/2025/09/bu…
-
Great prices for PrivateLayer network dedis. Do you colo with them?
-
(Quote) Yup, forgot to write about that. Aeza.ru is also up. They are both now on StromWall, but their "dirty" ASN almost exclusively occupied by pharma, casinos and shit like that (Image) It used to be anycasted globally, but now it ap…
-
welcome
-
(Quote) Sanction evasion in plain sight, Aeza is back on Ace Data Centers, under a new shell company Hypercore Ltd (AS211522) https://bgp.tools/rir-owner/us.acedatacenter (Image) Several of their other subnets were also moved to this ASN and haven…
-
(Quote) Lame, there are starting to be other options at this price point. Especially when its not DMCA ignored anymore. Aeza's only competition(in my eyes) are other skid hosts from Lolzteam with Hetzner tunnels, its obviously not a serious provider…
-
(Quote) Good work man, thanks for taking it seriously.
-
Small update, aeza.net and aeza.ru are still gone, there is no indication from WHOIS that registry or registar is responsible for the suspension. Aeza team hasn't given any update as to why its still gone. They have setup "mirrors" for th…
-
(Quote) I can understand that one, caused by aeza refugees. $5 setup was nice while it lasted, and free was even better ;)
-
Indians ain't getting rid off fake certificate "stereotype" anytime soon.
-
(Quote) And its gone. (Image) https://bgp.tools/rir-owner/us.acedatacenter
-
Aeza is moving all the prefixes to their shell in Serbia, "Smart Digital Ideas DOO" (Image) https://apps.db.ripe.net/db-web-ui/query?searchtext=ORG-TA1914-RIPE (archive) They claim to specialize in VOIP https://smartdi.rs/ (archive)
-
Looks like 124x /24 is about to disappear from their network, thanks to one of their LIR's which happens to be an American company. Ace Data Centers to be specific - https://bgp.tools/rir-owner/us.acedatacenter They have announced these subnets ear…
-
Aeza has been sanctioned by US Treasury for Terrorism and Financial Intelligence together with UK's National Crime Agency (Quote) - (Quote) https://home.treasury.gov/news/press-releases/sb0185 (archive)
-
(Quote) He is from the USA. https://www.youtube.com/watch?v=5uPoDNEn3I0
-
(Quote) https://www.dictionary.com/e/slang/brony/ Its a rabbit hole I do not recommend digging in, tbh. Basically, some extra autistic individuals liking ponies quite a bit more than an ordinary person. It attracts a fair share of degenerates too, …