Update from the IT Army of Ukraine for May 19, 2022

By raincoaster on May 19, 2022 • ( 1 )

Yeah, I’ve gotta come up with a snappier title for these, eh?

In any case, just like it says on the tin, here are not one! but two! updates for guerrilla supporters around the world from the IT Army of Ukraine on Telegram. I’m putting the English first because SEO, bitches!

Also, cautious Twitter users should take note of a rumour that someone or someones are reporting accounts using the #OpRussia hashtag, so sanitize your account or consider locking it while the heat is on. I locked mine, but then thought “fuckit, last time they had to go back to 2012 to find reportable tweets, and I got unsuspended in hours.” So, I’m just out there in cyberspace with my ass hanging out, as per usual.

We came up with a new tool – an attack automation bot

We’ve noticed that not everyone can launch attacks at one time, and it sometimes prevents us from reaching our full potential. From now on, you can grant access to your cloud resources to our bot that will launch a coordinated attack from all the available servers. More info (https://itarmy.com.ua/bot/?lang=en)

У нас з’явився новий інструмент – бот для автоматизації атак

Ми помітили, що не всі можуть запускати атаки у той час коли це потрібно, тому атаки не завжди проходять максимально ефективно. Але відтепер кожен бажаючий може надати свої хмарні ресурси боту, який буде централізовано запускати атаку одночасно з усіх отриманих серверів. Детальніше (https://itarmy.com.ua/bot/)

[And now, on to the target list announcement]

Target List and Attack Parameters

Great job! Russian local media have been complaining that they still can’t spread propaganda, the airline ticket sales have been down, and “NashStore” has switched to the new IP addresses.

Today let’s support our colleagues attack on the online platforms for real estate selling and renting. We’d also stick to some of the previous targets (we’ve already added them to “Death by 1000 needles” and “mhddos_proxy”).

Чудові результати! Російські регіональні змі досі жаліються, що не можуть публікувати пропаганду, квитки на деяких сайтах авіакомпаній стало купувати складніше, а “NashStore” сховався за іншими ip адресами.

Сьогодні давайте підтримаємо наших колег в атаці на онлайн сервіси продажу та оренди нерухомості. Також актуальними залишаються деякі ресурси з попередніх публікацій, їх додано в налаштування “Death by 1000 needles” та “mhddos_proxy”.

https://nashstore.ru/
95.181.181.62 (80/tcp, 443/tcp)
https://store.nashstore.ru/
95.181.181.18 (80/tcp, 443/tcp)
https://cdnv.nashstore.ru
178.176.128.128 (80/tcp, 443/tcp)

https://msk.etagi.com/realty_rent/
194.186.36.26 (80/tcp, 443/tcp)
194.186.36.25 (80/tcp, 443/tcp)
https://move.ru/arenda_kvartir/
5.178.83.44 (21/tcp, 22/tcp, 25/tcp, 80/tcp, 443/tcp)
https://api-v4.move.ru/arenda_kvartir/
188.68.213.148 (22/tcp, 80/tcp, 443/tcp)
https://spb.move.ru/arenda_kvartir/
188.68.213.148 (22/tcp, 80/tcp, 443/tcp)
https://admin.move.ru/login
5.178.83.44 (21/tcp, 22/tcp, 25/tcp, 80/tcp, 443/tcp)
https://www.realtymag.ru/novostroyka/prodazha/
31.131.253.99 (22/tcp, 80/tcp, 443/tcp)
https://kabinet.realtymag.ru
31.131.253.99 (22/tcp, 80/tcp, 443/tcp)
https://www.cmlt.ru/
193.104.241.10 (80/tcp, 443/tcp)
https://b2b.cmlt.ru/
193.104.241.10 (80/tcp, 443/tcp)
https://tennis.cmlt.ru/
193.104.241.10 (80/tcp, 443/tcp)
https://ksota.ru/catalog/kvartiry/arenda/
185.114.245.128 (21/tcp, 22/tcp, 80/tcp, 443/tcp)
https://new.ksota.ru/Complex/?complexId=50555
5.178.80.182 (80/http, 443/tcp)
https://youla.ru/all/nedvijimost
5.61.236.235 (80/tcp, 443/tcp)
https://www.ligakvartir.ru/moskva
31.184.218.152 (21/tcp, 22/tcp, 25/tcp, 80/tcp, 443/tcp)
https://onrealt.ru/novosibirsk/snyat-kvartiru-na-dlitelnyj-srok
82.202.166.107 (22/tcp, 80/tcp, 443/tcp)
https://10-img.onrealt.ru
82.202.163.51 (22/tcp, 80/tcp, 443/tcp)
https://balancer.onrealt.ru/
92.63.111.226 (21/tcp, 22/tcp, 25/tcp, 80/tcp, 443/tcp, 3306/tcp)
https://sdaminfo.ru/voronezh/poisk-chas/
51.250.35.200 (80/tcp, 443/tcp)
https://m.sdaminfo.ru/balashiha/
51.250.35.200 (80/tcp, 443/tcp)
https://cabinet.sdaminfo.ru/login
51.250.35.200 (80/tcp, 443/tcp)
http://www.arenda-lider.ru/
217.25.90.189 (21/tcp, 22/tcp, 25/tcp, 80/http, 3306/tcp)
https://www.mirkvartir.ru/%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0/
81.177.164.124 (80/tcp, 443/tcp)
https://cabinet.mirkvartir.ru/
81.177.164.124 (80/tcp, 443/tcp)
https://arenda.mirkvartir.ru/%D0%9D%D0%BE%D0%B2%D0%BE%D1%81%D0%B8%D0%B1%D0%B8%D1%80%D1%81%D0%BA%D0%B0%D1%8F+%D0%BE%D0%B1%D0%BB%D0%B0%D1%81%D1%82%D1%8C/%D0%9D%D0%BE%D0%B2%D0%BE%D1%81%D0%B8%D0%B1%D0%B8%D1%80%D1%81%D0%BA/
81.177.164.124 (80/tcp, 443/tcp)
https://renta36.ru/
91.201.52.90 (21/tcp, 22/tcp, 25/tcp, 80/tcp, 443/tcp)
https://www.domofond.ru/arenda-kvartiry-sankt_peterburg-c3414
146.158.52.9 (80/tcp, 443/tcp)
146.158.54.9 (80/tcp, 443/tcp)
146.158.48.9 (80/tcp, 443/tcp)
http://api.domofond.ru/
146.158.48.7 (80/tcp, 443/tcp)
146.158.54.7 (80/tcp, 443/tcp)
146.158.52.7 (80/tcp, 443/tcp)
https://www.bn.ru/arenda-kvartiry/
92.255.54.70 (21/tcp, 22/tcp, 80/tcp, 443/tcp, 3306/tcp)
https://anspb.ru/offers/residential/rent/flats/long-time
109.167.202.114 (21/tcp, 22/tcp, 80/tcp, 443/tcp, 3306/tcp)
https://thelocals.ru/snyat-kvartiry-moskva
178.132.207.202 (22/tcp, 80/tcp, 443/tcp)
http://www.vezdearenda.ru/news/posutochnaya-arenda-kvartir-v-sankt-peterburge-ot-kompanii-vezdearenda/
77.222.61.167 (21/tcp, 22/tcp, 80/tcp, 443/tcp, 3306/tcp)
http://visitpiter.ru/arenda-kvartir-piter-posytochno.php
194.186.48.25 (21/tcp, 22/tcp, 25/tcp, 80/tcp, 443/tcp)