Search for your domain name alongside the string dedose007 in public code repositories. Many researchers forget to remove domain names from their public PoC scripts.
The RRUS framework utilizes a proprietary echo request format. Run a packet capture looking for ICMP packets with a TTL starting at 107. dedose007 rrus work
If you are responsible for network security, search your logs for the signature of the RRUS user agent and review your external subdomain enumeration practices. Whether you view dedose007 as a white hat or a grey hat, ignoring their work puts your infrastructure at risk. Search for your domain name alongside the string