racknerd, why do you always permit 107.173.42.94 to abuse again and again

apollo15

Whats your badge number?

inoricat

It seems iptables -J DROP is a lost art nowadays. You should try it OP

markrao888

Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

Mainfrezzer

@markrao888 said:
Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

markrao888

@Mainfrezzer said:

@markrao888 said:
Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

markrao888

I alreay enchance my vps, but there are still many victims
https://linux.do/t/topic/2662508
https://linux.do/t/topic/2426372

It seemed many people support racknerd to do nothing, that surpirsed me!!!

Mainfrezzer

@markrao888 said:

@Mainfrezzer said:

@markrao888 said:
Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

Listen, you cant be a muppet and then punish someone else for it.

Here is an example of a proper abuse log

• i cant post it as text as cloudflare REALLY dislikes it

markrao888

@Mainfrezzer said:

@markrao888 said:

@Mainfrezzer said:

@markrao888 said:
Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

Listen, you cant be a muppet and then punish someone else for it.

Here is an example of a proper abuse log

• i cant post it as text as cloudflare REALLY dislikes it

Do you know CPA and CPA how to log? Yes, you cant be a muppet and then punish someone else for it.

Mainfrezzer

@markrao888 said:

@Mainfrezzer said:

@markrao888 said:

@Mainfrezzer said:

@markrao888 said:
Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

Listen, you cant be a muppet and then punish someone else for it.

Here is an example of a proper abuse log

• i cant post it as text as cloudflare REALLY dislikes it

Do you know CPA and CPA how to log? Yes, you cant be a muppet and then punish someone else for it.

You not knowing how to setup proper logging doesnt make it magically possible to enforce "trust me bro". Thats a you problem.

I could just say you abused me. You used POST on my contact form. They should drop you asap!

CheepCluck

The only action here is to obviously call the FBI.