Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

cybersecurity companies scanning my chickenfarm, report to RIPE/IANA?

dbadudedbadude Member

I noticed in my firewall log many blocked ip's originating from an eu funded cybersecurity firm. What is the nettiquette again for this? This is not white hat hacking, i never gave a go hacking my sites. Report abuse at RIPE/IANA?

«1

Comments

  • dbadudedbadude Member

    This supposed to be white hat hacking/cybersecurity company has actually nice big IP4 ranges so it was easy to identify them. This smells like large scale government funded espionage. Too bad my chickens are doomsday chickens, so no chance for them.

  • bbn12bbn12 Member

    post the names, so other folks can block these IP subnets.

  • RickBakkrRickBakkr Member, Patron Provider, LIR

    Registries like RIPE and IANA exist to allocate and register uniquely addressable internet resources, nothing more. They are not law enforcement, nor are they courts.

    In my view, that’s a good thing. It allows providers to make their own judgments about acceptable use, within the boundaries of their local legal framework. That flexibility is essential in a global industry like ours.

    For example, we operate as a Dutch group of companies and are therefore governed by Dutch law. IANA, on the other hand, is a US-based organization. It would be problematic if a registry were to impose US legislation on non-US operators simply because of where the registry is incorporated. Even within a service region, legislation can have its differences. Some things that are totally legal in The Netherlands, are not with our neighbouring countries.

    Keeping registries neutral ensures a clear separation between coordination of resources and enforcement of law, which ultimately benefits the stability and fairness of the internet ecosystem.

    The sole thing you could and should do, is report this to them and possibly their network provider(s). From your end, you could proactively ban the IPs or the IP ranges in your local firewall(s).

  • dbadudedbadude Member

    I remember the netiquette was don't be evil. Respect to your neighbors, don't look into private data etc.. i guess governments now have carte blanche, how the world changed since internet came around.

  • dbadudedbadude Member

    @bbn12 said:
    post the names, so other folks can block these IP subnets.

    No i wont post this as this can be illegal act in some countries. I am just wondering what is the usual path reporting abusive behaviour on the net. I guess nobody cares.

  • dbadudedbadude Member

    @RickBakkr said:
    The sole thing you could and should do, is report this to them and possibly their network provider(s). From your end, you could proactively ban the IPs or the IP ranges in your local firewall(s).

    yeah banning their ranges is a possibility however at some point they will use consumer ip ranges to hide their tracks. So best is to let them running and keep a eye on their behaviour and make honeypots to detect this kind of hacking more quickly.

  • rcy026rcy026 Member

    What is your definition of 'hacking'?
    I have lots of connection attempts in my firewalls, that does not necessarily mean they are attempting to hack me. It could be anything from webcrawlers or indexers gathering statistics about webservers or ip usage or whatever statistics people are interested in, or even a misconfigured dns server somewhere pointing at my ip's. A mere connection attempt does not qualify as 'hacking' in my book.

  • xvpsxvps Member

    Scanning is not hacking and is rarely illegal.

    You can report it to abuseipdb.com, but nobody else is interested in your overreaction and false accusations of hacking.

    If they actually are doing something illegal, post proof and name and shame them.

    Otherwise, you should return to reality and use your time on real issues.

    Thanked by 1forest
  • sillycatsillycat Member

    Welcome to the internet. It's your job to make sure the requests don't come, it's not their job to make sure the requests don't get sent.

  • zedzed Member

    I think reporting it to LET is the best thing to do.

  • MurvMurv Member, Megathread Squad

    @sillycat said: It's your job to make sure the requests don't come

    But whose job is it to make sure I come?

  • olokeoloke Member, Host Rep

    @Murv said:

    @sillycat said: It's your job to make sure the requests don't come

    But whose job is it to make sure I come?

    @emgh or @barbaros depending on availability

    Thanked by 3Murv barbaros emgh
  • LexLex Member

    @xvps said: Scanning is not hacking and is rarely illegal.

    I'd say that's false (subjectively). If you start scanning left and right from your server, you will 10000% get a report for this activity and your provider will either tell you to cut the shit or ignore it (not always).

  • zedzed Member

    @Lex said:

    @xvps said: Scanning is not hacking and is rarely illegal.

    I'd say that's false (subjectively). If you start scanning left and right from your server, you will 10000% get a report for this activity and your provider will either tell you to cut the shit or ignore it (not always).

    Provider not wanting to deal with complaints doesn't make it illegal.
    I'm not convinced you understand what "illegal" means.

    Thanked by 2Obelous forest
  • LeviLevi Member

    This is nothing in compare to llm crawlers.

  • rpqurpqu Member

    @Levi said:
    This is nothing in compare to llm crawlers.

    At least llm crawlers is generated in response of actual humans... Right?

  • dbadudedbadude Member

    @rcy026 said:
    What is your definition of 'hacking'?
    I have lots of connection attempts in my firewalls, that does not necessarily mean they are attempting to hack me. It could be anything from webcrawlers or indexers gathering statistics about webservers or ip usage or whatever statistics people are interested in, or even a misconfigured dns server somewhere pointing at my ip's. A mere connection attempt does not qualify as 'hacking' in my book.

    port scanning is.

  • 384_cz384_cz Member

    BLATANT TAXPAYER RIPOFF

  • 384_cz384_cz Member

    as this can be illegal act in some countries.

    Gay sex is also illegal in some countries

  • dbadudedbadude Member

    @384_cz said:
    BLATANT TAXPAYER RIPOFF

    okay then

  • LeviLevi Member

    @rpqu said:

    @Levi said:
    This is nothing in compare to llm crawlers.

    At least llm crawlers is generated in response of actual humans... Right?

    You have right to believe.

  • xvpsxvps Member

    @384_cz said:

    as this can be illegal act in some countries.

    Gay sex is also illegal in some countries

    So gay sex is hacking?

  • dbadudedbadude Member

    why does all threads end in gay sex on this site?

    Thanked by 1jsg
  • xvpsxvps Member

    @dbadude said:
    why does all threads end in gay sex on this site?

    Because gay sex is low-end port penetration ... aka hacking.

  • NetralexNetralex Member
    edited April 1

    @dbadude said: i never gave a go hacking my sites

    Welcome to the Internet, getting connected to it is implied consent at this point.

  • NetralexNetralex Member
    edited April 1

    @xvps said:

    @dbadude said:
    why does all threads end in gay sex on this site?

    Because gay sex is low-end port penetration ... aka hacking.

    I think @Rubben is the subject matter expert on this, and I think I will wait for his conclusion on this dilemma.

    Thanked by 2tentor Rubben
  • @xvps said:

    @384_cz said:

    as this can be illegal act in some countries.

    Gay sex is also illegal in some countries

    So gay sex is hacking?

    Probing for backdoors en masse can be kinda like gay sex. Or so what I've heard from my uncles friends neighbor

  • RubbenRubben Member

    @dbadude said:
    why does all threads end in gay sex on this site?

    its the rubben effect

    Thanked by 3Murv oloke Nekopara
  • rcy026rcy026 Member

    @dbadude said:

    @rcy026 said:
    What is your definition of 'hacking'?
    I have lots of connection attempts in my firewalls, that does not necessarily mean they are attempting to hack me. It could be anything from webcrawlers or indexers gathering statistics about webservers or ip usage or whatever statistics people are interested in, or even a misconfigured dns server somewhere pointing at my ip's. A mere connection attempt does not qualify as 'hacking' in my book.

    port scanning is.

    Then the obvious follow up question has to be what is your definition of port scanning? How many different ports needs to be tested and in what timeframe? Are we talking about 10 different ports in a minute or like 1000 ports per second?

Sign In or Register to comment.