racknerd, why do you always permit 107.173.42.94 to abuse again and again

Comments

• apollo15 Veteran

  11:58AM

  Whats your badge number?

  Thanked by 1meowwcc
• inoricat Member

  12:55PM

  It seems iptables -J DROP is a lost art nowadays. You should try it OP
• markrao888 Member

  1:08PM

  Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

  If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.
• Mainfrezzer Member

  1:11PM

  @markrao888 said:
  Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

  If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

  You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.
• markrao888 Member

  1:14PM

  @Mainfrezzer said:

  @markrao888 said:
  Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

  If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

  You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

  This is like the log that somebody logged in your vps, what do you want more? give you the whole log?
• markrao888 Member

  1:20PM

  I alreay enchance my vps, but there are still many victims
  https://linux.do/t/topic/2662508
  https://linux.do/t/topic/2426372

  It seemed many people support racknerd to do nothing, that surpirsed me!!!
• Mainfrezzer Member

  1:23PM edited 1:24PM

  @markrao888 said:

  @Mainfrezzer said:

  @markrao888 said:
  Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

  If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

  You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

  This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

  Listen, you cant be a muppet and then punish someone else for it.

  Here is an example of a proper abuse log

  

  • i cant post it as text as cloudflare REALLY dislikes it

  Thanked by 1rpqu
• markrao888 Member

  1:29PM

  @Mainfrezzer said:

  @markrao888 said:

  @Mainfrezzer said:

  @markrao888 said:
  Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

  If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

  You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

  This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

  Listen, you cant be a muppet and then punish someone else for it.

  Here is an example of a proper abuse log

  

  • i cant post it as text as cloudflare REALLY dislikes it

  Do you know CPA and CPA how to log? Yes, you cant be a muppet and then punish someone else for it.
• Mainfrezzer Member

  1:40PM edited 1:45PM

  @markrao888 said:

  @Mainfrezzer said:

  @markrao888 said:

  @Mainfrezzer said:

  @markrao888 said:
  Yes, I enhance my vps security after that. But it doesn't stop this compromised machine from brute-forcing other oblivious users across the internet.

  If 'just dropping the IP' is the only lost art we need, then why do providers even bother having an Abuse department or AUP (Acceptable Use Policy)? An ISP that relies entirely on external victims to act as its free intrusion detection system is fundamentally broken.

  You haven't managed to provide anything that even resembles abuse. The only logs were the IP using post on some API. That's not abuse. If you have some proper logs, come again.

  This is like the log that somebody logged in your vps, what do you want more? give you the whole log?

  Listen, you cant be a muppet and then punish someone else for it.

  Here is an example of a proper abuse log

  

  • i cant post it as text as cloudflare REALLY dislikes it

  Do you know CPA and CPA how to log? Yes, you cant be a muppet and then punish someone else for it.

  You not knowing how to setup proper logging doesnt make it magically possible to enforce "trust me bro". Thats a you problem.

  I could just say you abused me. You used POST on my contact form. They should drop you asap!
• CheepCluck Member

  1:40PM

  The only action here is to obviously call the FBI.

  Thanked by 3Mainfrezzer Hitori0221 rpqu