4 ms·
I see a large slice of that is rsync, can't help but think they may have hit a few public mirrors. Same for FTP. :-)
by Nux 9y ago
I see a large slice of that is rsync, can't help but think they may have hit a few public mirrors. Same for FTP. :-)
- lemagedurage 9y agoYeah. The article seems too sensational because they don't account for that. They found 12PB of public data of which some wasn't supposed to be public.
- stevekemp 9y agoI scanned the internet for open rsync shares four years ago. There were some scary scary open shares with passport-scans, CVs, family-images and more. https://blog.steve.fi/secure_your_rsync_shares__please_.html https://blog.steve.fi/secure_your_rsync_shares__please_.html Discussed here at the time: https://news.ycombinator.com/item?id=7232300 https://news.ycombinator.com/item?id=7232300
- crtasm 9y agoYour blog is blocking Tor users with a 403 forbidden response, letting you know in case it's not intentional.
- stevekemp 9y agoMy server blocks all users who access /wp-admin.php, and make other automated exploit-attempts, for 8-48 hours. The fact that a high number of such attempts come over Tor is disappointing, but should surprise nobody. I've no desire to blacklist Tor exit nodes as such, but I'm going to go out of my way to whitelist them when they are a source of malicious traffic
- crtasm 9y agoMy viewpoint is that other than making logfiles less chatty that doesn't really achieve anything (providing I've well configured/hardened my server of course). Tor exit nodes are also a source of lots of non-malicious traffic. I understand your position though.