3 ms·
I scanned the internet for open rsync shares four years ago. There were some scary scary open shares with passport-scans, CVs, family-images and more. https:/
by stevekemp 9y ago
I scanned the internet for open rsync shares four years ago. There were some scary scary open shares with passport-scans, CVs, family-images and more.
https://blog.steve.fi/secure_your_rsync_shares__please_.html https://blog.steve.fi/secure_your_rsync_shares__please_.html
Discussed here at the time:
https://news.ycombinator.com/item?id=7232300 https://news.ycombinator.com/item?id=7232300
- crtasm 9y agoYour blog is blocking Tor users with a 403 forbidden response, letting you know in case it's not intentional.
- stevekemp 9y agoMy server blocks all users who access /wp-admin.php, and make other automated exploit-attempts, for 8-48 hours. The fact that a high number of such attempts come over Tor is disappointing, but should surprise nobody. I've no desire to blacklist Tor exit nodes as such, but I'm going to go out of my way to whitelist them when they are a source of malicious traffic
- crtasm 9y agoMy viewpoint is that other than making logfiles less chatty that doesn't really achieve anything (providing I've well configured/hardened my server of course). Tor exit nodes are also a source of lots of non-malicious traffic. I understand your position though.