5 ms·
This is fun to watch, seeing all the passwords is pretty interesting. Just curious, why x out the IP at all?
by blakesterz 3y ago
This is fun to watch, seeing all the passwords is pretty interesting.
Just curious, why x out the IP at all?
- zeta0134 3y agoPresumably many brute force attempts come from compromised residential PCs, whose owners may not be aware that they are participating in an attack. It's not especially polite to expose all of that personal info.
- mike_d 3y ago> Just curious, why x out the IP at all? Trying to avoid being a jerk. The sources are likely hacked boxes where the owner has no idea.
- Filligree 3y agoAnd since they don't get called out, they won't get an idea. Unless the infection is retargeted against themselves.
- mike_d 3y agoI also scan the internet quite a bit. Trust me, they (or the ISP rather) are getting a few emails an hour.
- nubinetwork 3y ago> few emails an hour Been there, done that. Most isps and providers don't respond or act on abuse complaints anymore.
- TacticalCoder 3y ago> Trying to avoid being a jerk. There are lists updated in real time by white hats, sharing exact IP of machines known to be engaging in bad behavior. You can, if you want, update your servers in real-time from these lists and then act accordingly: drop the traffic, reject the trafic, serve a "your IP address is participating in brute forcing attempts" page, etc. FWIW some ISPs may be monitoring these looking for IPs on their subnets and acting accordingly. It's not about "being a jerk". It's about giving attackers the middle finger.