Lemmings.world

3,729 readers
63 users here now

General

A general-purpose Lemmy server that anyone can use.

Read the Code of Conduct and follow the rules. There's also the new user's guide.

We have a bot that travels the Fediverse and subscribes to the most popular communities, so that close to all Lemmy content gets synced here.

You can also go chat with others on our Matrix.

We're part of the Fediseer chain of trust:

Fediseer badge showing that we're guaranteed on the Fediseer network

A badge showing the uptime as a percentage

Donations

This instance is funded out of my pocket, if you wish to donate (or just see how much it costs), visit the donations page.

Other

Other Lemmy-related things hosted on Lemmings.world:

founded 2 years ago
ADMINS
rikudou
bahmanm
AutoMod
listing: all - local
search
1
7
Alleged SYN-scans of known Honeypots from spoofed source IPs of Tor nodes (delroth.net)
submitted 4 months ago by da_peda to c/netsec@lemmy.world
0 comments fedilink
 
 
2
1
One weird trick to get the whole planet to send abuse complaints to your best friend(s) (delroth.net)
3
36
One weird trick to get the whole planet to send abuse complaints to your best friend(s). (delroth.net)
submitted 4 months ago* (last edited 4 months ago) by Dot@feddit.org to c/technology@lemmy.world
0 comments fedilink
 
 

To recap what’s (probably) going on:

  1. A malicious attacker has access to a network without BCP38 filtering.
  2. They send TCP connection requests to port 22 on many random internet machines - possibly deliberately selecting known honeypots or networks known to send automated abuse complaints.
  3. Those TCP connection requests use a spoofed source IP address, making the destination machines think the spoofed source sent that connection. They become the target of the automated abuse complaints.
  4. With a large enough volume, the spoofed IP quickly becomes widely blacklisted from many internet entities following blocklists, and the hosting provider might take action due to many abuse reports and shut down the server for being compromised / malicious.
view more: next ›