Hacker News new | ask | show | jobs
by paoliniluis 15 days ago
There's a guy trying to take down the server by sending as user/pass the lyrics of Rick Astley's "never gonna give you up"
2 comments

From his home IP... very smart. https://ipinfo.io/86.120.252.156
We don’t have static IPs at home in Romania. A restart of the router will just give that person another public IP and they won’t notice any repercussions.
Why is it not smart?
Because attacking someone else's server is very illegal?
Probably a relay through a "free" app installed on someone's phone or "smart" TV.
Nah, Spur (a company tracking residential proxies) doesn't flag it at all.

He's most likely just not very smart.

>Nah, Spur (a company tracking residential proxies) doesn't flag it at all.

I looked into it and so far as I can tell it works off a blacklist system, rather than any sort of automatic analysis (eg. TCP or MTU fingerprinting). If you set up a "residential proxy" in the form of a home VPN, it won't be detected. It also means the detection is only as good as whatever their backlist source is. If it's a niche provider, it might not get picked up at all.

They're not doing a very good job at it, tried a few disposable free residential proxies - not flagged. Tried my CGNAT home connection - flagged. My phone connection - also flagged.
> tried a few disposable free residential proxies

Where are you finding free residential proxies?

> Tried my CGNAT home connection - flagged. My phone connection - also flagged.

Why does that mean they're doing a bad job? Since both are CGNAT, you're sharing the IP with lots of other people, and it's not unlikely that one of your network neighbors is infected.

Maybe he is doing it for fun and not actually trying to hack the website with Rick Astley lyrics?
That doesn't make it less illegal?
In many jurisdictions, "intent" is an element of the law
IP is clean, most likely will pass any filtering. https://proxybase.xyz/ip/86.120.252.156
So we're getting Rickrolled?