logoalt Hacker News

londons_exploreyesterday at 6:24 PM4 repliesview on HN

> it has received ~8,000 requests from two of your scanning hosts

If it were 8000 requests per second, this might be worthy of some investigation.

But 8000 ntp requests alone consume far less than 1 us cent of compute + bandwidth. This isn't worth lifting a finger over.


Replies

walrus01yesterday at 6:26 PM

Please read the article, it's not the volume of the NTP requests, they're actively sending exploit/attempt to compromise payloads. They're probing things in a way that you would ordinarily only do to your own internal infrastructure.

"They tried all kinds of exploits against me: path traversal, webshell uploads, probing software internals, probing WordPress and other CMS management endpoints, SSRF, Log4Shell, and a lot more."

show 1 reply
robinpieyesterday at 6:28 PM

It's HTTP requests, not NTP requests, and the volume isn't the problem, it's that Assetnote is sending live exploit payloads /at all/ to a stranger on Tesla's behalf

iamjackgyesterday at 6:53 PM

Isn't this technically a crime, since they're actively attempting to access a computer system they don't own?

show 2 replies
SadTromboneyesterday at 6:28 PM

It's not 8000 requests. It's 8000 attempts to exploit various software on OP's server.

show 1 reply