Public
- Public
- Network
- Groups
- Popular
- People

Conversation

Notices

John Rando (john_rando@poa.st)'s status on Sunday, 27-Aug-2023 21:35:02 JST John Rando
@graf @sjw @admin @p @not_br549 @parker @verita84 @Moon I found this in a search query on Censys:
65.21.75.164 65.109.84.183 65.108.75.116
All IPs resulted from searching for smat-app.com. Here’s the link:
https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=smat-app.com

In conversation about a year ago from poa.st permalink
- Machismo repeated this.
- :btrfly: anime graf mays 🛰️🪐 (graf@poa.st)'s status on Thursday, 31-Aug-2023 17:38:49 JST :btrfly: anime graf mays 🛰️🪐
  in reply to
  @john_rando @sjw @admin @p @not_br549 @parker @verita84 @Moon interesting. thanks
  
  In conversation about a year ago permalink
- Phantasm (phnt@fluffytail.org)'s status on Thursday, 31-Aug-2023 17:54:35 JST Phantasm
  in reply to
  @john_rando @sjw @admin @p @not_br549 @parker @graf @verita84 @Moon
  
  Possibly new IP: 65.109.84.158
  In conversation about a year ago permalink
  Attachments
  1. Untitled attachment
    https://upload.fluffytail.org/media/7a988a9c2f470eaba1753326ae53be128292d821bd9da03ccc20375758f1edbc.png
  Machismo repeated this.
- :btrfly: anime graf mays 🛰️🪐 (graf@poa.st)'s status on Thursday, 31-Aug-2023 17:54:37 JST :btrfly: anime graf mays 🛰️🪐
  in reply to
  @phnt @sjw @admin @p @not_br549 @parker @john_rando @verita84 @Moon sure, i will just treat this /16 as hostile and add ips to “good_ips” when I find instances on hetzner that aren’t this
  graf:~$ sudo ipset create bad_asns hash:net hashsize 131072 counters graf:~$ sudo ipset create bad_ips hash:ip hashsize 16384 counters graf:~$ sudo ipset create good_ips hash:ip hashsize 4096 graf:~$ sudo iptables -A INPUT -m set --match-set good_ips src -j ACCEPT graf:~$ sudo iptables -A INPUT -m set --match-set bad_ips src -j DROP graf:~$ sudo iptables -A INPUT -m set --match-set bad_asns src -j DROP graf:~$ sudo ipset add bad_asns 65.109.0.0/16
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- Phantasm (phnt@fluffytail.org)'s status on Thursday, 31-Aug-2023 17:54:48 JST Phantasm
  in reply to
  @graf @sjw @admin @p @not_br549 @parker @john_rando @verita84 @Moon
  
  And for anyone who wishes to block the IPs via an ipset with firewalld, these are the commands:
  firewall-cmd --permanent --new-ipset=fediverse.smat-app.com --type hash:net
  firewall-cmd --permanent --new-ipset=fediverse.smat-app.com-ipv6 --option=family=inet6 --type=hash:net
  
  firewall-cmd --permanent --ipset=fediverse.smat-app.com --add-entry=65.109.84.183
  firewall-cmd --permanent --ipset=fediverse.smat-app.com --add-entry=65.109.84.158
  firewall-cmd --permanent --ipset=fediverse.smat-app.com --add-entry=65.108.75.116
  firewall-cmd --permanent --ipset=fediverse.smat-app.com --add-entry=65.21.75.164
  firewall-cmd --permanent --ipset=fediverse.smat-app.com-ipv6 --add-entry=2a01:4f9:3051:52a7::/64
  
  firewall-cmd --zone=drop --add-source=ipset:fediverse.smat-app.com --permanent
  firewall-cmd --zone=drop --add-source=ipset:fediverse.smat-app.com-ipv6 --permanent
  
  firewall-cmd --reload
  
  This should DROP any request coming from these IPs.
  
  In conversation about a year ago permalink
- :btrfly: anime graf mays 🛰️🪐 (graf@poa.st)'s status on Thursday, 31-Aug-2023 17:54:51 JST :btrfly: anime graf mays 🛰️🪐
  in reply to
  @phnt @sjw @admin @p @not_br549 @parker @john_rando @verita84 @Moon ipinfo.io/AS24940
  
  :mind_blown_boar:
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- Max Mustermann (maxmustermann@shitposter.club)'s status on Thursday, 31-Aug-2023 17:54:51 JST Max Mustermann
  in reply to
  @graf @sjw @admin @phnt @p @not_br549 @parker @john_rando @verita84 @Moon
  > Hetzner
  found your red flag. Nobody sane hosts interactive anything on Hetzner.
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- Your New Kemono Waifu :verified: :cornbread_the_cat: (sjw@bae.st)'s status on Thursday, 31-Aug-2023 17:54:53 JST Your New Kemono Waifu :verified: :cornbread_the_cat:
  in reply to
  @graf @admin @phnt @p @not_br549 @parker @john_rando @verita84 @Moon yeah I think I'm just going to block their ASN as well
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- Your New Kemono Waifu :verified: :cornbread_the_cat: (sjw@bae.st)'s status on Thursday, 31-Aug-2023 17:54:59 JST Your New Kemono Waifu :verified: :cornbread_the_cat:
  in reply to
  @graf @Moon @admin @john_rando @not_br549 @p @parker @phnt @verita84 if you’re using ufw you can use this:
  for i in `cat hetzner.list` ; do sudo ufw deny from "$i" comment 'Block Hetzner' ; done
  hetzner.list
  In conversation about a year ago permalink
  Attachments
  1. hetzner.list
    
    Invalid filename.
  Machismo repeated this.
- :btrfly: anime graf mays 🛰️🪐 (graf@poa.st)'s status on Thursday, 31-Aug-2023 17:55:06 JST :btrfly: anime graf mays 🛰️🪐
  in reply to
  @sjw @admin @phnt @p @not_br549 @parker @john_rando @verita84 @Moon ye i used iptables in my examples because iptables is available in every distribution so it is the most universal. ufw/firewalld are not always installed on default VPS provider images normally
  
  also parker's leafposter.club and pl.psion.co are on hetzner 5.x.x.x range so you might want to allow those specific addresses
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- Your New Kemono Waifu :verified: :cornbread_the_cat: (sjw@bae.st)'s status on Thursday, 31-Aug-2023 17:55:11 JST Your New Kemono Waifu :verified: :cornbread_the_cat:
  in reply to
  @graf @admin @phnt @p @not_br549 @parker @john_rando @verita84 @Moon oof do you know their addresses?
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- :btrfly: anime graf mays 🛰️🪐 (graf@poa.st)'s status on Thursday, 31-Aug-2023 17:55:11 JST :btrfly: anime graf mays 🛰️🪐
  in reply to
  @sjw @admin @phnt @p @not_br549 @parker @john_rando @verita84 @Moon 5.161.119.152 pl.psion.co
  5.161.180.16 leafposter.club
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- Your New Kemono Waifu :verified: :cornbread_the_cat: (sjw@bae.st)'s status on Thursday, 31-Aug-2023 17:55:26 JST Your New Kemono Waifu :verified: :cornbread_the_cat:
  in reply to
  @graf @admin @phnt @p @not_br549 @parker @john_rando @verita84 @Moon yeah I realised how dumb of a question that was after I asked
  sudo ufw allow from 5.161.180.16 comment 'leafposter.club' ; sudo ufw allow from 5.161.119.152 comment 'pl.psion.co'
  
  In conversation about a year ago permalink
- pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 17:55:39 JST pistolero :thispersondoesnotexist:
  in reply to
  @graf @phnt @sjw @admin @not_br549 @parker @john_rando @verita84 @Moon Well, there's outerheaven.club and they're cool, presumably Poa.st want to avoid blocking rebased.social. Here's the list if anyone's interested.
  
  Incidentally, if I check the nginx logs from today, the only IP sending requests from fediverse.smat-app.com to FSE, 65.109.84.183, also has requests today claiming fediverse.soa.pbox.dev as the origin. Possibly worth noting, that instance's hostname, which no longer resolves, but did resolve to the same IP phnt is seeing reqs from: http://demo.fedilist.com/instance/freespeech.soa.pbox.dev . It sprung into existence about 11 hours ago and disappeared around eight hours ago. It is probably safe to say that fediverse.smat-app.com and freespeech.soa.pbox.dev are operated by the same people.
  65.109.slash16.csv
  In conversation about a year ago permalink
  Attachments
  1. 65.109.slash16.csv
  2. No result found on File_thumbnail lookup.
    
    freespeech.soa.pbox.dev
- sd241852 (sd241852@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 17:57:18 JST sd241852
  in reply to
  @maxmustermann @graf @Moon @admin @john_rando @not_br549 @p @parker @phnt @sjw @verita84
  why hate hetzner?
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 17:57:39 JST pistolero :thispersondoesnotexist:
  in reply to
  @sd241852 @maxmustermann @Moon @admin @graf @john_rando @not_br549 @parker @phnt @sjw @verita84 Bad neighborhood.
  
  In conversation about a year ago permalink
- pwm (pwm@crlf.ninja)'s status on Thursday, 31-Aug-2023 17:58:50 JST pwm
  in reply to
  @sd241852 @sjw @admin @phnt @p @not_br549 @parker @graf @john_rando @verita84 @Moon @maxmustermann G*rmans
  
  In conversation about a year ago permalink
- Max Mustermann (maxmustermann@shitposter.club)'s status on Thursday, 31-Aug-2023 17:59:01 JST Max Mustermann
  in reply to
  @sd241852 @sjw @admin @phnt @p @not_br549 @parker @graf @john_rando @verita84 @Moon Well if you run some AI generated corporate website for hawking your goods and services, Hetzner is a wonderful choice. Its not so much. For shit that is interactive and is supposedly monitoring hate speech (Whatever that supposed to be), its a extremely bad idea. Especially because the fucking Telemedia Act applies on Hetzner. Especially the requirement to fucking dox yourself and the section about user generated content. Have I mentioned that various other German laws are also applied. Has anyone ever mentioned to you that writing warning notices to people running websites is a lucrative side hustle for law firms and extremist skirt section 5.1. on a regular basis?
  In conversation about a year ago permalink
  Attachments
  Machismo repeated this.
- Max Mustermann (maxmustermann@shitposter.club)'s status on Thursday, 31-Aug-2023 17:59:09 JST Max Mustermann
  in reply to
  @sd241852 @Moon @admin @graf @john_rando @not_br549 @p @parker @phnt @sjw @verita84 As I said; If you have some static business site or some fan site were you review absolutely nothing, go ahead. Use Hetzner. Everything else, especially if it is user generated shouldn't be hosted there. This is also why the creative web is a dead idea in Germany. Normalfags only hear that you have to put your address out there or else you get your ass sued off. That's it. They don't want to deal with that and therefor huddle on US or Russian platforms.
  
  In conversation about a year ago permalink
- pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 18:00:11 JST pistolero :thispersondoesnotexist:
  in reply to
  @maxmustermann @sd241852 @Moon @admin @graf @john_rando @not_br549 @parker @phnt @sjw @verita84
  
  > it is against Hetzner's ToS to host an insult to another person
  
  Every fedi instance on Hetzner violates their ToS.
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- :ancapsnek:rlequín 🃏🐍:awooancap: (astheroth@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 18:00:16 JST :ancapsnek:rlequín 🃏🐍:awooancap:
  in reply to
  @p @maxmustermann @Moon @admin @graf @john_rando @not_br549 @parker @phnt @sd241852 @sjw @verita84 based
  
  In conversation about a year ago permalink
- Parker Banks (parker@pl.psion.co)'s status on Thursday, 31-Aug-2023 18:00:22 JST Parker Banks
  in reply to
  @p @sjw @admin @phnt @sd241852 @not_br549 @graf @john_rando @verita84 @Moon @maxmustermann
  Practically speaking, I assume their US servers aren't so bad as their German ones.
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- :btrfly: anime graf mays 🛰️🪐 (graf@poa.st)'s status on Thursday, 31-Aug-2023 18:00:32 JST :btrfly: anime graf mays 🛰️🪐
  in reply to
  @p @maxmustermann @sjw @admin @phnt @sd241852 @not_br549 @parker @john_rando @verita84 @Moon when I had fedi.ninja running hetzner was #2 host (ISP) behind CloudFlare for fedi instances. if hetzner started dropping fediverse instances it would be TFD total fedinigger death
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- sd241852 (sd241852@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 18:00:42 JST sd241852
  in reply to
  @graf @p @maxmustermann @sjw @admin @phnt @not_br549 @parker @john_rando @verita84 @Moon
  tell me how one can find out the real ip of the server behind cuckflare?
  
  In conversation about a year ago permalink
  
  Machismo repeated this.
- pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 18:01:11 JST pistolero :thispersondoesnotexist:
  in reply to
  @parker @Moon @admin @graf @john_rando @maxmustermann @not_br549 @phnt @sd241852 @sjw @verita84 I don't know, do they have a different ToS per zone?
  
  In conversation about a year ago permalink
- pistolero :thispersondoesnotexist: (p@freespeechextremist.com)'s status on Thursday, 31-Aug-2023 18:01:27 JST pistolero :thispersondoesnotexist:
  in reply to
  @sd241852 @graf @Moon @admin @john_rando @maxmustermann @not_br549 @parker @phnt @sjw @verita84 I think he means they were #2 behind Cloudflare, which was #1. But there are a lot of ways to do that; for one thing, running one of these servers creates a lot of outbound traffic.
  
  In conversation about a year ago permalink
- тняэдт[₅₄₇₇₇] (threat@annihilation.social)'s status on Friday, 01-Sep-2023 17:57:07 JST тняэдт[₅₄₇₇₇]
  in reply to
  @cjd @sjw @admin @phnt @p @not_br549 @parker @graf @john_rando @verita84 @Moon good setup. i run cascaded setup to deal with dark mesh and edge ingress traffic. edge proxy based on condition(s) will either fill their drive, redirect them to mossad, or triggers c2 to start recon on origin.
  
  In conversation about a year ago permalink
- cjd (cjd@pkteerium.xyz)'s status on Friday, 01-Sep-2023 17:57:08 JST cjd
  in reply to
  Do it with nginx rules, it's much more efficient to not have to check every single packet. Also you can have a log when they connect to you and you can route them to middleware liek this https://github.com/cjdelisle/big_download
  In conversation about a year ago permalink
  Attachments
  1. GitHub - cjdelisle/big_download: Big Download - Node express middleware for zipbombing vuln scanners
    
    Big Download - Node express middleware for zipbombing vuln scanners - GitHub - cjdelisle/big_download: Big Download - Node express middleware for zipbombing vuln scanners
- cjd (cjd@pkteerium.xyz)'s status on Friday, 01-Sep-2023 17:57:47 JST cjd
  in reply to
  The guys who do a lot of scanning have a list of the IP addresses that have IDS systems which automatically generate a complaint to your ISP if you scan them. If you can get that list, you can just send a Location header with a random IP/port every time they hit you.
  
  In conversation about a year ago permalink

Feeds