Hacker News Reader

Comment by iMerNibor | Hacker News Reader

Just got some new ips and I've been on the other end of this. Some staging domain of a website still points to one of the ips I got and there's a health checker that keeps trying to ping /health on the domain.

Nowhere near the scale of this though, just some background noise I'll ignore

View on HN

Same here. Soon after launching a cloud hosted virtual machine I noticed that it was getting a lot of unexpected HTTP traffic on port 80. They were GET requests with parameters that suggested to me that it was coming from some kind of Javascript browser tracker.

I rebooted the VM to get a new IP address and the traffic stopped. It's somebody else's problem now.

The problem for you is that you can't do much against it. The domain owner can easily change the record, you can't. The only way is to blackhole all requests coming in for domains other than the ones you want to host. Or is there any way to get the DNS records checked?

> Nowhere near the scale of this though, just some background noise I'll ignore

Same situation here. However being on the receiving end of a "formerly" Russian camgirl site makes this a little more than just noise. Any good ideas of what one could do with that?

Serve them a cheap gzip b0mb (example [0]) - it sould move their ass to clean up things.

[0] https://blog.haschek.at/post/f2fda

The users are often innocent, they just want to use the old page. Best is to just serve a 403 or refuse the connection.

That’s a nice way of getting your ass in a heap of trouble especially if you experience a drive-by by a legitimate service.

Essentially don’t do anything you wouldn’t do in a wrong number call or if someone is knocking on your door looking for the previous tenant.

Reply on news.ycombinator.com