Hacker News Reader

Comment by LeonidBugaev | Hacker News Reader

Question: how do you actually run it without getting banned?

I've got banned pretty hard by both my local home ISP and using Linode servers, when tried such scanners. Mass port scanning is easy to track, and it usually forbidden all ISP ToC.

View on HN

You need to have a really good relationship with your ISP and get their acknowledge prior to the scanning

Use a no-logs, anonymous VPN. I do it all the time.

Follow up question: can you recommend a no-logs, anonymous VPN?

Next time you’re visiting any place, install a proxy on their network.

Raspberry Pi on their wall, you say?

IVPN

mullvad

Please don't try to kill mullvad.

What do ISPs consider an acceptable rate?

Hyper-naive question: If something can run in 5 minutes, how can it bother an ISP?

Because it sends a lot of traffic in such a small time frame. Also, it has obvious nefarious purposes and the ISP may face legal consecuences in case someone lawyers up.

It triggers bans of your netblocks for bad behavior. 5 minutes to generate hundreds of complaints.

Is it a timed ban or they cancel your contract?

Question: why would you run this?

To hack a gibson, baby.

Research. Ever wonder how many telnet servers are exposed to the internet (hint: way too many)?

I wonder how many of those are just MUDs (text-mode dungeon games) where it was common to use telnet.

Those would be running for a while now then

MUDs usually run on a non-standard port (not 23).

I did a CTF a while back and it was used to find the real IP of a missconfigured .onion site. I didn't actually do it as I was worried about burning a VPS provider.

My ISP had a misconfiguration that let all the customers ping each other (Routers usually). The address space was too large to scan any other way except masscan, which worked very well (and fast).

https://medium.com/@captn3m0/i-scanned-all-of-act-bangalore-...

Reply on news.ycombinator.com