Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

circleid.com

Post reply on HN
Print view View original

141–150 of 155 posts

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#141

Post by meowface »

SolarNet wrote: post #103
codedokode wrote: post #58

20 years seems a little too much for the crime that doesn't involve violence. 2 or 3 years and a solid fine should be fair punishment in my opinion.

At some point it involved violence. It's one of those things where he provided a service that did not follow the regulations that were in part placed there to prevent crime. His violations of these regulations allow other criminals to piggyback off of him by using his services. Spammers, VPNs, and other services which criminals can use - especially with forged IP address ranges - to commit crimes. He is a middle man,…

>At some point it involved violence.

>Spammers, VPNs, and other services which criminals can use - especially with forged IP address ranges - to commit crimes.

How are these violence?

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#142

Post by iamnothere »

Faaak wrote: post #109
jokoon wrote: post #107

Earlier quoted context omitted.

I wonder if governments could somehow vouch for emails addresses being a little like verified twitter accounts, so that we can have a good whitelist of legit email addresses. Right now it seems gmail is benefiting from the chaos because they have the training data that allows them to know if a mail is spam. I just wish that the internet could adopt more security standards and processes. You can't trust only google no…

No thank you. I don't want to need a government sanctioned e-mail address to send an anonymous (whistleblower) e-mail for example.

To be fair, email is a very poor medium for whistleblowers in any case.

The notion of a regulated "official" communications channel (akin to postal mail) for bills and such isn't a terrible idea, although it would make more sense to build something new for this. Email has too many weaknesses to be a good choice.

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#143

Post by challenger22 »

rdtsc wrote: post #38
alexpotato wrote: post #29

Earlier quoted context omitted.

This reminds me of a conversation I had with the AC repairman last year. Backstory: we have an old AC unit that uses freon. The repairman mentioned that freon is no longer available for new AC units. I asked if you could still buy freon and he said yes, existing supplies were grandfathered in. I then commented that the price of freon must have sky-rocketed and he said: "yes, it did for a while but then it became chea…

I know someone who was hoarding banned freon and selling it on the side. The government eventually had caught on that people were doing it, but they also understood that punishing people even harder for selling it wouldn't work. So instead they started to provide incentives to convert refrigeration units to not use that kind of freon. It's been a few years so not sure how effective that was, but I thought it was inte…

See ebay listings for how you can buy R-12 by stating you are a reseller:

https://www.ebay.com/itm/R12-Refrigerant-12-Virgin-Pure-R-12...

>An EPA certificate is required to purchase R12 Refrigerant "OR" a statement saying you are purchasing this for "Resale Only". The "Resale Only" statement can be in the form of an e-mail.

Pretty easy for Joe Handyman to buy.

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#144

Post by freedomben »

fermuch wrote: post #93
freedomben wrote: post #37

Earlier quoted context omitted.

I've been seeing more and more pressure to support IPv6 in the various SaaS companies I've worked at. I do think it's happening. That said I tend to think LANs and VPCs will continue to use IPv4 internally for decades even if the load balancer does IPv6.

I'm at a home connection from a normal provider on brasil (third world country) and my router assigns a public ipv6 for each connection. I think all big providers have ipv6 enabled by default over here.

Do they also provide an IPv4 address? If not, have you run into any problems with sites that don't yet support IPv6?

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#145

Post by freedomben »

metildaa wrote: post #61
freedomben wrote: post #53

Earlier quoted context omitted.

No, I haven't heard of anyone being criminally charged for ping, but I have known someone whose ISP cut them off and he had to go through an onerous process to get service restored. I've also heard of people that use EC2 instances and get their AWS account terminated.

AWS is also overzealous about DMCA notices. If you go to other providers like Scaleway, they'll forward any abuse complaints but you don't have to do anything about them.

Hadn't heard of Scaleway before, but their prices look very reasonable! Are you a customer of theirs? Any issues with reliability?

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#146

Post by just_steve_h »

gregmac wrote: post #27
just_steve_h wrote: post #4

Does anyone know the address ranges that are affected?

Converted (OCR) from PDF: IP Block Entity Number of IP addresses ------------------- ------------------- ---------------------- 104.166.96.0/19 OppoBox 8,192 104.247.96.0/19 OppoBox 8,192 104.250.224.0/19 OppoBox 8,192 172.98.0.0/18 Telentia 16,384 174.136.192.0/18 Telentia 16,384 45.41.0.0/18 OppoBox 16,384 45.41.192.0/18 OppoBox 16,384 45.59.128.0/18 OppoBox 16,384 104.167.192.0/18 OppoBox 16,384 104.224.0.0/18 Opp…

Thank you gregmac21 for doing some uncompensated labor :)

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#147

Post by joering2 »

Dolores12 wrote: post #131
joering2 wrote: post #79

Earlier quoted context omitted.

> In order to send large numbers of emails from an IP address -- you need to gradually ramp up number of emails sent As a spammer you would not go for dedicated IP; you would rather want to use a shared pool as pissing in a big pool plenty of people who hold their liquids to themselves will help your pee to be less visible and detectable. Here are samples of my spam box from this week so far, courtesy of Sparkpost (t…

Finding abuser is not hard, every message sent have customer id encoded in headers.

It is not hard to identify each abuser, my point is that in a large pool you will have lots of small abusers to go thru and vet. When someone is using dedicated IP that's what it is. Its dedicated so you immediately know whether the actors acts in bed faith or not (perhaps sent a few more-than-usually-spam-looking messages).

I don't know whats going on with Sparkpost honestly. I actually uncovered a large international scam artist (CNN did an investigative reporting on similar one milking population to the tune of $400MM/annul) with over 30 dedicated IPs running thru Sparkpost network, but frankly they don't care. I reported that multiple times and also tried to talk to them about it over twitter but they quickly banned me. I think their rules in terms of anti-spam/anti-scam are more guidelines than rules they abide by. I would imagine someone with such vast setup brings tens of thousands of dollars in revenue, so that makes sense why they would turn a blind eye. Its sad actually, the CNN reporting was about broken families and suicides that were to some degree a result of emails' content that perpetrators sent (like romance-type scams send to seniors in hopes to get them send money oversees).

I guess if Rich Harris sleeps well at night knowing his company abides in scam artists pushing senior citizens into taking their own lives, then the business continues as usual. But its sad IMHO nonetheless...

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#148

Post by rdtsc »

challenger22 wrote: post #143
rdtsc wrote: post #38

Earlier quoted context omitted.

I know someone who was hoarding banned freon and selling it on the side. The government eventually had caught on that people were doing it, but they also understood that punishing people even harder for selling it wouldn't work. So instead they started to provide incentives to convert refrigeration units to not use that kind of freon. It's been a few years so not sure how effective that was, but I thought it was inte…

See ebay listings for how you can buy R-12 by stating you are a reseller: https://www.ebay.com/itm/R12-Refrigerant-12-Virgin-Pure-R-12... >An EPA certificate is required to purchase R12 Refrigerant "OR" a statement saying you are purchasing this for "Resale Only". The "Resale Only" statement can be in the form of an e-mail. Pretty easy for Joe Handyman to buy.

Yeah I like the strong warning of needing a certification then the "OR just say it's for resale" part.

In my case it was in a different (European) country. I think they may be slightly more strict there.

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#149

Post by SolarNet »

meowface wrote: post #141
SolarNet wrote: post #103

Earlier quoted context omitted.

At some point it involved violence. It's one of those things where he provided a service that did not follow the regulations that were in part placed there to prevent crime. His violations of these regulations allow other criminals to piggyback off of him by using his services. Spammers, VPNs, and other services which criminals can use - especially with forged IP address ranges - to commit crimes. He is a middle man,…

>At some point it involved violence. >Spammers, VPNs, and other services which criminals can use - especially with forged IP address ranges - to commit crimes. How are these violence?

> VPNs and other services.

Drug cartels, pedophile rings, etc.

Re: Close to 735k Fraudulently Obtained IP Addresses Uncovered and Revoked

#150

Post by codedokode »

SolarNet wrote: post #149
meowface wrote: post #141

Earlier quoted context omitted.

>At some point it involved violence. >Spammers, VPNs, and other services which criminals can use - especially with forged IP address ranges - to commit crimes. How are these violence?

> VPNs and other services. Drug cartels, pedophile rings, etc.

But you have to prove that those IP addresses were used for crime. Maybe the purpose was only to earn money from reselling them.
Post reply on HN