I'm being cyberattacked by Tesla, Inc
dreamstation.systems
I'm being cyberattacked by Tesla, Inc
1–10 of 127 posts
Re: I'm being cyberattacked by Tesla, Inc
#2I'd report this to AWS instead since Tesla doesn't seem aware. It's AWS IPs as the source.
Re: I'm being cyberattacked by Tesla, Inc
#3I would assume the fastest way to actually make this stop would be to setup a bunch of honeypot exploits, trigger their detection and someone will figure out what they did wrong.
Other than not, with these huge companies you have 0 recourse.
Re: I'm being cyberattacked by Tesla, Inc
#4In case of the very likely title only reader posting:
> Speculation: Assetnote pulled in everything it could find under tesla.com, including pool-ntp.tesla.com, which CNAMEs to pool.ntp.org, which can resolve to my machine — 67.215.249.229. The asset inventory saves this as a Tesla asset, and starts throwing exploits at me, a stranger.
> Not a vuln in Tesla, and I'm not asking for anything, but I just wanted to let you know that you may unintentionally be being a nuisance.
Re: I'm being cyberattacked by Tesla, Inc
#5I would assume the fastest way to actually make this stop would be to setup a bunch of honeypot exploits, trigger their detection and someone will figure out what they did wrong. Other than not, with these huge companies you have 0 recourse.
(OOP here). I wonder if switching my replies from 299 to 200 OK would be enough for some of them.
Re: I'm being cyberattacked by Tesla, Inc
#6Remember in 2003 when netgear hardcoded a university's NTP server into a ton of their products? Well....
https://www.google.com/search?&q=university+ntp+server+netge...
Re: I'm being cyberattacked by Tesla, Inc
#7> rg -zFI pool-ntp.tesla.com access.log*
Neat! Didn’t know about this command that’s very helpful
Re: I'm being cyberattacked by Tesla, Inc
#8> it has received ~8,000 requests from two of your scanning hosts
If it were 8000 requests per second, this might be worthy of some investigation.
But 8000 ntp requests alone consume far less than 1 us cent of compute + bandwidth. This isn't worth lifting a finger over.
Re: I'm being cyberattacked by Tesla, Inc
#9I would assume the fastest way to actually make this stop would be to setup a bunch of honeypot exploits, trigger their detection and someone will figure out what they did wrong. Other than not, with these huge companies you have 0 recourse.
(OOP here). I wonder if switching my replies from 299 to 200 OK would be enough for some of them.
[deleted]
Re: I'm being cyberattacked by Tesla, Inc
#10I would assume the fastest way to actually make this stop would be to setup a bunch of honeypot exploits, trigger their detection and someone will figure out what they did wrong. Other than not, with these huge companies you have 0 recourse.
I actually think this is brilliant. Let the scanner IP get access to the most unpatched Wordpress, maybe even generate some garbage ERP numbers.
Once the asset scanner detects the vulns, everyone will kick into high gear to patch this.