There's a guy trying to take down the server by sending as user/pass the lyrics of Rick Astley's "never gonna give you up"

From his home IP... very smart. https://ipinfo.io/86.120.252.156

We don’t have static IPs at home in Romania. A restart of the router will just give that person another public IP and they won’t notice any repercussions.

[deleted]

Why is it not smart?

They are leaking their IP on the internet! Big security no-no. They'll need to download a lot more ram to deal with all the hackers coming for them.

A data broker is going to correlate this IP with "never gonna give you up" as an ideological statement about his drug dealings. They'll be receiving weird ads for weeks!

Because attacking someone else's server is very illegal?

Probably a relay through a "free" app installed on someone's phone or "smart" TV.

Nah, Spur (a company tracking residential proxies) doesn't flag it at all.

He's most likely just not very smart.

>Nah, Spur (a company tracking residential proxies) doesn't flag it at all.

I looked into it and so far as I can tell it works off a blacklist system, rather than any sort of automatic analysis (eg. TCP or MTU fingerprinting). If you set up a "residential proxy" in the form of a home VPN, it won't be detected. It also means the detection is only as good as whatever their backlist source is. If it's a niche provider, it might not get picked up at all.

[dead]

They're not doing a very good job at it, tried a few disposable free residential proxies - not flagged. Tried my CGNAT home connection - flagged. My phone connection - also flagged.

> tried a few disposable free residential proxies

Where are you finding free residential proxies?

> Tried my CGNAT home connection - flagged. My phone connection - also flagged.

Why does that mean they're doing a bad job? Since both are CGNAT, you're sharing the IP with lots of other people, and it's not unlikely that one of your network neighbors is infected.

Maybe he is doing it for fun and not actually trying to hack the website with Rick Astley lyrics?

That doesn't make it less illegal?

In many jurisdictions, "intent" is an element of the law

IP is clean, most likely will pass any filtering. https://proxybase.xyz/ip/86.120.252.156

So we're getting Rickrolled?