Comment by klipitkas

3 months ago

Thanks for the kind words. I hope I won't have to close this service in a few days due to abuse but its a weird world we live in.

17 comments

klipitkas

Reply
ValdikSS  3 months ago

My service (which doesn't have public access, only via SSH as a client) was used by a ransomware gang, which involved the service in investigation from Dutch CERT and Dubai police.

It's still live though.

patricklorio  3 months ago

I run playit.gg. Abuse is a big problem on our free tier. I’d get https://github.com/projectdiscovery/nuclei setup to scan your online endpoints and autoban detections of c2 servers.

  • jborak  3 months ago

    Thanks for sharing this. I run packetriot.com, another tunneling service and I ended up writing my own scanner for endpoints using keyword lists I gathered from various infosec resources.

    I had done some account filtering for origins coming out of Tor, VPN networks, data centers, etc. but I recently dropped those and added an portal page for free accounts, similar to what ngrok does.

    It was very effective at preventing abuse. I also added mechanism for reporting abuse on the safety page that's presented.

pcthrowaway  3 months ago

Do you have funding to cover the paying the bandwidth costs which will ultimately result from this? Or if you're running this from a home network, does anyone know if OP should be concerned of running into issues with their ISP?

  • kilobaud  3 months ago

    The tunnel host appears to be a Hetzner server, they are pretty generous with bandwidth but the interesting thing I learned about doing some scalability improvements at a similar company [0] is that for these proxy systems, each direction’s traffic is egress bandwidth. Good luck OP, the tool looks cool. Kinda like pinggy.

    [0] https://localxpose.io