From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.ffmpeg.org (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTPS id 989C24F090 for ; Sun, 15 Jun 2025 15:59:04 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTP id ACC8068D449; Sun, 15 Jun 2025 18:59:02 +0300 (EEST) Received: from relay16.mail.gandi.net (relay16.mail.gandi.net [217.70.178.236]) by ffbox0-bg.ffmpeg.org (Postfix) with ESMTPS id C936968C477 for ; Sun, 15 Jun 2025 18:59:00 +0300 (EEST) Received: by mail.gandi.net (Postfix) with ESMTPSA id E2B3D44A1B for ; Sun, 15 Jun 2025 15:58:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=niedermayer.cc; s=gm1; t=1750003140; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=FAvaEd6GepeW0H6ax1nbyUCjonTz7iGZP8b4hwVwai0=; b=mg2GkUsyJ0kJdLGeltlnvMNw3Oj67jGTwCaoLQOAOra2RMuiwadQxzlwZw//0ccfZ8sCvX mQ0wHMD1ScZ5xZQxodeSKJSzOp5p58LHT7bcOJvVREFZ/plRXg8n/hbBczgln9pRGac+qK vQPA1TKNODbLfpm5kespxU0L9NTXBgbDztnCn1EwWIGSfgjvM2l1ZzXDmRmEdwK5NbHAFp Qehvaaz2tQpUIla6xJeurpz4REH2CPf5Y5WgEVgzSbypL6k6UAOFwmUPCfJZpuVUgSwW4o I0NzaShbM2AUKYl85nTEc9FqiF4zFbbwIlEmFptMicApd1OraysHVE0MeHHkPg== Date: Sun, 15 Jun 2025 17:58:59 +0200 From: Michael Niedermayer To: FFmpeg development discussions and patches Message-ID: <20250615155859.GV29660@pb2> References: <20250615133515.GT29660@pb2> <20250615134214.GU29660@pb2> <34e92672-93ad-464e-a99a-125ecb1f305d@gmail.com> MIME-Version: 1.0 In-Reply-To: <34e92672-93ad-464e-a99a-125ecb1f305d@gmail.com> X-GND-State: clean X-GND-Score: -70 X-GND-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtddugddvgeduvdcutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfitefpfffkpdcuggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucesvcftvggtihhpihgvnhhtshculddquddttddmnegfrhhlucfvnfffucdlfedtmdenucfjughrpeffhffvuffkfhggtggujgesghdtreertddtvdenucfhrhhomhepofhitghhrggvlhcupfhivgguvghrmhgrhigvrhcuoehmihgthhgrvghlsehnihgvuggvrhhmrgihvghrrdgttgeqnecuggftrfgrthhtvghrnhepieegkedtjeduffejhfetgeejtdegteetgfegtdfhjefgvefhteegkeejtddvhfevnecukfhppeeguddrieeirdeijedruddufeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeeguddrieeirdeijedruddufedphhgvlhhopehlohgtrghlhhhoshhtpdhmrghilhhfrhhomhepmhhitghhrggvlhesnhhivgguvghrmhgrhigvrhdrtggtpdhnsggprhgtphhtthhopedupdhrtghpthhtohepfhhfmhhpvghgqdguvghvvghlsehffhhmphgvghdrohhrgh Subject: [FFmpeg-devel] Forensics Was: [RFC] statictrac, trac and caching X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Type: multipart/mixed; boundary="===============4391733344448202272==" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: --===============4391733344448202272== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="KzBw01xYXPKYEyY8" Content-Disposition: inline --KzBw01xYXPKYEyY8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi Derek On Sun, Jun 15, 2025 at 02:53:57PM +0100, Derek Buitenhuis wrote: > On 6/15/2025 2:42 PM, Michael Niedermayer wrote: > > for the record, heres btw the 100 IP addresses from where the attack ye= sterday > > happened: (i think timo said there where more addresses later but thats= the list > > when i looked) >=20 > These look like residential IPs from a botnet (all same ISP, so possibly = compromised > IoT device). I hoped someone just made a honest mistake with their AI agents. But if its a botnet why would a botnet target ffmpegs bug tracker ? Its expensive (in terms of computations) to solve anubis repeatedly. A botnet is there to make some criminal a profit >=20 > Publishing these seems in poor taste. Publishing is neccessary a first step so people can check if anyone did this by mistake or if anyone knows where this came from. Speaking of that. Do you have any idea, hunch or knowledge where this may have come from ? Or about anyone who might do this or pay a botnet operator to do this ? thx [...] --=20 Michael GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB No snowflake in an avalanche ever feels responsible. -- Voltaire --KzBw01xYXPKYEyY8 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iF0EABEKAB0WIQSf8hKLFH72cwut8TNhHseHBAsPqwUCaE7tvwAKCRBhHseHBAsP q8vGAJ9SO+x8pgmYZ1AmhMxj7oNpGE11TgCfdwOZ3q1T/qdffRnLbE3U+9iTt8Y= =7Khr -----END PGP SIGNATURE----- --KzBw01xYXPKYEyY8-- --===============4391733344448202272== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". --===============4391733344448202272==--