Notices by hrbrmstr 🇺🇦 🇬🇱 🇨🇦 (hrbrmstr@mastodon.social)

Weekly bulletproof hosting report is up. Activity across 26 monitored ASNs surged -- 15 showed observable sessions this week, up from 9.

Data from @HoneyLabs, @censys and the small fleet I run w/@ntkramer@infosec.exchange

Highlights:

- Prospero Ooo went from 2 events to 3,890 in a single 12-hour window
- Proton66 expanded from RDP-only to full multi-protocol bruteforcing (SSH, Telnet, FTP)

1/2

after me forgetting the PL2303 chip on the GMC-300E is notorious for "going away" (it's been a minute since I hooked it up to system) and then using the by-id symlink instead, we've got clicks-per-minute readings (ref yesterday's Drop)!

another reason I bothered to hook it up is that the U.S. is abt to let any moron tech bro build small nuclear energy devices and that'll likely end as badly as the algae-ridden, blue-paint-peeling reflecting pool did.

Folks in the U.S. next week (east half anyway) pls take the heat dome forecast seriously. It’s going to be super bad.

RE: https://masto.ai/@Nonilex/116822495189502979

Americans: read this whole thread

RE: https://mastodon.social/@tusk81/116794121612671536

Celebrate. Every. Win.

OpenAI’s financials have leaked, showing $21 billion in losses against $13 billion in revenue

#totallyNotAGrifterBubble

https://finance.yahoo.com/markets/stocks/articles/openai-2025-financials-leaked-38-121508294.html

More of this pls

Tesco moving 40,000 server workloads off VMware amid Broadcom's “abusive conduct”

https://arstechnica.com/information-technology/2026/06/tesco-moving-40000-server-workloads-off-vmware-amid-broadcoms-abusive-conduct/

Bulletproof hosting watch (June 8-15) via @honeylabs & @censys data:

Proton66 (AS198953) spiked +1,860% in scan events — nearly all of it (42k) from one IP doing targeted MSSQL/custom-port recon, not the usual spray. Honeylabs also logged a 4x global spike on June 14 (1.1M events/day), mostly Google Cloud-hosted scanners. New entrant: QWINS LTD probing X11 (6000). FlokiNET's SPARK C2 beacon (185.100.87.136) is still live.

More in the "Kevlar" agent writeup: https://ai.rud.is/posts/2026-06-15-weekly-bulletproof-report

EU-based Kagi alternative — https://uruky.com/

Spread — yet-another social content-sharing platform.

Its stated mission is enabling access to "the ideas that matter" via what it calls a Human Recommendation Engine, positioning itself as a trust-based feed of articles, podcasts, and videos shared by real people rather than algorithmic amplification.

Invite link:

https://joinspread.com/invite/Yn4Lsq

RE: https://mastodon.social/@Edent/116714275109016486

cc: @neurovagrant

RE: https://irrelephant.co/@g/116709890850348803

I'm gonna re-up recommending this app around "gathering times" dates like labor day and thanksgiving. You def need to get your iOS friends & fam to use this app. It's one of the most approachable security & privacy guides — using real data from your device — I've come across.

Meta is so desperate to catch up that they're taking a cue from X-AI's playbook and building AI data centers in tents with jet engines providing 2-3GW of power.

I truly despise this timeline.

O_O

"Legit" apps on your TV enlist you into a commercial residential proxy service: https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/

It'd be great if some ransomware group or three took out Bright Data.

Gosh I love the creativity of the #DuckDB ecosystem folks.

This DuckDB OpenTelemetry Extension seems pretty spiffy.

https://smithclay.github.io/duckdb-otlp/

The Federal government is doing its best to memory hole Jan 6. Eventually, NPR will cave in b/c the elites who run it like white wine and exclusive parties more than liberal democracy.

There will always be a backup of the evidence at https://never-forget.hrbrmstr.app/

JHC on a pogo stick our tax dollars went to make this BS https://aliens.gov/

a great many brave souls were injured or died many years ago to fight the forces that have found a way to be in leadership or of great influence in present-day western democracies.

we should all feel pretty ashamed of that as we strive to appreciate their now nigh futile sacrifices. that "nigh" is doing a ton of heavy lifting, and only exists in that sentence thanks to some modern brave souls who are working daily to turn the tide.

The brazenness of this one IP from Amarutu's ASN is just staggering.

No ISP shld be allowing transit from any IP from Amarutu.

This ASN has been a bane for almost as long as I've had the mini-fleet up. And the most recent activity isn't even the worst that it has slung.

Someone must really want as many nodes as possible for some upcoming DDoS parties.