His cron jobs read the access logs, judge abuse with an LLM, and email the provider
Assembled crons that pull his access logs, process them through an LLM and notify the WHOIS abuse contact.
How it works
- He assembles scheduled jobs that pull his access logs
- Process them through an LLM
- Notify the network owner's abuse contact
Why it’s worth knowing
Abuse desks respond to evidence; the logs are the evidence, packaged.
Where it’s from
Summarized from a public post on news.ycombinator.com. See the original ↗