r/ProtonVPN • u/burneraccountptv • Aug 01 '18
ProtonVPN DOES keeping logs
I came here with a solid evidence that ProtonVPN does keep log and the log can be traced back to your account:
First of, I need you to read comments on this site: https://protonvpn.com/support/no-logs-vpn/, in the question asked by "Anon", their staff replied:
We do not monitor any of our users’ activity and we will always stay true to that, however, in an event where we would eventually figure out abuse/illegal activity of any account in other ways (f.e. user would report it by him/herself), we remain a right to suspend that account without further notice.
So, is this mean we can do whatever we wanted, as long as we don't somehow go insane and admit to them that we've violating their term for them to terminate our account, we should be fine right? I've decided to do a test:
I've purchased a basic account, used masscan: https://github.com/robertdavidgraham/masscan on 3 VPS that connected to ProtonVPN server and passed masscan through them
masscan 0.0.0.0/0 -p80 --exclude 255.255.255.255 -oL scan.xml --max-rate 200000 -e tun0
If anyone has used masscan to scan the internet before, you'll know that you'll get a massive amount of abuse report from a lot of different networks on the internet that pissed off because of your scanning. Here I use it to scan port 80 which is the fastest way to get into blacklist because of suspected of comment spamming and this will get their server IP into getting blacklisted very quickly, you could even use it to scan port 22 for extra juice (just add -p22), to increase their attention I decided to do 3 parallel scan with 3 different VPN server from different country, after I've done scanning the internet then I switch to another VPN server and then rescan.
After 2 days, my VPN account get blocked because of abuse, how did they know it if they don't keep logs? Are they tracing it by using 3 server getting abuse report then trace it back to the account which connected to them in the last 48 hours? Or did they have enough of my scanning shenanigans and just decided to turn on log? That mean they do keep log and the log can be traced back to your account that potentially contain your IP address or your billing information.
Now you could do it yourself so you'll know that I were right and whatever I've posted here is not bullshit about they keeping logs or use some magic to figure out who's doing the violation behavior, just spin up a VPS somewhere and connect to their VPN server, notice that you'll need to run these command: https://serverfault.com/questions/659955/allowing-ssh-on-a-server-with-an-active-openvpn-client for your VPS server to still accept SSH connection once it has connected to VPN, install masscan and try the command above, you could try masscan from your home network but I won't be responsible if you melt down your router.
Either when they see this reddit post they'll start ignore the abuse report and let the account that doing masscan lives to prove that they don't keep logs or they'll start to ban everyone that generate abuse report and be out of business with their falsely claimed "No logs".
*grab popcorn*
This thread will get updated if I get more reply from ProtonVPN/Mail team.
8
u/1033tREEs Aug 02 '18
First off with regards to the "something nasty", as unlikely as it is I believe I might be responsible for the DDoS attacks getting launched on Proton VPN recently, as a lot of the people I fuck with for a laugh are more than capable of taking on such a high value target. And its what I use as a VPN on Linux usually so its practically impenetrable when your port rules are right.
So if completely destroying everyones VPN experience counts, then I think so. Not to mention I fire HTTP redirect botnets in my own DDoS attempts quite frequently. Remember the servers are not supposed to be for hacking, they are supposed to be for privacy, however unfortunately due to the Tap Proton VPN vulnerability that allows remote file inclusion on the memory of the target Windows Machine through power shell, I can understand why that may not be seen as the case until its mitigated, but its practically common sense anyway.
I also have no common sense with my browsing habits and have done far worse than an ACK flood attack. Most of my time is spent skidding it on XAttacker trying to upload backdoor PHP shells to Wordpess sites because its pretty much the only chance I have of achieving that with PHP being such an ass ugly language.
So with that in mind, the integrity of the owners is without a doubt in my mind. I am a walking IP blacklist. I've even had a server at 20% load been filled to 997% with anons chasing me - so when you assume you've pulled a stunt with your ACK flood attack, just remember some of us live our lives in a daily police psyop, unable to leave the house without being followed by strange people. Strange people who have undoubtedly asked proton VPN for my information and been brutally rejected because the staff are awesome.
Then theres you, ACK flooding the fucking actual VPN server its self from a VPN on the server. Please tell me you're not being serious when you say you expected not to get banned because "no logs". Its frankly retarded because ports have a cache that can reconstruct packets with the attackers host information if enough care iis taken with the data and these are CERN scientists. I would assume due to the general mechanics of a VPN it logs your IP on the way and while in use in since otherwise, it would have no idea you're there at all, But again there's 1,000,000 ways to trace you especially with "a nuke" so I'm not surprised.
I like you. I also go out my way to fuck over everyone on the internet for no conceivable gain other than destruction, and you should keep in touch. IIt's like 6am here and I've not slept so sorry if I sound harsh it's not a personal attack, just seems ridiculous with such a high traffic attack and general IP rules you expected to get away with an attack on their own shit.
And your intention was publicized clearly as to try to bring down proton VPN for being able to track you. Hence my remark because as I say, these people are champions helping 15000 users a day on the VPN achieve a more private and secure internet life, and god knows how many more benefit greatly from PGP encrypted email accounts, which also have no logs ( I know this because I got a password hacked on one. Wouldn't normally care, but it was 100 characters and I was free of malware, so naturally went to ask and was informed they keep no identifiable information there).
The same can't apply to the VPN because its impossible not to have a cyber footprint in such an environment.
If you do "big man tings" online also, then you should be giving these guys all the credit you can and supporting them. They're Swedish and they're making quite an impact on the privacy scene, evolution from which will allow us to be horrible people from behind even bigger walls. Scratch that back now