• Brute Force attacks

    From Spectre@21:3/105 to All on Tuesday, September 10, 2019 14:19:00
    I mentioned these not long ago when I posted the go away screen for the unwanted aliases. Well it looks like some of them don't speak engrish or understand the middle finger.... so as much as I don't want to ban particular countries, I've put a ban in place for china, taiwan and russia. Where most of them seem to originate. We'll see what happens now.

    I know different people have mentioned before moving their telnet port to other numbers to avoid this, but I wonder how many others are still working on 23 and what you do about the attacks?

    Spec


    --- --- SuperBBS v1.17-3 (Eval)
    * Origin: <Shoot'n the breeze on The Lower Planes> (21:3/105)
  • From Spectre@21:3/105 to Black Panther on Wednesday, September 11, 2019 14:09:00
    I'm still running on 23 here. Mystic has the ability to auto block
    IP addresses that try to connect multiple times within a set amount
    of time. It adds them to a blacklist file, which it checks every
    time someone tries connecting. Right now, that file is listing
    45,860 different IP addresses on my system...

    Much the same theory as fail2ban, although probably more effective then my implementatio is...

    Spec


    --- --- SuperBBS v1.17-3 (Eval)
    * Origin: <Shoot'n the breeze on The Lower Planes> (21:3/105)
  • From Spectre@21:3/105 to Avon on Wednesday, September 11, 2019 18:28:00
    Just checking in, are raw PKTs working OK for you again?

    Check point charlie, "affirmative".

    Spec


    --- --- SuperBBS v1.17-3 (Eval)
    * Origin: <Shoot'n the breeze on The Lower Planes> (21:3/105)