Hi All,

I was just looking at some of the files on the BBS system, and happened to notice the size of the blacklist.txt file...

Right now, there are 29,736 lines in that file. I was just curious if anyone else has looked at that file lately...


---

Black Panther
a.k.a. Dan Richter
Sysop - Castle Rock BBS (RCS)
telnet://bbs.castlerockbbs.com
http://www.castlerockbbs.com
The sparrows are flying again....

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Castle Rock BBS - bbs.castlerockbbs.com (21:1/186)

Right now, there are 29,736 lines in that file. I was just curious if anyone else has looked at that file lately...

Blacklist.txt here is 18628 lines.

Scott Miller
---Quickshot
----Troybbs.com

--- Mystic BBS v1.12 A38 2018/01/01 (Linux/64)
* Origin: Troy's Den * troybbs.com (21:2/134)

On 07/13/18, Black Panther pondered and said...

Right now, there are 29,736 lines in that file. I was just curious if anyone else has looked at that file lately...

Mines 67,327...

--- Mystic BBS v1.12 A39 2018/04/21 (Windows/32)
* Origin: Agency BBS | Dunedin, New Zealand | agency.bbs.nz (21:1/101)

To be honest, keeping a massive blacklist probably isn't needed.

http://en.wikipedia.org/wiki/Wikipedia:Blocking_IP_addresses

Really I would only keep blacklisted ip's for a few hours or a day.

By the time a hacker has targeted your bbs and you block him he'll have a new i

Just my 2c.

---

Michael Borthwick (toofargone), Sysop Fusion BBS
Newcastle, NSW, Australia

--- Mystic BBS v1.12 A39 2018/04/21 (Windows/64)
* Origin: Fusion BBS ~ Newcastle, Australia (21:4/132)

On 07/14/18, toofargone said the following...

To be honest, keeping a massive blacklist probably isn't needed. http://en.wikipedia.org/wiki/Wikipedia:Blocking_IP_addresses
Really I would only keep blacklisted ip's for a few hours or a day.
By the time a hacker has targeted your bbs and you block him he'll have
a new i

Yes. I just have Mystic set up to auto-block them if they attempt 4 connects within 120 seconds. I just don't think to look at the file that often... :)


---

Black Panther
a.k.a. Dan Richter
Sysop - Castle Rock BBS (RCS)
telnet://bbs.castlerockbbs.com
http://www.castlerockbbs.com
The sparrows are flying again....

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Castle Rock BBS - bbs.castlerockbbs.com (21:1/186)

On 07/14/18, toofargone said the following...

To be honest, keeping a massive blacklist probably isn't needed.

http://en.wikipedia.org/wiki/Wikipedia:Blocking_IP_addresses

I've only been on-line since May and mine is like 18,000 lines long. I think
I am going to start playing with the country file and blocking countries..
I'm getting hit hard lately..

--- Mystic BBS v1.12 A39 2018/04/21 (Windows/32)
* Origin: The Wrong Number ][ BBS (21:4/131)

On 07/13/18, Bucko pondered and said...

I've only been on-line since May and mine is like 18,000 lines long. I think I am going to start playing with the country file and blocking countries.. I'm getting hit hard lately..

I just block a couple of countries and that's it for me... the rest can try if they want but after three strikes they go on the BAN list :)

--- Mystic BBS v1.12 A39 2018/04/21 (Windows/32)
* Origin: Agency BBS | Dunedin, New Zealand | agency.bbs.nz (21:1/101)

RE: Re: Blacklist.txt
BY: Black Panther(21:1/186)

I was just looking at some of the files on the BBS system, and happened
to
notice the size of the blacklist.txt file...

Right now, there are 29,736 lines in that file. I was just curious if anyone
else has looked at that file lately...

Before during the whole time I ran Magicka on port 2023 I had 1 ip in my blacklist, that's with no country blocking either. Not sure if 2023 drastically reduced bots or what. The logs didn't show any evidence of scanning either.

I'm kind of feeling a little left out. I'd be interested to know how many others had that run on a different port.

Andrew

--- WWIV 5.4.0.development
* Origin: Exotica BBS (21:1/125)

Re: Re: Blacklist.txt
By: Apam to Black Panther on Sat Jul 14 2018 12:39 pm

I'm kind of feeling a little left out. I'd be interested to know how many others had that run on a different port.

Don't feel left out.. your not missing anything.

I get the usuall junk on port 23 and more on port 22.

I don't use a blacklist file. SBBS blocks IPs for 5 minutes or so if they misbehave. I suspect that if I blocked an IP they would just move to another.

Ttyl :-),
Al


... Scotty, beam me to the Bahamas.
--- SBBSecho 3.05-Linux
* Origin: The Rusty MailBox - Penticton, BC Canada (21:4/106)

Hello Black Panther,

I was just looking at some of the files on the BBS system, and happened
to notice the size of the blacklist.txt file...
Right now, there are 29,736 lines in that file. I was just curious if anyone else has looked at that file lately...

That's quite an extensive list of spammers. Are You on IPV6? That would in my opinion just make it much larger. I heard there are many hacked "SMART INTERNET THINGS" craps boting much more than on IPV4.

Best regards

Shinobi

--- Mystic BBS v1.12 A38 2018/01/01 (Linux/64)
* Origin: INFOLINKA BBS (21:1/153)

On 07-14-18 13:16, Avon wrote to Black Panther <=-

On 07/13/18, Black Panther pondered and said...

Right now, there are 29,736 lines in that file. I was just curious if anyone else has looked at that file lately...

Mines 67,327...

root@lemaker:/mystic/data# cat blacklist.txt | wc -l
65690


... Chocolate has no calories when eaten with friends
=== MultiMail/Win v0.51
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (21:1/109)

On 07/13/18, Black Panther said the following...

I was just looking at some of the files on the BBS system, and happened
to notice the size of the blacklist.txt file...
Right now, there are 29,736 lines in that file. I was just curious if anyone else has looked at that file lately...

Only 1565 lines here. I run on 2323 which is a common Internet-of-Things port so I was initially getting hammered a lot by China and Japan until I blocked both countries. Most of the remaining are coming from Russia.

I recently had to block all of host1plus because of constant brute force attacks on multiple services and they don't seem to take timely action on
abuse reports.

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Subcarrier BBS (21:2/140)

On 07/14/18, Apam said the following...

I'm kind of feeling a little left out. I'd be interested to know how
many others had that run on a different port.

Port isn't really the issue anymore, it's that we're in the US. Russia and China try to hit all open ports multiple times a second here. My blacklist on AlphaTest (port 2323) is at 11709 (lines; 190652 bytes) right now.
That is with 37 countries blocked that were the highest offenders except Russia. Russia generally uses other countries machines to do it.

--- Mystic BBS v1.12 A39 2018/04/21 (Raspberry Pi/32)
* Origin: Mystic Pi BBS bcw142.zapto.org (21:1/145)