My telnet port was hammered all day yesterday, all Synch ports were busy. I added the IP to ip.can, and the board was still sluggish from rejecting all of the connections. I had to block it at my router. That was a first...
My telnet port was hammered all day yesterday, all Synch ports were
busy. I added the IP to ip.can, and the board was still sluggish from
rejecting all of the connections. I had to block it at my router. That
was a first...
My telnet port was hammered all day yesterday, all Synch ports were busy. I >added the IP to ip.can, and the board was still sluggish from rejecting all of >the connections. I had to block it at my router. That was a first...
added the IP to ip.can, and the board was still sluggish from rejectingall
of the connections. I had to block it at my router. That was a first...
My telnet port was hammered all day yesterday, all Synch ports were busy.
I added the IP to ip.can, and the board was still sluggish from rejecting >>all of the connections. I had to block it at my router. That was a
first...
What was the IPA?
Re: Getting hammered
By: Dumas Walker to POINDEXTER FORTRAN on Sun Jan 27 2019 10:53 am
My telnet port was hammered all day yesterday, all Synch ports were busy. >>I added the IP to ip.can, and the board was still sluggish from rejecting >>all of the connections. I had to block it at my router. That was a >>first...
What was the IPA?
My telnet port was hammered all day yesterday, all Synch ports were busy. I added the IP to ip.can, and the board was still sluggish from rejecting all of the connections. I had to block it at my router. That was a first...
; Telnet abuse by <unknown user> on Fri Jan 25 2019 11:50 am
; Hostname: ip63.ip-144-217-57.net
144.217.57.63
I limit the number of connections from a single IP to ports 22 and 23 at the
firewall. If someone connects more than 5 times in as many minutes, their IP D>is temporarily blocked for a few hours, and if they try it again it's D>permantently blocked.
I changed the maximum concurrent connections to 1 -- and I made the
SSH port a non-conventional value. Lord Blackfair's CAPTCHA deal is keeping most of these bots from getting to the logon prompt. One
apparent hack attempt tried yesterday, and the BBS put a "temporary
ban" on the IP. Once I saw that in the log, it became PERMANENT.
you can use peerblock. let me know if you want my batchfile for adding ips to the list file.
Re: Getting hammered
By: poindexter FORTRAN to All on Sat Jan 26 2019 11:51 am
My telnet port was hammered all day yesterday, all Synch ports were busy. I added the IP to ip.can, and the board was still sluggish from rejecting all of the connections. I had to block it at my router. That was a first...
I limit the number of connections from a single IP to ports 22 and 23 at the firewall. If someone connects more than 5 times in as many minutes, their IP is temporarily blocked for a few hours, and if they try it again it's permantently blocked.
DaiTengu
... I broke a mirror & got 7 years of bad luck; my lawyer thinks he can get me 5.
I would love a copy of that batch file I have been having problems with that also mostly from the terminal service but also some from FTP and the other
I limit the number of connections from a single IP to ports 22 and 23
at the firewall. If someone connects more than 5 times in as many
minutes, their IP is temporarily blocked for a few hours, and if they
try it again it's permantently blocked.
I use to run all the services on the standard ports but found its not worth the trouble and problems it caused. The ony standard port I use now is nntp and smtp and I cut down the abuse a lot.
What was the IPA?; Telnet abuse by <unknown user> on Fri Jan 25 2019 11:50 am
; Hostname: ip63.ip-144-217-57.net
144.217.57.63
Re: Getting hammered
By: BLOODY BUTCHER to MRO on Mon Jan 28 2019 01:17 pm
I would love a copy of that batch file I have been having problems with that also mostly from the terminal service but also some from FTP and the other
are you using peerblock
are you using peerblockWhat is peer block is that part of the synchronet services or something else?
What was the IPA?; Telnet abuse by <unknown user> on Fri Jan 25 2019 11:50 am
; Hostname: ip63.ip-144-217-57.net
144.217.57.63
Looks like it is in a block that was assigned to McGill College in Quebec
Thanks for sharing it, I will add it to mine also.
MRO wrote to poindexter FORTRAN <=-
you can use peerblock. let me know if you want my batchfile for adding ips to the list file.
Looks like it is in a block that was assigned to McGill College in Quebecit's ovh
Looks like it is in a block that was assigned to McGill College in Quebecit's ovh
OVH???
College inLooks like it is in a block that was assigned to McGill
Quebecit's ovh
OVH???
YES.
Re: Getting hammeredI found peerblock and i have it working and it is cutting back on a lot of it but still having issues. I would love to have a copy of that bathfile please. :)
By: MRO to BLOODY BUTCHER on Mon Jan 28 2019 08:23 pm
are you using peerblockWhat is peer block is that part of the synchronet services or something else?
I found peerblock and i have it working and it is cutting back on a lot of it but still having issues. I would love to have a copy of that bathfile please. :)
YES.OVH???Looks like it is in a block that was assigned to McGill College in Quebecit's ovh
Re: Getting hammeredI have been doing that. I was wondering if there was a way we could batch file or somehow have synchronet the software itself or away SysOps could share the problem IP's with others..I know there is an updated file on vert for blacklisted ips but i thought that was to do with spam or is it also for the other services..??
By: BLOODY BUTCHER to MRO on Thu Jan 31 2019 12:01 pm
I found peerblock and i have it working and it is cutting back on ajust put the ip addresses into your .p2p file.
lot of it but still having issues. I would love to have a copy of that
bathfile please. :)
Re: Getting hammered
By: MRO to BLOODY BUTCHER on Thu Jan 31 2019 04:08 pm
Re: Getting hammeredI have been doing that. I was wondering if there was a way we could batch file or somehow have synchronet the software itself or away SysOps could share the problem IP's with others..I know there is an updated file on vert for blacklisted ips but i thought that was to do with spam or is it also for the other services..??
By: BLOODY BUTCHER to MRO on Thu Jan 31 2019 12:01 pm
I found peerblock and i have it working and it is cutting back on ajust put the ip addresses into your .p2p file.
lot of it but still having issues. I would love to have a copy of that
bathfile please. :)
BLOODY BUTCHER
| Sysop: | sneaky |
|---|---|
| Location: | Ashburton,NZ |
| Users: | 31 |
| Nodes: | 8 (0 / 8) |
| Uptime: | 92:20:25 |
| Calls: | 2,070 |
| Calls today: | 3 |
| Files: | 11,134 |
| Messages: | 946,853 |