• Multiple tries

    From Sam@VERT/SKYLABSY to All on Sunday, February 02, 2014 07:20:25
    I have someone trying multiple times to get into my system. Using User root User Echo and other thing to get into my system ip address 177.17.195.111 trying al kinds of stuff. So keep an eye on your system
    Thanks Sam

    ---
    þ Synchronet þ Skylab System's BBS - skylab.synchro.net
  • From Poindexter Fortran@VERT/REALITY to Sam on Sunday, February 02, 2014 13:12:10
    Re: Multiple tries
    By: Sam to All on Sun Feb 02 2014 07:20 am

    I have someone trying multiple times to get into my system. Using User root User Echo and other thing to get into my system ip address 177.17.195.111 trying al kinds of stuff. So keep an eye on your system

    I had someone at 114.103.68.8 just try logging on as root. It might be interesting to make a networked IP.BAN file, but the implications are
    pause giving-worthy.

    ---
    þ Synchronet þ realitycheckBBS -- http://realitycheckBBS.org
  • From ROBERT WOLFE@VERT/OTHETA to SAM on Sunday, February 02, 2014 05:28:00


    User Echo and other thing to get into my system ip address 177.17.195.111 S>trying al kinds of stuff. So keep an eye on your system
    Thanks Sam

    Have you tried adding the IP to Synchronet's IP.CAN file?

    ---
    þ OLXWin 1.00b þ Press "+" to see another tagline.
    þ wcQWK 7.0 ÷ RiverNet BBS * Memphis, TN * winserver.us
  • From Charon@VERT/THERIVER to Sam on Monday, February 03, 2014 08:14:14
    Re: Multiple tries
    By: Sam to All on Sun Feb 02 2014 07:20:25

    I have someone trying multiple times to get into my system. Using User root User Echo and other thing to get into my system ip address 177.17.195.111 trying al kinds of stuff. So keep an eye on your system
    Thanks Sam


    Same here. The IP address is from Goiania Brazil. I have been
    seeing activity for weeks, from this IP address. The IP address is DHCP, but could also be a hijacked or compromised PC. I blocked a scheme of IP
    addresses from an IP that was using a proxy server located in Romainia to attempt to gain access into the system.

    Charon
    riverstyx.darktech.org

    ---
    þ Synchronet þ The River Styx - riverstyx.darktech.org
  • From Bbikebbs@VERT/OLDTIME to Charon on Monday, February 03, 2014 20:02:00
    Charon wrote to Sam <=-

    @VIA: VERT/THERIVER
    @MSGID: <52EFA436.9654.dove-gen@riverstyx.darktech.org>
    @REPLY: <52EE4619.66.dove-gen@skylab.synchro.net>
    @TZ: 4168
    Re: Multiple tries
    By: Sam to All on Sun Feb 02 2014 07:20:25

    I have someone trying multiple times to get into my system. Using User root User Echo and other thing to get into my system ip address 177.17.195.111 trying al kinds of stuff. So keep an eye on your system
    Thanks Sam


    Same here. The IP address is from Goiania Brazil. I have been
    seeing activity for weeks, from this IP address. The IP address is
    DHCP, but could also be a hijacked or compromised PC. I blocked a
    scheme of IP addresses from an IP that was using a proxy server located
    in Romainia to attempt to gain access into the system.

    Charon
    riverstyx.darktech.org

    ---
    þ Synchronet þ The River Styx - riverstyx.darktech.org

    This is a great time to us the IP.CAN file. It does work!


    Scott -- The Old Time BBS -- oldtime.synchro.net
    Streamwood, IL

    ... MultiMail, the new multi-platform, multi-format offline reader!
    --- MultiMail/Win32 v0.49
    þ Synchronet þ -- The Old Time BBS Telnet: oldtime.synchro.net
  • From DeepEND@VERT/RDBBS to Sam on Monday, February 17, 2014 15:33:06
    I have someone trying multiple times to get into my system. Using User root User Echo and other thing to get into my system ip address 177.17.195.111 trying al kinds of stuff. So keep an eye on your system
    Thanks Sam

    ---
    þ Synchronet þ Skylab System's BBS - skylab.synchro.net

    Not sure about people just hosting BBS's but its pretty common place for most servers these days. My servers probably have 30 or 40 different IPs trying to access something they shouldn't at all hours. Firewall of course blocks them but its bound to happen.

    Thanks
    DeepEND

    ---
    þ Synchronet þ RetroDigital.net BBS