• Weird Activity on BBS

    From Cowboy0629@21:1/211 to All on Fri Apr 22 12:09:53 2022
    Hello all

    Has anyone seen this happen before? filled All NODES and then by the looks of it tried for more

    Connect on slot 1/5 (54.221.90.37)
    1 - Hostname ec2-54-221-80-37.compute-1.amazonaws.com
    1 - Creating terminal process

    this continued on all with different IP addresses

    Thanks
    Mike Dennison

    NeedFul Things BBS
    Lindsay, Ontario, Canada
    Mike Dennison (Cowboy0629)
    needfulthings.ddns.net:2381

    ... No one knows what's next, but everybody does it.

    --- Mystic BBS v1.12 A47 2021/12/24 (Linux/64)
    * Origin: NeedFul Things BBS (21:1/211)
  • From Mike Dippel@21:4/176 to Cowboy0629 on Fri Apr 22 13:57:18 2022
    On 4/22/2022 12:13 PM, Cowboy0629 wrote to All:

    Hello all

    Has anyone seen this happen before? filled All NODES and then by the looks of
    it tried for more

    Connect on slot 1/5 (54.221.90.37)
    1 - Hostname ec2-54-221-80-37.compute-1.amazonaws.com
    1 - Creating terminal process

    this continued on all with different IP addresses

    Thanks
    Mike Dennison

    Looks like users trying to log in via http protocol.

    Mike Dippel

    --- Platinum Xpress/Win/WINServer v7.0
    * Origin: The Hobby Line! Internet - hobbylinebbs.com (21:4/176)
  • From Bucko@21:4/131 to Cowboy0629 on Fri Apr 22 19:53:04 2022
    On 22 Apr 2022, Cowboy0629 said the following...

    Hello all

    Has anyone seen this happen before? filled All NODES and then by the
    looks of it tried for more

    Connect on slot 1/5 (54.221.90.37)
    1 - Hostname ec2-54-221-80-37.compute-1.amazonaws.com
    1 - Creating terminal process

    this continued on all with different IP addresses



    Oh yea, you got hit with a bot attack.. Mystic is good at blocking IP's that do this, I wonder why it did not in your case though.. I had a bot attack not so long ago on my CNet Amiga BBS where a bot started attacking me at 1am, and when I caught up to it at 8am it had connected over 2000 times! I blocked the IP and it stopped it, but when I checked my other boards my C64 Image board was crashed and it showed non stop connections, my Enigma, Synchro and Mystic boards were still humming along.. If you are running Linux look into fail2ban, it should help against bot attacks, I am just starting to use it now so I can't offer much in the way of help with it though. I am hoping it stops what I am fearing are attacks on my Commodore board..

    Al

    ... Computers all wait at the same speed!

    --- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)
    * Origin: The Wrong Number Family Of BBS' - Wrong Number ][ (21:4/131)
  • From Cowboy0629@21:1/211 to Bucko on Mon Apr 25 13:30:55 2022
    Oh yea, you got hit with a bot attack.. Mystic is good at blocking IP's that do this, I wonder why it did not in your case though.. I had a bot attack not so long ago on my CNet Amiga BBS where a bot started

    I have had a few Bot attacks then but I'm pretty sure Mystic figured them out just took a little longer because it hits each node with a different IP have not had it for a few days now....

    I will look into Fail2Ban

    Thanks
    Cowboy0629
    NeedFul Things BBS
    telnet: needfulthings.ddns.net"2381

    NeedFul Things BBS
    Lindsay, Ontario, Canada
    Mike Dennison (Cowboy0629)
    needfulthings.ddns.net:2381

    ... What do you mean, QWK? It took me over an hour to read!

    --- Mystic BBS v1.12 A47 2021/12/24 (Linux/64)
    * Origin: NeedFul Things BBS (21:1/211)
  • From Bucko@21:4/131 to Cowboy0629 on Mon Apr 25 19:15:24 2022
    On 25 Apr 2022, Cowboy0629 said the following...


    I have had a few Bot attacks then but I'm pretty sure Mystic figured
    them out just took a little longer because it hits each node with a different IP have not had it for a few days now....

    I will look into Fail2Ban


    To be honest I don't even worry about my Mystic board with Bots, between Mystic and the Phenom front door nothing gets as far as login.. My C64 and Amiga boards, yea I have to have outside stuff to try to protect them...

    Al

    ... BREAKFAST.COM Halted... Cereal port not responding.

    --- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)
    * Origin: The Wrong Number Family Of BBS' - Wrong Number ][ (21:4/131)