home bbs files messages ]

Just a sample of the Echomail archive

Cooperative anarchy at its finest, still active today. Darkrealms is the Zone 1 Hub.

   LINUX_BBS      Linux BBSing      935 messages   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]

   Message 378 of 935   
   mark lewis to Ignatius   
   Unwanted connections to port 23.   
   12 Jun 17 04:35:52   
   
    On 2017 Jun 12 00:54:18, you wrote to All:   
      
    Ig> I've since recently put my board back on port 23... and I now recall   
    Ig> why I took it off of it. I keep getting all of these connections from   
    Ig> hackers, I take it.   
      
   they are not hackers... at best they are skiddies but in reality, it is the   
   MIRAI botnets trying to see if your system is a vulnerable IoT (Internet of   
   Things) device like an IP Camera or a DVR or smart TV and similar... anything   
   that has default login credentials hardcoded in it...   
      
    Ig> Anyone know of a way to filter these bad connections?   
      
   there is none, really... you have to let them connect and then dump them based   
   on the data they shove at you without waiting for any prompts... yes, that's   
   right... they do not look for and respond to any sort of login prompts... they   
   just start spewing their login stuff followed by the shell commands to fire   
   off busybox...   
      
    Ig> I've tried Janis' iptables suggestion, but it isn't working.   
      
   intrusion detection systems are the only things i've seen that come close but   
   the connection and attempted login still has to take place... the *ONLY* other   
   option is to get off of port 23 and the other few that MIRAI specifically   
   targets... that includes the default SSH port as well...   
      
   )\/(ark   
      
   Always Mount a Scratch Monkey   
   Do you manage your own servers? If you are not running an IDS/IPS yer doin' it   
   wrong...   
   ... WANTED: Meaningful overnight relationship.   
   ---   
    * Origin:  (1:3634/12.73)   

[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]


(c) 1994,  bbs@darkrealms.ca