Hello all

Has anyone seen this happen before? filled All NODES and then by the looks of it tried for more

Connect on slot 1/5 (54.221.90.37)

1 - Hostname ec2-54-221-80-37.compute-1.amazonaws.com
1 - Creating terminal process

this continued on all with different IP addresses

Thanks
Mike Dennison

NeedFul Things BBS
Lindsay, Ontario, Canada
Mike Dennison (Cowboy0629)
needfulthings.ddns.net:2381

... No one knows what's next, but everybody does it.

--- Mystic BBS v1.12 A47 2021/12/24 (Linux/64)
* Origin: NeedFul Things BBS (21:1/211)

On 4/22/2022 12:13 PM, Cowboy0629 wrote to All:

Hello all

Has anyone seen this happen before? filled All NODES and then by the looks of
it tried for more

Connect on slot 1/5 (54.221.90.37)

1 - Hostname ec2-54-221-80-37.compute-1.amazonaws.com
1 - Creating terminal process

this continued on all with different IP addresses

Thanks
Mike Dennison

Looks like users trying to log in via http protocol.

Mike Dippel

--- Platinum Xpress/Win/WINServer v7.0
* Origin: The Hobby Line! Internet - hobbylinebbs.com (21:4/176)

On 22 Apr 2022, Cowboy0629 said the following...

Hello all

Has anyone seen this happen before? filled All NODES and then by the
looks of it tried for more

Connect on slot 1/5 (54.221.90.37)

1 - Hostname ec2-54-221-80-37.compute-1.amazonaws.com
1 - Creating terminal process

this continued on all with different IP addresses

Oh yea, you got hit with a bot attack.. Mystic is good at blocking IP's that do this, I wonder why it did not in your case though.. I had a bot attack not so long ago on my CNet Amiga BBS where a bot started attacking me at 1am, and when I caught up to it at 8am it had connected over 2000 times! I blocked the IP and it stopped it, but when I checked my other boards my C64 Image board was crashed and it showed non stop connections, my Enigma, Synchro and Mystic boards were still humming along.. If you are running Linux look into fail2ban, it should help against bot attacks, I am just starting to use it now so I can't offer much in the way of help with it though. I am hoping it stops what I am fearing are attacks on my Commodore board..

Al

... Computers all wait at the same speed!

--- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)
* Origin: The Wrong Number Family Of BBS' - Wrong Number ][ (21:4/131)

Oh yea, you got hit with a bot attack.. Mystic is good at blocking IP's that do this, I wonder why it did not in your case though.. I had a bot attack not so long ago on my CNet Amiga BBS where a bot started

I have had a few Bot attacks then but I'm pretty sure Mystic figured them out just took a little longer because it hits each node with a different IP have not had it for a few days now....

I will look into Fail2Ban

Thanks
Cowboy0629
NeedFul Things BBS
telnet: needfulthings.ddns.net"2381

NeedFul Things BBS
Lindsay, Ontario, Canada
Mike Dennison (Cowboy0629)
needfulthings.ddns.net:2381

... What do you mean, QWK? It took me over an hour to read!

--- Mystic BBS v1.12 A47 2021/12/24 (Linux/64)
* Origin: NeedFul Things BBS (21:1/211)

On 25 Apr 2022, Cowboy0629 said the following...

I have had a few Bot attacks then but I'm pretty sure Mystic figured
them out just took a little longer because it hits each node with a different IP have not had it for a few days now....

I will look into Fail2Ban

To be honest I don't even worry about my Mystic board with Bots, between Mystic and the Phenom front door nothing gets as far as login.. My C64 and Amiga boards, yea I have to have outside stuff to try to protect them...

Al

... BREAKFAST.COM Halted... Cereal port not responding.

--- Mystic BBS v1.12 A47 2021/12/25 (Windows/32)
* Origin: The Wrong Number Family Of BBS' - Wrong Number ][ (21:4/131)