• terminal type: 80x24 DUMB

    From xbit@1:103/705 to All on Tue Mar 30 08:39:08 2021
    Any way to place IPs logging on with 'terminal type: 80x24 DUMB' into the IP address Filter (silent)? I get a ton and I'm sure most all are scanners.

    Also, getting a lot of the following: SSH WARNING 'Client sent malformed identifier string 'SSH-2.0-Go''. Not as much now that I moved my ssh port to non standard tcp/2222 but scanners will still find it.

    ... GUI: Grab the User In-the-face
    ---
    The X-BIT BBS --> x-bit.org
    þ Synchronet þ The X-BIT BBS * http://x-bit.org * http://x-bit.org/777.htm
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From echicken@1:103/705 to xbit on Tue Mar 30 16:25:36 2021
    Re: terminal type: 80x24 DUMB
    By: xbit to All on Tue Mar 30 2021 08:39:08

    Any way to place IPs logging on with 'terminal type: 80x24 DUMB' into the IP address Filter (silent)? I get a ton and I'm sure most all are scanners.

    There may be some useful info here re: temporary and permanent bans:

    http://wiki.synchro.net/howto:block-hackers

    This may only help if what they're doing counts as a "failed login". I'm not sure if disconnecting during newuser registration is included in that, nor if they're being disconnected because of a protocol error.

    I'm seeing a lot of these connections as well, They connect and disconnect almost immediately, and it really isn't an issue.

    Unless it's causing an actual problem, consider ignoring it. You can make yourself crazy staring at the logs.

    ---
    echicken
    electronic chicken bbs - bbs.electronicchicken.com
    ---
    þ Synchronet þ electronic chicken bbs - bbs.electronicchicken.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From xbit@1:103/705 to echicken on Tue Mar 30 12:18:07 2021
    Re: terminal type: 80x24 DUMB
    By: echicken to xbit on Tue Mar 30 2021 04:25 pm

    I'm seeing a lot of these connections as well, They connect and disconnect almost immediately, and it really isn't an issue.
    Unless it's causing an actual problem, consider ignoring it. You can make yourself crazy staring at the logs.

    Good call echicken, thanks for the reply.
    ---
    The X-BIT BBS --> x-bit.org
    þ Synchronet þ The X-BIT BBS * http://x-bit.org * http://x-bit.org/777.htm
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to xbit on Tue Mar 30 12:51:07 2021
    Re: terminal type: 80x24 DUMB
    By: xbit to All on Tue Mar 30 2021 08:39 am

    Any way to place IPs logging on with 'terminal type: 80x24 DUMB' into the IP address Filter (silent)? I get a ton and I'm sure most all are scanners.

    You could do that with a modified login.js. But why?

    Also, getting a lot of the following: SSH WARNING 'Client sent malformed identifier string 'SSH-2.0-Go''. Not as much now that I moved my ssh port to non standard tcp/2222 but scanners will still find it.

    Harmless.
    --
    digital man

    Sling Blade quote #15:
    Doyle Hargraves: What'cha doin' with that lawn mower blade Karl?
    Norco, CA WX: 76.8øF, 38.0% humidity, 2 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.14-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)