Subj : Re: Back to Mystic To : Bucko From : AKAcastor Date : Thu Mar 14 2024 11:13 am B> Actually, a friend of mine wrote a bot checker for me. B> Currently it is very rudementary, where all you do is B> hit // to get past it, but the final version will allow B> a LOT of different things to go on with the Image BBS B> for the 64.. InterBBS chatting is one thing, live B> weather updates, this all on a 1 line/modem computer. It B> is a full "modem"/front end for the C64. It's gonna be B> really hot for the Image BBS.. Sounds very interesting, the extra features sound awesome. Looking forward to hearing more! B> As I said in a previous post, the Mystic bot checker works great. About 2 B> years ago just about all of the C-Net Amiga BBS sysOp's B> were being attacked non stop (why I have no idea!) I got connected to over B> 1500 times in a 10 hour period, all 10 lines of my board B> were non stop answering and hanging up. One of the B> sysOp's wrote a mpl to allow Mystic to connect, run the B> bot check and immediately transfer to the C-Net (this B> was the set up I used for my Image board) and it helped B> tremendously. Then we got the offending IP address and B> found out it was the same IP attacking 3 different B> boards at the same time, we all blocked it and the issue went away.. The bots sure are tenacious! I have been logging attempts to connect, to see the default credentials being tested, and use these as keywords to identify bots - for example, if someone connects and the first thing they type is 'root' - that's a bot. That triggers a temporary IP ban (which extends in duration each time it is triggered), which has worked well. In the past couple weeks, 42 different times the IP 190.211.255.106 connected to me and was banned. The same IP connected another 141 times while banned. 5 different times the IP 153.0.123.152 connected to me and was banned. The same IP connected another 1248 times while banned! I've had 2345 unique IPs trigger bans in the past month or so. It's at least kinda interesting to study. :) Chris/akacastor --- Maximus 3.01 * Origin: Another Millennium - Canada - another.tel (21:1/162) .