1. Forum
  2. FidoNet
  3. SYNC SYSOPS

  • SSH Log Entries

    From Ray Quinn@1:103/705 to All on Mon May 7 20:30:00 2018
    I have been getting messages like the one below in my Synchronet log file by issuing the command:

    tail -f /var/log/messages | grep synchronet

    May 7 20:22:11 bbs synchronet: term 0064 SSH connection accepted from: 113.22.15.54 port 60341
    May 7 20:22:13 bbs synchronet: term 0064 SSH info 'No algorithm compatible with
    the remote system's selection was found: 'diffie-hellman-group1-sha1'' (-20) setting session active from bbs_thread
    May 7 20:22:13 bbs synchronet: term 0064 SSH session establishment failed

    I get these over and over, each from a different IP address and only seconds apart. Can anyone tell me what is going on here?


    ---

    If the right side of the brain controls the left side of the body,
    then only left handed people are in their right minds.

    _____
    , |[][]|
    ,__| ______| |
    ,__/__]|| ________ | D8 |
    |__!___!!`--'L_______\ |__________|() ___________
    "(_)[___]====(_)(_)=| \_(___________)_/__/=(_)===(_)~'

    73 de Ray Quinn W6RAY
    GMRS WQTX645
    .. Visalia, CA USA DM06ii
    . When all else fails, ham radio works!
    ---
    * Synchronet * US 99 BBS - Visalia, CA - bbs.quinnnet.org
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From KK4QBN@1:103/705 to Ray Quinn on Tue May 8 04:32:26 2018
    Re: SSH Log Entries
    By: Ray Quinn to All on Mon May 07 2018 20:30:00

    I have been getting messages like the one below in my Synchronet log file by issuing the command:

    tail -f /var/log/messages | grep synchronet

    May 7 20:22:11 bbs synchronet: term 0064 SSH connection accepted from: 113.22.15.54 port 60341
    May 7 20:22:13 bbs synchronet: term 0064 SSH info 'No algorithm compatible with
    the remote system's selection was found: 'diffie-hellman-group1-sha1'' (-20) setting session active from bbs_thread
    May 7 20:22:13 bbs synchronet: term 0064 SSH session establishment failed

    I get these over and over, each from a different IP address and only seconds apart. Can anyone tell me what is going on here?

    Bots, bots, and more bots...

    --

    Tim Smith (KK4QBN)
    KK4QBN BBS

    ---
    * Synchronet * KK4QBN BBS - kk4qbn.com - 706.422.9538 - EM74OR - NW GA USA
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Thumper@1:103/705 to Ray Quinn on Tue May 8 11:45:00 2018
    Ray Quinn wrote to All <=-

    I have been getting messages like the one below in my Synchronet log
    file by issuing the command:

    tail -f /var/log/messages | grep synchronet

    May 7 20:22:11 bbs synchronet: term 0064 SSH connection accepted from: 113.22.15.54 port 60341
    May 7 20:22:13 bbs synchronet: term 0064 SSH info 'No algorithm compatible with
    the remote system's selection was found: 'diffie-hellman-group1-sha1'' (-20) setting session active from bbs_thread
    May 7 20:22:13 bbs synchronet: term 0064 SSH session establishment
    failed

    I get these over and over, each from a different IP address and only seconds apart. Can anyone tell me what is going on here?

    Got the same thing here. Never noticed it before. Bots I suppose.....



    ... MultiMail, the new multi-platform, multi-format offline reader!
    --- MultiMail/Win32 v0.49
    * Synchronet * The Wastelands BBS, Copperopolis, CA
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Ray Quinn@1:103/705 to KK4QBN on Tue May 8 19:43:01 2018
    Re: SSH Log Entries
    By: KK4QBN to Ray Quinn on Tue May 08 2018 04:32:26

    Re: SSH Log Entries
    By: Ray Quinn to All on Mon May 07 2018 20:30:00

    Bots, bots, and more bots...


    That is what I suspected.
    ---

    If the right side of the brain controls the left side of the body,
    then only left handed people are in their right minds.

    _____
    , |[][]|
    ,__| ______| |
    ,__/__]|| ________ | D8 |
    |__!___!!`--'L_______\ |__________|() ___________
    "(_)[___]====(_)(_)=| \_(___________)_/__/=(_)===(_)~'

    73 de Ray Quinn W6RAY
    GMRS WQTX645
    .. Visalia, CA USA DM06ii
    . When all else fails, ham radio works!
    ---
    * Synchronet * US 99 BBS - Visalia, CA - bbs.quinnnet.org
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Moon Raker@1:103/705 to Ray Quinn on Mon May 14 01:47:09 2018
    Re: SSH Log Entries
    By: Ray Quinn to All on Mon May 07 2018 08:30 pm

    May 7 20:22:11 bbs synchronet: term 0064 SSH connection accepted from: 113.22.15.54 port 60341

    Not sure but when I leave SSH open on my Linux Server.. I get scanned from China and Russia.
    I run a denyhost daemon that collects IP's from known hackers and uploads that list and downloads
    that compiled list. I have a massive deny.hosts file. It got soo bad I started banning by
    country. 3 strikes and your out. Start building a Deny Host file.
    I tried to offer a time server online and got DoS attacked soo bad it sucked up
    my bandwidth.
    I had to shut it down. They won. I traced most of my attacks to China. Would
    love to
    hear other stories of being attacked. It's hard to stop.. Your ISP almost has to do it.
    Good luck with that most ISP's don't like servers or open ports...
    Good luck---

    ---
    * Synchronet * Time Warp of the Future BBS - Home of League 10 IBBS Games
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)