Hello,
Is there anyone who knows how to block port scanning IPs? I have one there in ip.can, but it doesn't work. Terminal log shows: "3600 SSH connection accepted from: <IP address> port 34297" and after that: "3600 SSH Read failure". I have firewall turned on, automatic IP blocking works properly except this. Do you know how to block port scanning IP?
Regards,
IP.can WILL block the connection, as far as letting them attempt to login, which keeps your nodes cleared up quicker, It will not block the initial connect though, there is no real way to do that without actually setting it up in your router.
--
Tim Smith (KK4QBN)
KK4QBN BBS
Okay, thanks, but my router doesn't support blocking connections from the Internet, it can block only with in LAN network... Do you know any other way to block them without using router?
Neko wrote to KK4QBN on 03-09-17 23:57 <=-
Re: Hackers and port scanners
By: KK4QBN to Neko on Thu Mar 09 2017 13:13:19
IP.can WILL block the connection, as far as letting them attempt to login, which keeps your nodes cleared up quicker, It will not block the initial connect though, there is no real way to do that without actually setting it up in your router.
Okay, thanks, but my router doesn't support blocking connections from
the Internet, it can block only with in LAN network... Do you know any other way to block them without using router?
Hello,
Is there anyone who knows how to block port scanning IPs? I have one there in ip.can, but it doesn't work.
Can you elaborate on what you mean by "doesn't work"?I mean there's a bot (Chinese IP address) constantly trying to connect to my BBS - it lasts about an hour. Log shows that there's an IP trying to connect and then I can see a warning "SSH Read Failure". After a minute the same IP tries to connect from another port and the same warning shows in the log. It doesn't matter if I turn on Windows Firewall, router firewall on the highest security settings, both or none of them. There are only exceptions for Synchronet and Windows Server services that need an exception.
digital man
Okay, thanks, but my router doesn't support blocking connections from the Internet, it can block only with in LAN network... Do you know any other way to block them without using router?
Re: Hackers and port scanners
By: Digital Man to Neko on Thu Mar 09 2017 21:11:14
Can you elaborate on what you mean by "doesn't work"?
I mean there's a bot (Chinese IP address) constantly trying to connect to my BBS - it lasts about an hour. Log shows that there's an IP trying to connect and then I can see a warning "SSH Read Failure". After a minute the same IP tries to connect from another port and the same warning shows in the log. It doesn't matter if I turn on Windows Firewall, router firewall on the highest security settings, both or none of them. There are only exceptions for Synchronet and Windows Server services that need an exception.
[0mI mean there's a bot (Chinese IP address) constantly trying to connect to my BBS - it lasts about an hour. Log shows that there's an IP trying to connect and then I can see a warning "SSH Read Failure". After a minute the same IP tries to connect from another port and the same warning shows in the log. It doesn't matter if I turn on Windows Firewall, router firewall on the highest security settings, both or none of them. There are only exceptions for Synchronet and Windows Server services that need an exception.
| Sysop: | Gate Keeper |
|---|---|
| Location: | Shelby, NC |
| Users: | 750 |
| Nodes: | 20 (0 / 20) |
| Uptime: | 05:43:49 |
| Calls: | 10,876 |
| Calls today: | 10 |
| Files: | 5,288 |
| D/L today: |
1 files (36K bytes) |
| Messages: | 510,721 |