Sysop: | Amessyroom |
---|---|
Location: | Fayetteville, NC |
Users: | 41 |
Nodes: | 6 (0 / 6) |
Uptime: | 106:35:47 |
Calls: | 209 |
Files: | 820 |
Messages: | 106,850 |
Twice in the last two months i have seen 127.0.0.1 signing up for a new account. That is the local machine ip? How are they doing that?
Twice in the last two months i have seen 127.0.0.1 signing up for a new account. That is the local machine ip? How are they doing that? I also
Re: Local host shows as new sign up
By: Rixter to All on Tue Aug 06 2024 20:46:05
Your BBS website (if it has one - I couldn't get yours to load) is the most likely source.
A typical webv4 setup includes fTelnet configured to connect to your telnet server through a locally-hosted proxy service. From the telnet server's perspective, the connection comes from localhost.
Less common but possible is you put your BBS website behind a locally hosted reverse proxy, and these users are signing up via the web registration form if enabled. Similar scenario as above, but different protocol.
If it's not either of these ... I dunno, maybe there's a squatter living in your attic and they sneak down when you're in bed and sit down in front of your server and telnet into the server from the server and create accounts for fun and then they pop into your kitchen and help themselves to a few snacks from the fridge before heading back up to the attic, careful not to knock over their growing stash of piss jars while they settle back in, because you gotta have piss jars, that's just part of attic life, you might be stuck up there for a while and when you gotta go you gotta go, but then you always forget to bring the jars back down for disposal and so the stack just keeps growing and growing. I mean it's probably not that but maybe.
echicken
electronic chicken bbs - bbs.electronicchicken.com
---
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com
My web page is on port 8080 and 23 new users have used it for sign up or browsing. The connection to the imap for 2 1/2 days now is fascinating. What do they do with all that connection time. Lol
My web page is on port 8080 and 23 new users have used it for sign up or
browsing. The connection to the imap for 2 1/2 days now is fascinating.
If it's not either of these ... I dunno, maybe there's a squatter living in your attic and they sneak down when you're in bed and sit down in front of you
server and telnet into the server from the server and create accounts for fun and then they pop into your kitchen and help themselves to a few snacks from the fridge before heading back up to the attic, careful not to knock over thei
growing stash of piss jars while they settle back in, because you gotta have piss jars, that's just part of attic life, you might be stuck up there for a while and when you gotta go you gotta go, but then you always forget to bring the jars back down for disposal and so the stack just keeps growing and growing. I mean it's probably not that but maybe.
Twice in the last two months i have seen 127.0.0.1 signing up for a new account. That is the local machine ip? How are they doing that? I also
Re: Local host shows as new sign up
By: Rixter to echicken on Wed Aug 07 2024 04:23:35
People connecting via ftelnet on your Home page are the most likely source of these sign-ups from 127.0.0.1 then. These connections flow from the web browser, to your websocket server, to your terminal server.
I've done a few things over the years to make the user's true IP address available to the BBS for these connections, but it's all a bit hacky and doesn't apply everywhere.
Likely a script that connected and got stuck after failing to send email or exploit some known flaw in a common IMAP server and not handling the problem gracefully. Probably not hurting anything to just let them sit there forever, but it sounds like the IMAP server should probably be made to boot clients off after a while.
echicken
electronic chicken bbs - bbs.electronicchicken.com
---
� Synchronet � electronic chicken bbs - bbs.electronicchicken.com
Re: Local host shows as new sign up
By: Rixter to echicken on Wed Aug 07 2024 04:23:35
Most of the web traffic is probably bots and webcrawlers you've had 23 new users in 2 1/2 days?
---
Tim (kk4qbn)
+o kk4qbn.synchro.net
� Synchronet � KK4QBN BBS - kk4qbn.synchro.net - Chatsworth, GA USA
Re: Local host shows as new sign up
By: Rixter to All on Tue Aug 06 2024 08:46 pm
Paste the related log entries so we can have a look-see.
--
digital man (rob)
Steven Wright quote #24:
Why do psychics have to ask you for your name
Norco, CA WX: 91.1�F, 34.0% humidity, 11 mph W wind, 0.00 inches rain/24hrs ---
� Synchronet � Vertrauen � Home of Synchronet � [vert/cvs/bbs].synchro.net
8/6 04:06:47p 3724 Telnet connection accepted from: 127.0.0.1 port 52540
Paste the related log entries so we can have a look-see. --88.129.112.118 8/6 04:06:47p 3724 Telnet connection accepted from: 127.0.0.1 port 52540 8/6 04:06:47p 3724 Telnet Hostname: Ricks-Laptop7 [127.0.0.1] 8/6 04:06:47p Node 1 socket 3724 attached to local interface 127.0.0.1 port 23
8/6 04:06:47p Node 1 04:06p Tue Aug 06 2024 Node 1 8/6 04:06:47p Node 1 Telnet Ricks-Laptop7 [127.0.0.1] 8/6 04:06:48p Node 1 terminal type: 80x25 ansi-bbs 8/6 04:06:57p Node 1 Warning: same IP address as user #34 Arlan Levitan 8/6 04:08:20p Node 1 disconnected
Rixter wrote to echicken <=-
Re: Local host shows as new sign up
By: Rixter to All on Tue Aug 06 2024 20:46:05
My web page is on port 8080 and 23 new users have used it for sign up
or browsing. The connection to the imap for 2 1/2 days now is
fascinating. What do they do with all that connection time. Lol
Paste the related log entries so we can have a look-see.
8/6 04:06:47p 3724 Telnet Hostname: Ricks-Laptop7 [127.0.0.1]
Re: Local host shows as new sign up
By: Rixter to Digital Man on Wed Aug 07 2024 13:16:33
This is the only 127.0.0.1 login you have shown, and I presume it is you?? The user "Arlan" more than likely showing the same ip because they signed in on the website or ftelnet.
---
Tim (kk4qbn)
+o kk4qbn.synchro.net
---
� Synchronet � KK4QBN BBS - kk4qbn.synchro.net - Chatsworth, GA USA
To help cut down on some of the webcrawler traffic, create a robots.txt file and put it in your webroot directory. If you're using webv4 that would be /sbbs/webv4/root. In the robots.txt file, all you need really is three lines:
User-agent: *
User-agent: AdsBot-Google
Disallow: /
It won't eliminate all of the webcrawler traffic as there are some that ignore it, but it will stop many from indexing everything on your site.
Chris (CJ)
SysOp - CJ's Place BBS
... Gone crazy, be back later, please leave message.
--- MultiMail/Linux v0.52
� Synchronet � CJ's Place, Orange City, FL - cjsplace.thruhere.net
It was not me. I was watching this happen and thought it was odd.
Re: Local host shows as new sign up
By: Rixter to kk4qbn on Wed Aug 07 2024 21:29:57
Thats weird, Thought it was a strange coincidence that it said Ricks Laptop (127.0.0.1) thats what lead me to think that :-)
---
Tim (kk4qbn)
+o kk4qbn.synchro.net
� Synchronet � KK4QBN BBS - kk4qbn.synchro.net - Chatsworth, GA USA