• Re: URGENT: endofthelinebbs.com please de-peer compromised infrastructure immediately

    From doctor@doctor@doctor.nl2k.ab.ca (The Doctor) to news.admin.peering on Sat Jun 28 16:33:47 2025
    From Newsgroup: news.admin.peering

    In article <20250628014552.1d84de9f@wibble.sysadmininc.com>,
    Nigel Reed <sysop@endofthelinebbs.com> wrote:
    On Fri, 28 Jun 2025 00:30:00 +0000
    security@i2pn2.org (NovaBBS / RockSolid Security Team) wrote:

    URGENT NOTICE TO endofthelinebbs.com ADMINISTRATORS:

    We have detected that news.nk.ca is still peering with compromised
    infrastructure. Please de-peer the following servers IMMEDIATELY:

    i2pn2.org
    novabbs.com
    novabbs.org
    novalink.us
    rocksolidbbs.com

    Your continued peering with these compromised systems puts usenet
    infrastructure at risk. Please take immediate action to disconnect
    all peering relationships with the above hosts.

    This is an emergency security situation requiring immediate response.


    endofthelinebbs.com does not care if news.nk.ca is peering with you or
    not.


    I have them blocked on my feed.

    --
    End Of The Line BBS - Plano, TX
    telnet endofthelinebbs.com 23


    --
    Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
    Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism ;
    All I want to hear from JEsus Christ is WEll done Good and Faithful servant
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From nb@deletethis@invalid.lan to news.admin.peering on Sun Jun 29 20:37:27 2025
    From Newsgroup: news.admin.peering



    On Sat, 28 Jun 2025, The Doctor wrote:



    I have them blocked on my feed.


    greets from Barbados

    I just took a look b4 goung to bed, i womder if they are related to
    thes turds, looks start a day aho


    grep "Refusing connection" /var/log/dnews/dnews.log | awk '{print $7}' | wc -l 50949


    howeber

    grep "Refusing connection" /var/log/dnews/dnews.log | awk '{print $7}'
    |rev | cut -c3- | rev| cut -c2- | sort | uniq | wc -l
    90



    load average: 0.01, 0.09, 0.08
    one resin we stay on dnews.. its super nice on resource evwn when flogged


    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From Nigel Reed@sysop@endofthelinebbs.com to news.admin.peering on Sun Jun 29 23:26:42 2025
    From Newsgroup: news.admin.peering

    On Sat, 28 Jun 2025 16:33:47 -0000 (UTC)
    doctor@doctor.nl2k.ab.ca (The Doctor) wrote:

    In article <20250628014552.1d84de9f@wibble.sysadmininc.com>,
    Nigel Reed <sysop@endofthelinebbs.com> wrote:
    On Fri, 28 Jun 2025 00:30:00 +0000
    security@i2pn2.org (NovaBBS / RockSolid Security Team) wrote:

    URGENT NOTICE TO endofthelinebbs.com ADMINISTRATORS:

    We have detected that news.nk.ca is still peering with compromised
    infrastructure. Please de-peer the following servers IMMEDIATELY:

    i2pn2.org
    novabbs.com
    novabbs.org
    novalink.us
    rocksolidbbs.com

    Your continued peering with these compromised systems puts usenet
    infrastructure at risk. Please take immediate action to disconnect
    all peering relationships with the above hosts.

    This is an emergency security situation requiring immediate
    response.

    endofthelinebbs.com does not care if news.nk.ca is peering with you
    or not.


    I have them blocked on my feed.

    Why? What evidence do you have that the news server was compromised?
    --
    End Of The Line BBS - Plano, TX
    telnet endofthelinebbs.com 23


    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From doctor@doctor@doctor.nl2k.ab.ca (The Doctor) to news.admin.peering on Mon Jun 30 19:11:54 2025
    From Newsgroup: news.admin.peering

    In article <20250629232642.3d648bc8@wibble.sysadmininc.com>,
    Nigel Reed <sysop@endofthelinebbs.com> wrote:
    On Sat, 28 Jun 2025 16:33:47 -0000 (UTC)
    doctor@doctor.nl2k.ab.ca (The Doctor) wrote:

    In article <20250628014552.1d84de9f@wibble.sysadmininc.com>,
    Nigel Reed <sysop@endofthelinebbs.com> wrote:
    On Fri, 28 Jun 2025 00:30:00 +0000
    security@i2pn2.org (NovaBBS / RockSolid Security Team) wrote:

    URGENT NOTICE TO endofthelinebbs.com ADMINISTRATORS:

    We have detected that news.nk.ca is still peering with compromised
    infrastructure. Please de-peer the following servers IMMEDIATELY:

    i2pn2.org
    novabbs.com
    novabbs.org
    novalink.us
    rocksolidbbs.com

    Your continued peering with these compromised systems puts usenet
    infrastructure at risk. Please take immediate action to disconnect
    all peering relationships with the above hosts.

    This is an emergency security situation requiring immediate
    response.

    endofthelinebbs.com does not care if news.nk.ca is peering with you
    or not.


    I have them blocked on my feed.

    Why? What evidence do you have that the news server was compromised?



    I will await and see the outcome.

    Mauybe Google Groupers flooded the node.



    --
    End Of The Line BBS - Plano, TX
    telnet endofthelinebbs.com 23


    --
    Member - Liberal International This is doctor@nk.ca Ici doctor@nk.ca
    Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism ;
    All I want to hear from JEsus Christ is WEll done Good and Faithful servant
    --- Synchronet 3.21d-Linux NewsLink 1.2