Hi All
I've been (personally) offline for a while, been quite busy with life...
My BBS doesn't usually attract too many new users, but recently seen a rather large number of users all signed up. Here's the kicker:
All of them have the same username: unkown
Each of them have unique email address, @gmail.com address, optusnet.com.au
addresses, and various other
domains
All have different locations (cities) listed
I'm certain these aren't meant to be genuine accounts, but rather someone exploiting a small flaw in Mystic BBS, so just looking to see if anyone else has seen an up-tick in this behaviour recently?
I'll probably end up just deleting them...
Also found an IP address sitting at the login screen today, looked up the IP address and has been listed by MalwareBytes an a known scanner looking for Windows hosts with direct RDP exposed, so I blocked this at the firewall & dropped the connection. IP address:
https://www.malwarebytes.com/blog/detections/79-124-8-120
Thanks all!
|14Dave!
|05(|13dflorey|05)
|13Retro16 BBS |05--> |14bbs.retro16.com |05(|13WIP|05)
|07No one expects the Spanish inquisition!
--- Mystic BBS v1.12 A46 2020/08/26 (Windows/32)
* Origin: Retro16 BBS (21:1/226)