View unanswered posts | View active topics It is currently Wed Apr 26, 2017 3:04 am



Reply to topic  [ 6 posts ] 
 Odd connections seen on TWGS 
Author Message
1st Sergeant

Joined: Sun Dec 24, 2000 3:00 am
Posts: 36
Location: USA
Unread post Odd connections seen on TWGS
Today I was watching my TWGS and I started seeing rapid connection attempts from 72.222.3.189 using these User Names:
root
admin
cusadmin

They never acttually connected to a game, though...

I noticed it once before from 190.252.18.203 also...

Anyone ever noticed that on their TWGS?

_________________
Abraxus
Stardock Alpha-Prime
telnet alphaprime.mine.nu


Thu Apr 17, 2014 9:33 am
Profile WWW
Sergeant

Joined: Mon Jan 06, 2014 11:01 pm
Posts: 8
Unread post Re: Odd connections seen on TWGS
Sounds like a script kiddy looking for a way in. Probably unattended at that and not even knowing what is on the other side.


Thu Apr 17, 2014 7:45 pm
Profile
Commander

Joined: Thu Oct 17, 2002 2:00 am
Posts: 1009
Unread post Re: Odd connections seen on TWGS
The first one is coming from Cox Communications close to Newton/El Dorado Kansas. The second one is coming from Colombia Telecommunications. Hope this helps

_________________
There I go getting Ship Destroyed AGAIN :)

Image


Thu Apr 17, 2014 11:40 pm
Profile
Ambassador
User avatar

Joined: Fri Feb 23, 2001 3:00 am
Posts: 3625
Location: USA
Unread post Re: Odd connections seen on TWGS
Maybe a script probing port 23? Which gives us a good reason to change our game access ports to 2002, or something other than 23.

_________________
Image
HHT 2015 Champs: Cloud09
Big Game 2016 Champs: Draft team


Classic Style Games Here:
telnet://Cruncherstw.no-ip.biz:2002

flash client: http://Cruncherstw.no-ip.biz:2004/PlayTW.html
Web page from 1990's: http://tradewars.fament.com/Cruncher/tradewar.htm
Blog with current server info: http://cruncherstw.blogspot.com
E-mail: Cruncherstw@gmail.com
http://www.facebook.com/CrunchersTW


Fri Apr 18, 2014 7:36 am
Profile ICQ WWW
Ambassador
User avatar

Joined: Wed Apr 20, 2011 1:19 pm
Posts: 1799
Location: Oklahoma City, OK 73170 US
Unread post Re: Odd connections seen on TWGS
Abraxus wrote:
Today I was watching my TWGS and I started seeing rapid connection attempts from 72.222.3.189 using these User Names:
root
admin
cusadmin

They never acttually connected to a game, though...

I noticed it once before from 190.252.18.203 also...

Anyone ever noticed that on their TWGS?
Hackers... Not TradeWars hackers though, "root" is the default admin user for a linux server, "admin" and "cusadmin" are common admin users for routers.

_________________
Regards,
Micro

Website: http://www.microblaster.net
TWGS2.20b/TW3.34: telnet://twgs.microblaster.net:2002
TeamSpeak3: ts.microblaster.net:9987

"The goal is to turn data into information, and information into insight.”


Sat Apr 19, 2014 2:36 pm
Profile ICQ YIM WWW
Warrant Officer

Joined: Thu Jun 07, 2007 4:50 am
Posts: 86
Location: United States
Unread post Re: Odd connections seen on TWGS
I get the same thing once or twice a day. It's a Robot hacking program.

Was using the same password file list too.

_________________
Milton's Planet
http://miltonsplanet.dynu.com


Wed Jun 25, 2014 3:17 pm
Profile ICQ YIM WWW
Display posts from previous:  Sort by  
Reply to topic   [ 6 posts ] 

Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by STSoftware.