#garfield Logs

May 01 2015

00:01 katsmeow-afk "we have been fortunate to be have a ready supply of CPU hours"
00:27 katsmeow-afk "i put starch in your coffee because you said you wanted a good stiff drink"
01:06 rue_house hehe
02:01 katsmeow-afk http://designerthinking.com/images/HUGE.JPG
03:51 katsmeow-afk it's May 1 2015
04:15 katsmeow-afk this month and one more, and we will be at the middle of the year
06:19 katsmeow-afk .
06:38 katsmeow-afk Earthquake of magnitude 7.1 strikes off Papua New Guinea
09:08 rue_house hmm 7!
09:22 rue_house hmm
09:23 rue_house if I made a program that dynamcially forwarded login attempts back to the source server, I wonder if they would figure it out
09:23 rue_house hack themselvs
14:29 katsmeow-afk AARRRGGGGG
20:22 katsmeow-afk .
20:37 katsmeow-afk one side: top side rail tacked to the uprights, diagonals tacked on, frame flat and straightened before tacking, frame standing up on side to weld up under the rail
23:06 rue_house ?
23:06 rue_house thats what done?
23:11 katsmeow-afk ok, top rail welded to diagonals and to uprights, frame laid back dow, and flattened with clamps
23:13 rue_house ALL: 218.87.0.0/15 : deny
23:13 rue_house ALL: 43.255.190.0/23 : deny
23:13 rue_house ALL: 182.100.0.0/16 : deny
23:13 rue_house ALL: 61.174.49/23 : deny
23:13 rue_house ALL: 221.224.0.0/13 : deny
23:13 rue_house ALL: 59.62.0.0/13 : deny
23:13 rue_house ALL: 58.208.0.0/12 : deny
23:13 rue_house ALL: 222.184.0.0/12 : deny
23:13 rue_house ALL: 117.40.0.0/14 : deny
23:13 rue_house ALL: 222.184.0.0/13 : deny
23:13 katsmeow-afk welding the floor joists to the side bottom rails warps them, making it look like its bent down and overloaded with nothing on it
23:13 rue_house ALL: 172.245.109.96/29 : deny
23:13 rue_house ALL: 60.0.0.0/12 : deny
23:13 rue_house ALL: 61.160.0.0/16 : deny
23:13 rue_house ALL: 112.208.0.0/12 : deny
23:13 rue_house 222 and 221 are the worst
23:14 katsmeow-afk so i laid a heavy channel under it and clamp it flat (and level too) before tacking the diagonals and top rail
23:15 katsmeow-afk looks at a typical flatbe 18-wheeler, the trailer are often arched up like a pissed off cat
23:15 katsmeow-afk they will do that because of the welding, even if you don't try to make them look like that
23:16 katsmeow-afk so i flattened mine before tacking the diagonals which hold it firmly flat
23:18 katsmeow-afk tomorrow i should get the otehr side done, and praps the side plates covering the wheels from the load
23:20 rue_house oh wow
23:20 katsmeow-afk hmm?
23:20 rue_house I'm scanning one of the china isps for what seem to be compromized machines
23:20 rue_house ... wow
23:21 katsmeow-afk lotta honey pots? or revenge traffic?
23:22 rue_house I noticed that each machine trying to hack me has port 6006 open
23:22 rue_house so I'm scanning for it
23:22 rue_house its not a port that should normally be open
23:23 katsmeow-afk why won't you tell me how i can know if they are trying to hack me?
23:23 rue_house you need to watch your firewall
23:23 rue_house my firewall is a pc that logs these things
23:23 rue_house May 1 17:47:31 t0002 sshd[24689]: Did not receive identification string from 119.9.104.123
23:23 rue_house May 1 17:51:29 t0002 sshd[24691]: refused connect from 222.186.134.92 (222.186.134.92)
23:23 rue_house May 1 18:14:21 t0002 sshd[24705]: refused connect from 43.255.190.144 (43.255.190.144)
23:23 rue_house May 1 18:20:13 t0002 sshd[24711]: refused connect from 222.186.134.82 (222.186.134.82)
23:23 rue_house May 1 18:42:05 t0002 sshd[24736]: refused connect from 43.255.190.115 (43.255.190.115)
23:23 rue_house May 1 18:47:00 t0002 sshd[24740]: refused connect from 222.186.134.85 (222.186.134.85)
23:23 katsmeow-afk there's one on the modem, it doesn't tell me anything, and the windoze one is equaly dumb
23:23 rue_house May 1 18:48:32 t0002 sshd[24741]: refused connect from 221.229.166.98 (221.229.166.98)
23:23 rue_house May 1 18:50:33 t0002 sshd[24743]: refused connect from 222.186.160.51 (222.186.160.51)
23:23 rue_house May 1 18:52:16 t0002 sshd[24744]: refused connect from 222.186.160.50 (222.186.160.50)
23:23 rue_house May 1 18:54:55 t0002 sshd[24745]: refused connect from 221.229.166.30 (221.229.166.30)
23:23 rue_house May 1 19:01:22 t0002 sshd[24748]: refused connect from 222.186.160.50 (222.186.160.50)
23:23 rue_house May 1 19:03:46 t0002 sshd[24749]: refused connect from 221.229.166.98 (221.229.166.98)
23:23 rue_house May 1 19:08:17 t0002 sshd[24753]: refused connect from 221.229.166.4 (221.229.166.4)
23:24 rue_house May 1 19:08:56 t0002 sshd[24754]: refused connect from 43.255.190.156 (43.255.190.156)
23:24 rue_house May 1 19:11:13 t0002 sshd[24764]: refused connect from 222.186.160.50 (222.186.160.50)
23:24 rue_house May 1 19:12:57 t0002 sshd[24766]: refused connect from 58.218.204.52 (58.218.204.52)
23:24 rue_house May 1 19:15:09 t0002 sshd[24767]: refused connect from 221.229.166.98 (221.229.166.98)
23:24 rue_house May 1 19:21:58 t0002 sshd[24773]: refused connect from 222.186.160.52 (222.186.160.52)
23:24 rue_house May 1 19:26:05 t0002 sshd[24775]: refused connect from 221.229.166.29 (221.229.166.29)
23:24 rue_house May 1 19:26:19 t0002 sshd[24776]: refused connect from 221.229.166.98 (221.229.166.98)
23:24 rue_house May 1 19:36:47 t0002 sshd[24781]: refused connect from 43.255.190.122 (43.255.190.122)
23:24 rue_house May 1 19:37:18 t0002 sshd[24782]: refused connect from 43.255.191.143 (43.255.191.143)
23:24 rue_house May 1 19:43:59 t0002 sshd[24793]: refused connect from 222.186.134.89 (222.186.134.89)
23:24 rue_house May 1 20:02:54 t0002 ss
23:24 rue_house we had lots of attempts today
23:24 rue_house then I guess you cant :/
23:26 katsmeow-afk i told windose firewall to log, and the log file stil isn't created years later
23:27 rue_house your hardware firewall is already taking it all
23:29 katsmeow-afk just checked, all network services of winxp are off for the lan and the internet, including all icmp
23:31 rue_house this is linux machines, I think usually ubuntu, that have been exploited somehow
23:33 katsmeow-afk i was doing a /netstat \all, but nothing i didn't know about already ever showed
23:34 katsmeow-afk during heavy data mining, i can't doa a netstsat anyhow, there's just too much data from socks open, WAITing, pending, etc etc
23:34 katsmeow-afk you see that download attemp of the entire internt that happened this morning?
23:36 rue_house I was reading the results wrong
23:36 katsmeow-afk http://designerthinking.com/images/HUGE.JPG
23:36 rue_house but its a remote access exploit
23:38 katsmeow-afk that jog isn't photoshopped, i did a screen grab and cropped it to the relavant data
23:38 tsmeow-afk looks at her tires paws, and decides they need washing a
23:40 rue_house :)
23:45 rue_house I'm trying to see if I can write a honeypot for port 6006 and see what they do
23:46 katsmeow-afk just put the mowerbot online, and see what they do with it
23:46 katsmeow-afk it's a 386, right?
23:47 katsmeow-afk they may think it's a superputer trying to fake it, and keep on working on it
23:54 rue_house https://theorylunch.wordpress.com/2013/01/24/ssh-mitm/
23:54 rue_house oh man
23:54 rue_house seriously?
23:57 katsmeow-afk this is a comon password?? ==>> 7hur@y@t3am$#@!(*(
23:57 katsmeow-afk ?
23:57 rue_house I'd never even be able to remember it