All Change!!

Finally took the big leap and moved the site off WordPress and onto Classic Press. There are several reasons for this with the primary ones being WordPress’s bloated code base and its jetpack plugin trying to basically make everyone else’s plugins obsolete. The other reason was Gutenberg – I hated block editing with a vengeance […]

Too much furniture

So all the furniture arrived. The New England dresser has replaced the sideboard. We have a dry-sink unit to replace the butcher block – when we can work out where to put that. The “new” dining table is still propped up against the wall as until we move other stuff round we haven’t got space […]

Spring Cleaning

We’ve got some furniture arriving from the USA in a week or so and so we’ve been working on making space in the house for it and also making sure that there is space to bring it into the house through the garden as there is no way the bigger items are going to go […]

My Poor Neglected Blog

Was it really in 2017 that I last posted on here? I guess it must have been. Since then I’ve been boating several times with two week long holidays to Llangollen and a round trip round the West Midlands and Birmingham – which is actually a lot nicer than it sounds. I’ve also done two […]

State Sponsored hacking?

So yesterday my site got hit by a large number(140) of Chinese IP addresses  all trying to login to my site. Fail2 ban blocked them and sent me lots of emails: Then this morning another pile of Chinese IP addresses ( over 100 ) attempted to login to my email server: Fail2ban blocked those too. […]

More Botnet stats

So I upgraded Fail2ban and so had to restart it. As it stores it’s bans in a database it can restore them at start up. And what a depressingly long list it is for the botnet: 2017-08-05 14:58:20,149[dovecot-disconnect] Ban 1.163.34.115 2017-08-05 14:58:21,110[dovecot-disconnect] Ban 1.175.2.48 2017-08-05 14:58:23,213[dovecot-disconnect] Ban 1.175.27.62 2017-08-05 14:58:24,683[dovecot-disconnect] Ban 1.180.64.86 2017-08-05 14:58:27,764[dovecot-disconnect] Ban […]

Botnet stopped…

Either its been taken off line or I’ve blocked all its IPs. No more new additions for over 24 hours:   Status for the jail: dovecot-disconnect |- filter | |- File list: /var/log/mail.log | |- Currently failed: 0 | `- Total failed: 718 `- action |- Currently banned: 699 | `- IP list: 50.97.183.121 45.55.11.188 […]

Botnet still chugging along

Its still going: Jun 12 18:41:25 Debussy dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<colin@some.domain.here>, method=PLAIN, rip=36.7.79.21, Jun 12 18:42:01 Debussy dovecot: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=<colin>, method=PLAIN, rip=113.240.237.10, Jun 12 19:11:58 Debussy dovecot: imap-login: Disconnected (auth failed, 1 attempts in 9 secs): user=<drtone@some.domain.here>, method=PLAIN, rip=218.201.83.148, Jun […]