| View previous topic :: View next topic |
| Author |
Message |
Sinyx
Joined: 20 Apr 2007
Posts: 241
Location: Brooklyn, NY
|
|
| Back to top |
|
 |
Occultus
Joined: 28 Apr 2007
Posts: 56
Location: UK
|
 Posted: Sat May 12, 2007 12:13 pm Post subject: |
  |
|
Yeah - the easiest way to get the text is through firefox.
One thing to bear in mind is that the service on 5217 is attempting to telnet back to the incoming host ... which means it's collected the IP of every connection.
If the bot herder is smart they'll be logging that data, in which case they'll have seen the sudden surge in connections and might already guess they've been spotted anyway - whether or not you shut down the ports. If the Auth connection spotted last night was real, then chances are someone has logged in and picked up all that info.
Even if they're not that smart, a simple browse of the forum will tell them everything they need to know anyway - we've been discussing it in public.
Hopefully everyone who tried that port is fully prepared for incoming - if they've collected our IPs there might be a backlash 
edited to add:
| Sinyx wrote: |
| Quote: |
A low growl greets me as I approach the fence, but I am not afraid. Providence cowers. Too timid to attack. Too skittish to look me in the eye. As people pass by, he barks at their shadows reluctant to confront them head on. The yard shows signs of digging, but there is no evidence in this world of what, if anything, has been found.
Evil lurks. Its sinewy web radiates out from the corner. Providence howls. |
This last post sounds like it's even taunting us! Someone's 'digging in our yard', so what do we do? Do we shut down the ports or try to collect more evidence about what's going on? Which one is more 'cowardly'? BA obviously wants us to 'attack'.
I'm pretty reluctant to say this has nothing to do with BA anymore. |
I think the post refers to us (Providence the dog) digging around in our yard (this server), but we haven't found anything useful. Something is lurking (the bot herder?) that we haven't discovered yet. |
|
| Back to top |
|
|
Biff
Joined: 22 Apr 2007
Posts: 439
|
| Posted: Sat May 12, 2007 1:19 pm Post subject: |
|
|
| Occultus wrote: |
| Sinyx wrote: |
| Quote: |
A low growl greets me as I approach the fence, but I am not afraid. Providence cowers. Too timid to attack. Too skittish to look me in the eye. As people pass by, he barks at their shadows reluctant to confront them head on. The yard shows signs of digging, but there is no evidence in this world of what, if anything, has been found.
Evil lurks. Its sinewy web radiates out from the corner. Providence howls. |
This last post sounds like it's even taunting us! Someone's 'digging in our yard', so what do we do? Do we shut down the ports or try to collect more evidence about what's going on? Which one is more 'cowardly'? BA obviously wants us to 'attack'.
I'm pretty reluctant to say this has nothing to do with BA anymore. |
I think the post refers to us (Providence the dog) digging around in our yard (this server), but we haven't found anything useful. Something is lurking (the bot herder?) that we haven't discovered yet. |
I agree, with a few embellishments:
"Providence cowers. Too timid to attack. Too skittish to look me in the eye."
I think this means people are afraid to call in their dreams, or contribute to our own "dreamnet " (attacking her). But then, I guess that sounds like blatant self promotion on my part... One trick Biffy.  |
|
| Back to top |
|
|
Mapmaker
Joined: 20 Apr 2007
Posts: 236
Location: Honolulu, HI
|
| Posted: Sat May 12, 2007 1:50 pm Post subject: |
|
|
| Occultus wrote: |
Hopefully everyone who tried that port is fully prepared for incoming - if they've collected our IPs there might be a backlash
|
I'm working around that one courtesy of a hotel in Durham, NC. *Looks out window in general direction of GetMeOut* |
|
| Back to top |
|
|
Dante
Joined: 20 Apr 2007
Posts: 578
Location: Chicago, IL
|
| Posted: Sat May 12, 2007 1:54 pm Post subject: |
|
|
| Mapmaker wrote: |
| Occultus wrote: |
Hopefully everyone who tried that port is fully prepared for incoming - if they've collected our IPs there might be a backlash
|
I'm working around that one courtesy of a hotel in Durham, NC. *Looks out window in general direction of GetMeOut* |
Imagining the scene at the hotel when suddenly the front desk is beseiged by frantic calls from guests about the flood of crickets pouring out of the computer connections in the rooms.. |
|
| Back to top |
|
|
GetMEout
Joined: 12 Jan 2007
Posts: 85
Location: Crapel Hill
|
| Posted: Sat May 12, 2007 7:46 pm Post subject: |
|
|
| Mapmaker wrote: |
| Occultus wrote: |
Hopefully everyone who tried that port is fully prepared for incoming - if they've collected our IPs there might be a backlash
|
I'm working around that one courtesy of a hotel in Durham, NC. *Looks out window in general direction of GetMeOut* |
*waves from inside his head-to-toe tinfoil suit*
Gotta keep the good parts safe from the screamer, man. And the boils. I don't want any of the boils, either. Of course, I'm not sure the foil suit will help if this is a psychic mumbojumbo brain boil - I think that shit permeates tin.
Has anything else shaken out of the ports, or are we still only screaming mujaddaddann?
(Damn this suit is sweaty.)
_________________
The artist is a person who is expert in the training of perception. |
|
| Back to top |
|
|
Dante
Joined: 20 Apr 2007
Posts: 578
Location: Chicago, IL
|
| Posted: Sat May 12, 2007 7:48 pm Post subject: |
|
|
Okay I've tried to decipher some of the rest of this Arabic. The problem is that the transliteration doesn't match most of the conventions that seems to exist, although there are some regularities (e.g., "ã" = "aa"). I started with the Yog-Sothoth text we already knew and tried to fill in the rest, although there are holes. Feel free to correct!
| Code: |
Yogh Sothoth Yã3ref-al bawãba: Yããã (~QElãheéx)!!!!
Yog-Sothoth knows the gate. Ohhh[?] ([sthg])!!!!
Yogh Sothoth huwa al bawãba! Yããã:3ã!
Yog-Sothoth is the gate. Ohh(?)!
Yogh Sothoth huwa maftã7 al bawãba wa 7ameeha.
Yog-Sothoth is the key and guardian of the gate.
Fal mãdee wal 7ãdérr wal mustakbal yazubuuna kullahom fee Yogh Sothoth.
Past, present, future, all are one in Yog-Sothoth.
Huwa ya3lam ~Qayna tajawaza-l-7ukamã~R kula kadeem wax ~Qayna sa YoghXé:3a ya khtareeku nahuu mujaddaddann.
He knows where the Old Ones broke through of old, and where They shall break through again.
Yã Azif, ka ~Qannahom yuwãjeehun-al nida~Ra ~Qeelaynã.
Oh Azif, as They face the [sthg] [sthg about Old Ones (the ~Q marks the proper noun)]
Huwa ya3réf ~Qayya 7hukula fee-l-~Qardee salaku wa ~Qayna sa tatta~R ~Qakdameehom wa: leemãza lã yasttattee3u-~Qa7adonn ~Qee3ãkat khutuwãteehom.
He knows where They have trod earth's fields, and where They still tread them, and why no one can behold Them as They tread.
~Qénnahom yad3unanã 3abra Azif wa na7nu nastajeeb.
They [sthg] through Azif and we answer(?).
3abra ~choraZos, huwa mutazemonn bina wa na7nu mannduwuna ~Qeelayhee bee fé3lee kitabu-l-ma(u)wt wa kãnuneehee.
Through Chorazos, he has seen us and we have called(?) Them for [sthg] book of [sthg] and law[sthg]?
Huwa yakshof lanaX al majhul wal ta3beeru 3annhu.
He reveals to us the unknown and interprets [sthg].
Huwa yaftea7u-l-bãb leelazeena yakhdumunahu.
He opens the door for those who serve him. |
|
|
| Back to top |
|
|
GetMEout
Joined: 12 Jan 2007
Posts: 85
Location: Crapel Hill
|
| Posted: Sat May 12, 2007 7:54 pm Post subject: |
|
|
So, uhm, stupid question, but why does this sound like the server is trying to raise something from the dead? Last I checked, they were just plastic, silicon, and some wires, man. I was totally unaware that they had a belief system. And I think I'd better go read up on that link someone gave me about the Chorazos thing, because, yeah. Not likin' this "can't remember wtf I did" bit.
_________________
The artist is a person who is expert in the training of perception. |
|
| Back to top |
|
|
Randomeis
Joined: 20 Apr 2007
Posts: 8
Location: Montgomery AL
|
| Posted: Sat May 12, 2007 9:22 pm Post subject: |
|
|
| GetMEout wrote: |
| So, uhm, stupid question, but why does this sound like the server is trying to raise something from the dead? Last I checked, they were just plastic, silicon, and some wires, man. I was totally unaware that they had a belief system. And I think I'd better go read up on that link someone gave me about the Chorazos thing, because, yeah. Not likin' this "can't remember wtf I did" bit. |
Would one of the servers happen to be called Tombstone?
_________________
"Nothing, nothing, my friend; what I have told you: I am not sure of anything, I know nothing . . . Can you imagine that I not even know the date of my death?"
- Jorge Luis Borges |
|
| Back to top |
|
|
Cem
Joined: 20 Apr 2007
Posts: 24
Location: Point Nemo
|
| Posted: Sat May 12, 2007 9:24 pm Post subject: |
|
|
| Quote: |
Never is it to be thought that man is either oldest or last of the Masters of Earth; nay, nor that the great'r part of life and substance walks alone. The Old Ones were, the Old Ones are, and the Old Ones shall be. Not in the spaces known to us, but between them, They walk calm and primal, of no dimensions, and to us unseen.
Yog-Sothoth knows the gate, for Yog-Sothoth is the gate. Yog-Sothoth is the key and the guardian of the gate. Past, present, future – what has been, what is, what will be, all are one in Yog-Sothoth. He knows where the Old Ones broke through of old, and where They shall break through in time to come until the Cycle is complete.
He knows why no one can behold Them as They walk. Sometimes men can know Them near by Their smell, which is strange to the nostrills, and like unto a creature of great age; but of Their semblance no man can know, save seldom in features of those They have begotten on mankind, which are awful to behold, and thrice awful are Those who sired them; yet of those Offspring there are divers kinds, in likeness greatly differing from man's truest image and fairest eidolon to that shape without sight or substance which is Them. They walk unseen, They walk foul in lonely places where the Words have been spoken and the Rites howled through at Their Sea sons, which are in the blood and differ from the seasons of man.
The winds gibber with Their voices; the Earth mutters with Their conscious ness. They bend the forest. They raise up the waves, They crush the city – yet not forest or ocean or city beholds the hand that smites. Kadath in the cold waste knows them, and what man knows Kadath? The ice desert of the South and the sunken isles of Ocean hold stones whereon Their seal is engraven, but who has seen the deep frozen city or the sealed tower long garlanded with seaweed and barnacles? Great Cthulhu is Their cousin, yet can he spy Them only dimly.
As a foulness shall They be known to the race of man. Their hands are at the throats of men forever, from beginning of known time to end of time known, yet none sees Them; and Their habitation is even one with your guarded threshold. Yog-Sothoth is the key to the gate whereby the spheres meet. Man rules now where once They ruled; soon They shall rule again where man rules now. After summer is winter, and after winter summer. They wait patient and potent, for here shall They reign again, and at Their coming again none shall dispute Them and all shall be subject to Them.
Those who know of the gates shall be impelled to open the way for Them and shall serve Them as They desire, but those who open the way unwitting shall know but a brief while thereafter. |
Fermé la port !!
Fermé la port !!
_________________
Défiance est mere de sûreté... |
|
| Back to top |
|
|
PoeticExplosion
Joined: 20 Apr 2007
Posts: 31
|
| Posted: Sun May 13, 2007 1:08 am Post subject: |
|
|
| GetMEout wrote: |
| So, uhm, stupid question, but why does this sound like the server is trying to raise something from the dead? Last I checked, they were just plastic, silicon, and some wires, man. I was totally unaware that they had a belief system. And I think I'd better go read up on that link someone gave me about the Chorazos thing, because, yeah. Not likin' this "can't remember wtf I did" bit. |
Maybe it is a sentient server! http://en.wikipedia.org/wiki/Reason_%28Asimov%29 |
|
| Back to top |
|
|
Occultus
Joined: 28 Apr 2007
Posts: 56
Location: UK
|
| Posted: Sun May 13, 2007 7:25 am Post subject: |
|
|
1313 counts the number of current connections on 5217
I opened up 1313 and there were no auth or unauth connections.
I opened 5217 in another tab and for a few updates (until the error message appeared on 5217), 1313 showed one unauthed connection -then it dropped back to 0.
Tried it again - same thing.
Left 1313 updating and opened 5217 in Firefox and IE at the same time - showed up as two unauthed connections.
I'm not sure why it shows the number of active connections and doesn't keep a running total - doesn't seem to be useful information unless something is permanently connected to 1313 and logging the data externally.
One thing that struck me when I was doing this is that:
seems to read as
"Currently there are 0 auth'ed connections, 348 concurrent auth'ed connections is the best there's been so far".
That's quite a lot of simultaneous auth'ed connections - and could explain the heavy traffic and 'bursty' periods of server slowdown/downtime.
So I think we need to:
a) monitor port 1313 to see if/when/how many auth'ed connections to 5217 we can spot. There might be a pattern, and if there's any chance of getting a list of incoming IPs, knowing the timeframe to look for rogue IPs will narrow down the search a lot. If we can get an address for any auth'ed connection then we can maybe start to track down who is responsible (not guaranteed - e.g. if they are using a bot net to connect in).
b) Try and work out how to get an auth'ed connection. Either 5217 requires a login of some kind - or it needs the outgoing telnet session to connect (in which case we need a 'disposable' unprotected PC to allow the connection).
The problem with b) is that if some login mechanism is used we have no idea how the connection authenticates, it could be anything. User name and password, a pre-authorised IP list, time limits when the port opens up - or something to do with port 1031, which at the moment just disconnects immediately.
1031 might be the key to unlocking 5217.
I don't think it's anything to do with port knocking because the main purpose of that is for stealth services, rather than authorisation, and these all reply to external connections which defeats the purpose. So I'm out of ideas on that one at the minute. |
|
| Back to top |
|
|
HPhack
Joined: 10 Jan 2007
Posts: 258
Location: Cambridge, MA
|
| Posted: Sun May 13, 2007 8:01 am Post subject: |
|
|
| Quote: |
| The Chorazos Cult is a sect dedicated to the Outer God Yog-Sothoth. The cult was founded in the mountains of Romania in the late 16th century, but later moved to England and then Scotland. The cult developed an unwholesome reputation and was eventually disbanded by locals.[7] |
I realize that I will sound totally insane with this: there have always been rumors that the Chorazos Cult was never squashed out entirely. Their name still gets thrown around, especially when strange ritual deaths seem to abound. Yes, I realize that to some of you this is the equivalent of thinking there are Satanic cults hiding among us, or that the Illuminati have been controlling human afairs since the 9th century.
There have always been rumors, though. Enough rumors that I wouldn't want to poking around in their business if they were real. And I'm not saying they are, I'm saying that perfectly rational people that I have known have whispered that name sotto voice to explain away things that their intellect and training could not grapple with.
I'm with Marie. The sooner we can get this stuff of our servers, the sooner it can be someone else's worry and not ours.
_________________
"Perhaps a longer stick is in order." - Unknown Quantity |
|
| Back to top |
|
|
Occultus
Joined: 28 Apr 2007
Posts: 56
Location: UK
|
| Posted: Sun May 13, 2007 9:08 am Post subject: |
|
|
Just to spook you a little ...
| Quote: |
1596: The Oaks is burned down by angry villagers, and the few survivors of the Chorazos Cult (including their founder) retreat to Scotland. Soon after this, however, the locals in their new area destroy the sect once and for all following a number of disappearances.
1638: Hendrik van der Heyl emigrates to New-Netherland (later New York).
c. 1760: The van der Heyls build a family home near Attica, New York, around which the village of Chorazin grows.
November 12 1935. A powerful wind-storm results in the collapse of the van der Heyl mansion. A local from Chorazin discovers a diary that once belonged to Alonzo Typer in the wreckage. |
Maybe some remnants of the Chorazo cult managed to flee and keep a low profile until escaping to the colonies. That would give a link right through to (relatively) modern day, NY state.
Pleasant dreams  |
|
| Back to top |
|
|
James Stone
Joined: 06 May 2007
Posts: 138
Location: Bloody freezing in the North East
|
| Posted: Sun May 13, 2007 11:12 am Post subject: |
|
|
| Just a quick thought, what if we get 348 connections on port 1313? Maybe that will trigger an event. What event that may be is anyones guess at the moment. |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
