Postgres

Wed Aug 9 02:47:27 UTC 2023

Hi Chris,

You can check IP addresses using online databases like AbuseIPDB eg https://www.abuseipdb.com/check/83.97.73.87, which shows that this has been reported already a number of times.

You can also try Scamalytics: https://scamalytics.com/ip/83.97.73.87

and the RIPE database: https://apps.db.ripe.net/db-web-ui/query?bflag=false&dflag=false&rflag=true&searchtext=83.97.73.87&source=RIPE - they often provide a contact email address to the ISP that manages the address, so you can report them.

Once you've identified that they are not legitimately trying to access your system you can block them using a tool on your server like Fail2Ban, or just adding entries to your firewall filters.  We use SME server, and we can do the following in short order to block an IP address/range of addresses:

Get a list of existing addresses on the black list:
> config getprop ipblock DenyHosts 

Add the new address to the list
> config setprop ipblock DenyHosts

Apply to the system:
>  /sbin/e-smith/expand-template /etc/rc.d/init.d/masq
>  /etc/init.d/masq restart

Obviously if you're using something other than SME Server, your commands are different.  SME is based on CentOS, so you will probably have something similar available to you.

Regards,
Paul.

> On 9 Aug 2023, at 10:29 am, Mayada Al-Kishtini <malkishtini at gmail.com> wrote:
> 
> Hi Chris, 
> I get such errors when the ip of box that I’m connecting from is not whitelisted on the postgres server, so what I do in this case is send the ip to the db admin and then I think he adds it to a config file and that will allow a successful connection from my machine to the server. 
> 
> So I would first start with whitelisting the ip of the desktop that is throwing the error.
> 
> HTH,
> Mayada 
> 
> Sent from my iPhone
> 
>> On Aug 8, 2023, at 9:51 PM, Chris Hughes via omnisdev-en <omnisdev-en at lists.omnis-dev.com> wrote:
>> 
>> 
>> Hi one and all.
>> 
>> Having trouble logging onto Postgres from my Laptop (windows 7 )
>> 
>> However able to logon from 2 other Desktops.
>> 
>> Went to check out Postgres Log (Ubuntu22.04)
>> 
>> This is what I am getting
>> 
>> 2023-08-08 16:55:05.943 AEST [173707] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:55:39.798 AEST [173745] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:56:16.846 AEST [173784] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:56:53.631 AEST [173833] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:57:27.655 AEST [173881] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:57:59.848 AEST [173934] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:58:30.662 AEST [173966] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:59:04.015 AEST [174017] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:59:17.235 AEST [174041] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 2023-08-08 16:59:38.062 AEST [174082] postgres at postgres FATAL:  no pg_hba.conf entry for host "83.97.73.87", user "postgres", database "postgres", no encryption
>> 
>> Only problem this is that there are 38,000 lines worth, does anybody else have similar experiences.
>> 
>> HBA seems to be doing its job.
>> 
>> IP address seem to be coming from Russia and Indonesia.
>> 
>> 
>> Chris Hughes
>> 
>> Copious Data Pty Ltd (Trading as Atad Data)
>> 3 Springwell Avenue
>> Springwood QLD 4127
>> Phone No:- 07 3208 6347
>> Mobile No:- 0409 263 349
>> Email:- ataddata at bigpond.net.au
>> Web Site:- http://ataddata.com.au
>> 
>> _____________________________________________________________
>> Manage your list subscriptions at https://lists.omnis-dev.com
>> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com 
> _____________________________________________________________
> Manage your list subscriptions at https://lists.omnis-dev.com
> Start a new message -> mailto:omnisdev-en at lists.omnis-dev.com 

The trouble with bucket seats is that not everybody has the same size bucket.
-- 
Paul W. Mulroney                                            We Don't Do Simple Pty Ltd 
pmulroney at logicaldevelopments.com.au       Trading as Logical Developments
www.logicaldevelopments.com.au                   ACN 161 009 374 
Ph: +61 8 9458 3889                                       86 Coolgardie Street
                                                                         BENTLEY  WA  6102