Subj : Re: Hacker alert from China
To   : mark lewis
From : Bill McGarrity
Date : Mon Nov 06 2017 20:25:55

-=> mark lewis wrote to KF5QEO <=-


 K> I am getting some serious hacking attempts from 58.56.136.163 . I
 K> did a search and found the following on them.
 K> http://www.tcpiputils.com/browse/ip-address/58.56.136.163

 ml> can you be more specific about "serious hacking attempts"?

 ml> the IP is chinese... it does not appear in my current ipblock list or
 ml> in my history... if it has visited my sites, it hasn't triggered any of
 ml> my IDS rules and raised any alerts...

I had a similar situation the other day as well.  Was from Brazil though.  He
was doing a DoS on my POP3 server using port 110.  I just shut the server down
for 20 minutes, did a netstat, saw they moved on and restarted it.  No biggie.

Enjoy!!

 
Bill

Telnet: bbs.tequilamockingbirdonline.net
IRC: irc.tequilamockingbirdonline.net Ports: 6661-6670 SSL: +6697
Radio: radio.tequilamockingbirdonline.net:8010/live


.... Look TWICE.... Save a life.  Motorcycles are EVERYWHERE!!
--- MultiMail/Win32 v0.49
 * Origin: TequilaMockingbird Online - Toms River, NJ (1:266/404)

.