[CRTech] Christian Radio Tech [MSG 79172]
[Thread Prev] [-- Thread Index --] [Thread Next] [Date Prev] [-- Date Index --] [Date Next]
RE: hacking continued
To: CRTech <crtech@crtech.org>
Subject: RE: hacking continued
From: Jon Foreman <Jon@ksgn.com>
Date: Tue, 14 Mar 2017 16:29:54 +0000
Accept-language: en-US
Content-language: en-US
In-reply-to: <812f36bb-e2cc-bf85-ba40-df7d81d2e32b@knlr.com>
References: <812f36bb-e2cc-bf85-ba40-df7d81d2e32b@knlr.com>
Thread-index: AQHSnNmxSqSupEt2D0mtmqKyG3v776GUhbzw
Thread-topic: [CRTech] hacking continued

Interesting countries of origin

 

03/04/17 22:27:14 89.248.167.131  Seychelles (SC) SC
03/05/17 14:40:31 177.140.27.47  
Brazil (BR) BR
03/05/17 14:40:31 177.140.27.47  
Brazil (BR) BR
03/10/17 08:52:24 94.102.49.190  
Seychelles (SC) SC (Africa)
03/13/17 08:11:57 189.34.242.231 
Brazil (BR) BR
03/13/17 08:11:58 189.34.242.231 
Brazil (BR) BR
03/14/17 04:07:58 86.110.119.19  
Russia (RU) RU

 

Jon Foreman
Chief Engineer/IT Manager
jon@ksgn.com
909-583-2136

Office: 909-583-2150
Fax: 909-583-2170

 

From: Terry Cowan [mailto:tcowan@knlr.com]
Sent: Tuesday, March 14, 2017 8:43 AM
To: CRTech
Subject: [CRTech] hacking continued

 

Several weeks ago we found "tone" on some of our programs.  Apparently our AMBOS receiver was hacked and the tone generator turned on.  True the receiver was port forwarded without protection.  So I created a program and redirected that port to it to see if we were being hacked.  Here is the log of the "hacking". 

Terry Cowan

KNLR/KNLX

03/04/17 22:27:14 89.248.167.131
03/05/17 14:40:31 177.140.27.47
03/05/17 14:40:31 177.140.27.47
03/10/17 08:52:24 94.102.49.190
03/13/17 08:11:57 189.34.242.231
03/13/17 08:11:58 189.34.242.231
03/14/17 04:07:58 86.110.119.19

 

Follow-Ups: Re: hacking continued
(Sherrod Munday <smunday@ieee.org>, 14 Mar 2017 16:51:15 -0000)
References: hacking continued
(Terry Cowan <tcowan@knlr.com>, 14 Mar 2017 15:43:11 -0000)
Prev by date: Re: hacking continued
(Matthew Chambers, 14 Mar 2017 16:14:42 -0000)
Next by date: Re: hacking continued
(Sherrod Munday, 14 Mar 2017 16:51:15 -0000)
Prev by thread: RE: Hello
(Nancy Curtiss, 17 Mar 2017 11:45:11 -0000)
Next by thread: Re: hacking continued
(Sherrod Munday, 14 Mar 2017 16:51:15 -0000)
CRTech.org