What the hack?

Was doing some stuff in Indigo and suddenly I saw lots of "access denied" messages:

Code: Select all

   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from Admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from airlive @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from support @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from support @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from super @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from super @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from super @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from adsl @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from osteam @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from ZXDSL @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from super @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from mts @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from telecomadmin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from mgts @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from kyivstar @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from telekom @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from superadmin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from superadmin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from engineer @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from superadmin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from fuck3g1 @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from fuck3g1 @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from supervisor @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from Cisco @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from cisco @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from enable @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from pnadmin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from root @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from user @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/" from user @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlitemanager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlitemanager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlitemanager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/sqlitemanager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/test/sqlite/SQLiteManager-1.2.0/SQLiteManager-1.2.0/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/test/sqlite/SQLiteManager-1.2.0/SQLiteManager-1.2.0/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/test/sqlite/SQLiteManager-1.2.0/SQLiteManager-1.2.0/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/test/sqlite/SQLiteManager-1.2.0/SQLiteManager-1.2.0/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager-1.2.4/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager-1.2.4/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager-1.2.4/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/SQLiteManager-1.2.4/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/agSearch/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/agSearch/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/agSearch/SQlite/main.php" from admin @ 185.210.219.108
   WebServer                       access denied "http://my.server:port/agSearch/SQlite/main.php" from admin @ 185.210.219.108

Looks like someone is trying to knock on Indigo's door.

Suggestion: if Indigo detects such traffic, block that address for a period of time.

My router is blocking this address now.
But that's only because I saw this attack and I decided to add this address to the black list.

Forgot to mention that this is the address for the Indigo Web Client and I use it.
So blocking it entirely is not an option.

Thanks. I've sent them a mail.
Don't expect much from it, but we'll see what happens.

Tried that with charter and their suggestion was to change the public ip address


Sent from my iPhone using Tapatalk

Charter was the isp and the hack came from China


Sent from my iPhone using Tapatalk

Are you port forwarding?

yes, doing port forwarding and I am checking log files and block ~ 1port scanner IP# every month

And for eg ssh etc I use non standard ports > 5000 externally. As most scanner try to scan ip numbers for known standard ports

Karl