Off and on....with the socks proxy?
Sent from my smartphone
----- Reply message -----
From: "Mike Hammett" <[email protected]>
To: "AnimalFarm Microwave Users Group" <[email protected]>
Subject: [AFMUG] mikrotik hacked.....again
Date: Sun, Aug 5, 2018 9:01 PM
Do you not follow TBW? We post about this almost weekly.
-----Mike HammettIntelligent Computing SolutionsMidwest Internet ExchangeThe
Brothers WISP
From: "CBB - Jay Fuller" <[email protected]>
To: [email protected]
Sent: Sunday, August 5, 2018 1:10:51 PM
Subject: [AFMUG] mikrotik hacked.....again
Looking through all of our routers, most running the
latest firmware, most running non-standard winbox ports, i still see the
following today:
* accept rule in firewall (for port 10438 i think,
same port enabled on ip -> socks)
* account added called "service"
* socks config changed ; enabled
* log entries changed to only show one line
anyone else seeing this? What are they
doing?
--
AF mailing list
[email protected]
http://af.afmug.com/mailman/listinfo/af_af.afmug.com
--
AF mailing list
[email protected]
http://af.afmug.com/mailman/listinfo/af_af.afmug.com