<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div>Would changing the Allstar port number help, or would the bad guys just discover this in short order?</div><div><br></div><div>-Andy</div><div>KB7B</div><div>42432</div><div><br>On Jul 30, 2017, at 2:29 AM, David Shaw <<a href="mailto:shawpbx@gmail.com">shawpbx@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr"><div>I saw your post from the att forum dated back in Sept 2016. So your router detected a php hijacking and blocked the packet. That's ok. But.. I would guess your getting attacked all around and over loading your router. If you have a consumer-grade router. I would call att and see if they have anyway of looking to see if your being attacked. Getting a new IP address should help. Login to your router check to see what your WAN/Public IP address.</div><div><br></div><div><br></div>Try powering off your Router and ASL Node for 3-5 minutes.<div><br></div><div>Some hackers testing your IP address and router.</div><div><br></div><div>The power off is to hopefully get a new IP address.</div><div><br></div><div>Google online port scanner. Find one a scan your router to see if any of your ports our open. It should show no port. Filtered ports are bad as well.</div><div><br></div><div>David KE6UPI</div><div><br></div><div>PS: If your into playing with routers and making your own. Try OPNsense.</div><div><a href="https://opnsense.org/">https://opnsense.org/<br></a></div><div><br></div><div>I use Sophos with a free home lic.</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><br></div><div><br></div><div>--</div><div><span style="font-size:12.8px">Thanks, David</span><br></div></div><div dir="ltr"><br></div><div dir="ltr"><span style="color:rgb(68,68,68);font-family:Georgia,"Times New Roman",Times,serif;font-size:12px">"Laws that forbid the carrying of arms...disarm only those who are neither inclined nor determined to commit crimes. Such laws make things worse for the assaulted and better for the assailants; they serve rather to encourage than prevent homicides, for an unarmed man may be attacked with greater confidence than an armed one."</span><br></div><div dir="ltr">Thomas Jefferson<span style="color:rgb(68,68,68);font-family:Georgia,"Times New Roman",Times,serif;font-size:12px"><br></span></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Sat, Jul 29, 2017 at 10:29 AM, George Csahanin <span dir="ltr"><<a href="mailto:george@dyb.com" target="_blank">george@dyb.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi all. I've been seeing a daily reboot of my AT&T gateway, has done it three times now. Looked at the logs in the AT&T box and I see several:<br>
<br>
host=<a href="http://stats.allstarlink.org" rel="noreferrer" target="_blank">stats.allstarlink.org</a> url=/uhandler.php hijacked<br>
<br>
Anybody know what this might mean?<br>
<br>
GeorgeC<br>
<br>
<br>
-- <br>
George Csahanin<br>
10100 Carson Ranch Rd.<br>
Crowley, TX 76036<br>
<a href="tel:682-708-5716" value="+16827085716" target="_blank">682-708-5716</a> home<br>
<a href="tel:401-338-0568" value="+14013380568" target="_blank">401-338-0568</a> cel<br>
<a href="http://dyb.com" rel="noreferrer" target="_blank">http://dyb.com</a><br>
PLEASE NOTE: Effective January 1, 2018 <a href="mailto:george@dyb.com" target="_blank">george@dyb.com</a> will no longer function<br>
USE <a href="mailto:george@w2db.com" target="_blank">george@w2db.com</a><br>
<br>
______________________________<wbr>_________________<br>
App_rpt-users mailing list<br>
<a href="mailto:App_rpt-users@lists.allstarlink.org" target="_blank">App_rpt-users@lists.allstarlin<wbr>k.org</a><br>
<a href="http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users" rel="noreferrer" target="_blank">http://lists.allstarlink.org/c<wbr>gi-bin/mailman/listinfo/app_rp<wbr>t-users</a><br>
<br>
To unsubscribe from this list please visit <a href="http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users" rel="noreferrer" target="_blank">http://lists.allstarlink.org/c<wbr>gi-bin/mailman/listinfo/app_rp<wbr>t-users</a> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"<br>
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. </blockquote></div><br></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>App_rpt-users mailing list</span><br><span><a href="mailto:App_rpt-users@lists.allstarlink.org">App_rpt-users@lists.allstarlink.org</a></span><br><span><a href="http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users">http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users</a></span><br><span></span><br><span>To unsubscribe from this list please visit <a href="http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users">http://lists.allstarlink.org/cgi-bin/mailman/listinfo/app_rpt-users</a> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"</span><br><span>You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. </span></div></blockquote></body></html>