{UAH} NRM ATTEMPT AT HACKING "STC" THWARTED

People,

Those of you who visited or attemptedor are attempting to visit Str8talk Chronicles in last 3 hrs must have come face to face with the message:

Service Unavailable

Server currently undergoing maintenance. Webmaster: please contact support.

Hostgators, my Houston, TX, webhost provider, and I tracked the intruder to Uganda of all places where numerous attempts at fireballing thru in STC cPanel to mess it up was tracked. Off the following chat we were able to phone  and establish additional IP addresses being used. I am soon visiting them Askholes as well with my own feedback arsenal of Katyusha rockets and stockpile of surviving Sadam Scud missiles - my way. 

NRM has gone too far but it has also made a huge mistake sniffing the wrong small dog's ass..

Those of you with knowledge of IPs can follow this chat. Sorry, confidentiality can't permit me to give you transcript of the telephone conversation which went further in depth to net the culprit(s) and locations in Kampala where these serial attempts where being made.

Conversation

Chat ID:13544576. Question: Had this message for long: Service Unavailable Server currently undergoing maintenance. Webmaster: please contact support.

(1:51:18pm)System:Customer has entered chat and is waiting for an agent. 

(1:52:21pm)Charlie J.:Welcome to HostGator LiveChat. My name is Charlie. I will be glad to assist you today. 

(1:52:27pm)Peter:Had this message for long: 

Service Unavailable 
Server currently undergoing maintenance. Webmaster: please contact support. 

(1:55:20pm)Charlie J.:For security purposes, I will need to verify your identity by having you provide your account's billing credentials in the popup that will soon follow this message. I apologize for any inconvenience this may cause. 

(1:55:39pm)System:Thank you for verifying your billing account gwokto15@yahoo.ca! 

(2:02:19pm)Charlie J.:Did you receive an email recently regarding a TOS restriction? 

(2:06:05pm)Peter:Yes i did 

(2:06:38pm)Charlie J.:I am seeing multiple requests from this IP in the ticket, 154.127.63.124. Is that an IP that you recognize? 

(2:07:29pm)Peter:I don not recognize but is there a way I can track it? 

(2:08:42pm)Peter:Oh.I can see it as from 

(2:08:44pm)Peter:IP Locator & IP Lookup Basic Tracking Info 
IP Address: 154.127.63.124 

IP Locator & IP Lookup Basic Tracking Info

IP Address:	154.127.63.117
Reverse DNS:	** server can't find 117.63.127.154.in-addr.arpa: SERVFAIL
Hostname:	154.127.63.117
IP Blacklist Check:	Not Blacklisted
IP Lookup Location For IP Address: 154.127.63.117
Continent:	Africa (AF)
Country:	Uganda    (UG)
Capital:	Kampala
State:	Unknown
City Location:	Unknown
ISP:	Netstack Ltd
Organization:	Netstack Ltd
AS Number:	AS37692 NetStack-AS
Time Zone:	Africa/Kampala
Local Time:	22:16:19
Timezone GMT offset:	10800
Sunrise / Sunset:	07:03 / 19:08
Extra IP Lookup Finder Info for IP Address: 154.127.63.117
Continent Lat/Lon:	7.18805 / 21.09361
Country Lat/Lon:	2 / 33
City Lat/Lon:	(1) / (32)
IP Language:	English
IP Address Speed:	Unknown Internet Speed
IP Currency:	Ugandan shilling (UGX)
IDD Code:	+256

(2:10:33pm)Peter:Used an IP TRacker website 

(2:11:43pm)Charlie J.:You can block the IP in the cPanel under IP deny manager if you do not recognize it. Do you have caching enabled for the site? 

(2:12:56pm)Peter:Yes, it is enabled 

(2:17:58pm)Charlie J.:Looks like it was a hacker attack against the WordPress and was trying to log in.several times consistently to str8talkchronicles.com /wp-login.php Possibly to hijack and change ownership.

(2:19:53pm)Peter:This is the second time its happening bco a couple years ago there was an attempt using a stolen credit card. 

(2:21:12pm)Charlie J.:Were you able to add the deny rule for the IP in the cPanel? 

(2:21:47pm)Peter:No. Not yet. Moment please 

(2:25:27pm)Peter:Am in the cPanel. Where do I go? 

(2:27:02pm)Charlie J.:You can go to the IP Deny Manager under the Security section. 

(2:28:46pm)Peter:Gave me this when i added/: 

(2:28:48pm)Peter:!Your account has been temporarily restricted 
Unfortunately, a script running on your hosting was found to be causing server issues that negatively affected other users. We have been forced to place resource restrictions on your account at this time. 

Remove Restriction 

(2:30:17pm)Peter:The script interference could have been coming from a plugin called "ecStatic" 

(2:30:30pm)Peter:Will need to deactivate it compl;etely 

(2:31:57pm)Charlie J.:Can you give me the IP address for your location please? You can find the IP by clicking on this link.http://www.hostgator.com/ip 

(2:32:49pm)Peter:64.250.81.154 

(2:37:32pm)Charlie J.:Thank you, I have noted and opened the TOS ticket. The admins will be sending a reply to you soon after they check the resource usage. They will let you know if further modifications are needed, you can remove the plugin mentioned above if you do not need it. 

(2:38:54pm)Charlie J.:Is there anything else I can assist you with today? 

(2:39:21pm)Peter:No. Not now. How long do you think it will take?

(2:40:55pm)Charlie J.:Unfortunately, I do not have an exact time frame to give you. The admins will need some time to review the resource usage before updating you. 

(2:42:11pm)Charlie J.:Do you have any further questions for me today? 

(2:42:42pm)Peter:No. 

(2:42:46pm)Peter:Thanks a bunch 

(2:43:27pm)Charlie J.:Thank you for using HostGator Live Chat. If you could take a minute to let us know if your questions were answered and/or your support request was resolved, it would help us to improve our customer service. To do that, just click the button that says "Rate and Exit" in the upper right hand corner. The survey takes less than a minute to fill out. 

(2:43:26pm)

System:This chat has ended. Click Rate And Exit to rate the representative and our company!  

Ugandans suck...!

___________________________________

Gwokto La'Kitgum

"Even a small dog can piss on a tall Building", Jim Hightower

--
Disclaimer:Everyone posting to this Forum bears the sole responsibility for any legal consequences of his or her postings, and hence statements and facts must be presented responsibly. Your continued membership signifies that you agree to this disclaimer and pledge to abide by our Rules and Guidelines.To unsubscribe from this group, send email to: ugandans-at-heart+unsubscribe@googlegroups.com or Abbey Semuwemba at: abbeysemuwemba@gmail.com.