<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang="EN-US" link="#0563C1" vlink="#954F72"><div class="WordSection1"><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>I would make sure the admin password to your Icecast server is changed to a complex one that has a mix of upper and lower case letters and numbers.<o:p></o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>I would also make sure you have a firewall on your server and have only the ports you need open.<o:p></o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>All other ports should be closed.<o:p></o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>I also use a program called fail2ban that will block an ip address after so many failed login attempts.<o:p></o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Larry<o:p></o:p></span></p><p class="MsoNormal"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class="MsoNormal"><a name="_MailEndCompose"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'><o:p> </o:p></span></a></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Icecast [mailto:icecast-bounces@xiph.org] <b>On Behalf Of </b>Hannah Carroll<br><b>Sent:</b> Tuesday, April 12, 2016 12:51 PM<br><b>To:</b> icecast@xiph.org<br><b>Subject:</b> [Icecast] Ice cast Hacking<o:p></o:p></span></p></div></div><p class="MsoNormal"><o:p> </o:p></p><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'>Hello,<o:p></o:p></span></p><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'>The station I run using ice cast keeps being targeted by a hacker.<o:p></o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'>They manage to kill and start our stream at there own will. They have messaged us through a fake Facebook account telling us that they are hacking us and that in order for it to stop we need to give them our Wordpress admin, this was obviously never sent over.<o:p></o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'>Any suggestions on how to stop and defend these attacks would be highly appreciated.<o:p></o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'>Kindest Regards<o:p></o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'>Hannah Carroll<o:p></o:p></span></p></div><div><p class="MsoNormal"><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p></div></div></div><img src="http://mandrillapp.com/track/open.php?u=30489975&id=390dbdbfa45b4061baa7a744a63a8f5d" height="1" width="1"></body></html>