On Tue, May 22, 2012 at 10:37 AM, Fosforo <fosforo@gmail.com> wrote:
same here. someone using sqlmap

--
[]s Fosforo
-------------------------------------------------------------
"Only the wisest and stupidest of men never change."
-Confusio
-------------------------------------------------------------


On Tue, May 22, 2012 at 8:18 AM, mick <mbm@rlogin.net> wrote:
> Hi
>
> I have today, reluctantly, switched my node
> torofotheworld.aibohphobia.org from an exit node to relay only. My ISP
> has stayed faithful over several abuse reports in the past, but this
> week following two more in quick sucession (from brazilian government
> services by the look of it) they have asked that I shut down the exit
> policy. Rather than lose the node entirely, I have agreed.
>
> Some bozo has been using sqlmap to scan servers through tor.
>
> Mick
>
> ---------------------------------------------------------------------
> blog: baldric.net
> fingerprint: E8D2 8882 F7AE DEB7 B2AA 9407 B9EA 82CC 1092 7423
> ---------------------------------------------------------------------
>
>

Yep same here, got notice today from ISP on a report of the 20th for alledged hacking with someone using sqlmap. the reporting ip was a brazilian gov ip address.

I just blocked the port and kept on serving....

Jon