I just had a reboot attempt from
http://211.57.159.226 from Korea.
Be very careful with your remote ports and be sure to only be read only, or protect you mining machines with a prety strong password. This
http://211.57.159.226 bitch tried to reboot the machine several times. It was pretty easy though to spot him and plant a simple surprise, so he wont be trying that stuff to me anytime soon.
Why in the hell would you leave this open to the internet? Putting this behind a simple VPN or at worst a firewall with restrictive ACL's is simple, and all but free.
I didn't enable this port - or any other remote monitoring port, actually - in the first place. So for Claymore to warn that it couldn't access that port was understandably worrisome. I'm not mining an Ethash coin right now, but explicitly adding "-mport 0" to the command line and restarting
seemed to take care of the problem.