They are very persistent. You should lock down the ports for IT Tool/DM immediately for 2 reasons, 1- there's a backdoor password that you have no control over. 2- if they hammer port 5090 it locks your system up (i just had this happen last week).
Even worse if you have 23 open to the system for File control that password is always default and you cannot change it.