Greetings Fellow Sys Ad/s
I hope this message finds you well. I'm reaching out to you today regarding a matter of potential concern involving one or more IP addresses associated with your system
Our network security logs have recently detected unusual activity originating from these IP addresses. While we understand that such incidents can sometimes occur innocently, it's crucial to investigate and address them promptly to ensure the security of all networks involved
To assist you in understanding the situation, we have provided the relevant log data below, with timestamps adjusted to our GMT +8 timezone:
DateTime Action AttackClass SourceIP Srcport Protocol DestinationIP DestPort
0 03-Nov-2024 19:15:08 DENIED 80.71.227.188 24885 TCP 202.91.160.124 22
1 03-Nov-2024 20:58:19 DENIED 80.71.227.188 4255 TCP 202.91.163.165 22
2 03-Nov-2024 22:02:50 DENIED 80.71.227.188 65372 TCP 202.91.162.10 22
3 04-Nov-2024 00:00:15 DENIED 80.71.227.188 17415 TCP 202.91.163.75 22
4 04-Nov-2024 04:31:30 DENIED 80.71.227.188 15613 TCP 202.91.161.97 22
5 04-Nov-2024 05:06:22 DENIED 80.71.227.188 5602 TCP 202.91.161.96 22
6 04-Nov-2024 05:09:05 DENIED 80.71.227.188 4228 TCP 202.91.161.99 22
7 04-Nov-2024 05:18:22 DENIED 80.71.227.188 26189 TCP 202.91.161.98 22
8 04-Nov-2024 22:31:29 DENIED 80.71.227.188 28159 TCP 202.91.161.37 22
9 05-Nov-2024 03:09:29 DENIED 80.71.227.188 26345 TCP 202.91.161.98 22
We believe that by working together to resolve this matter swiftly, we can help safeguard the integrity of our networks and prevent any further issues. If you require any additional information or support from our end to facilitate your investigation, please don't hesitate to reach out.
Your prompt attention to this matter would be greatly appreciated. We value your expertise and cooperation in resolving this situation effectively. Thank you for your time and consideration.
For any corrections/updates, kindly email noc@watchdogcyberdefense.com
