> Greetings Fellow Sys Ad/s
>
> I hope this message finds you well. We're reaching out regarding some unusual activity detected from one or more IP addresses associated with your system
> While this could be harmless, it’s possible the IP has been spoofed or your server has been compromised. We want to ensure you are informed and hope it helps you
>
>
> For your reference, we’ve included the relevant log data below, with timestamps set to GMT+8. Please review the logs at your earliest convenience. If you have any questions or need assistance, don’t hesitate to reach out—we’re here to help.
>
>
> DateTime Action AttackClass SourceIP Srcport Protocol DestinationIP DestPort
> 0 05-Aug-2025 09:26:32 BLOCKED 194.87.25.199 40910 UDP 202.91.161.169 8082
> 1 05-Aug-2025 23:10:47 BLOCKED 194.87.25.199 40910 UDP 202.91.161.132 4000
> 2 06-Aug-2025 09:41:55 BLOCKED 194.87.25.199 40910 UDP 202.91.161.179 6881
> 3 06-Aug-2025 11:16:06 BLOCKED 194.87.25.199 40910 UDP 202.91.161.199 1434
> 4 06-Aug-2025 11:28:08 BLOCKED 194.87.25.199 40910 UDP 202.91.161.132 1027
> 5 06-Aug-2025 12:42:13 BLOCKED 194.87.25.199 40910 UDP 202.91.161.242 8081
> 6 06-Aug-2025 14:08:09 BLOCKED 194.87.25.199 40910 UDP 202.91.161.132 5060
>
> We believe that by working together to resolve this matter swiftly, we can help safeguard the integrity of our networks and prevent any further issues. If you require any additional information or support from our end to facilitate your investigation, please don't hesitate to reach out.
> Your prompt attention to this matter would be greatly appreciated. We value your expertise and cooperation in resolving this situation effectively. Thank you for your time and consideration.
> For any corrections/updates, kindly email noc@watchdogcyberdefense.com
