This is an automated message from Columbia University IT Security. You are
receiving it because you are listed as the abuse contact in WHOIS for the machine
referred to below. This machine either attempted to gain unauthorized
access to one or more machines, or was scanning the network at Columbia
University.
It is possible that this alert is the result of a reflection attack against your network with a spoofed origin matching Columbia University’s network.
Details are provided below. Please take all necessary
steps to mitigate such attacks, or ignore this notice if this traffic is spoofed.
If you have received this message in error, or if this incident
reported is inappropriate, please contact security@columbia.edu
so that we can update our procedures. Please include the entire
body of this message.
Thank You.
Columbia University IT Security
security@columbia.edu
Name: static.163.87.161.5.clients.your-server.de
Address: 5.161.87.163
Incident type: 5900/tcp
First attempt: 15-mar-2022 03:10:00 GMT-0400
Last attempt: 15-mar-2022 03:10:00 GMT-0400
Total attempts: 417
15-Mar-2022 03:09:55 GMT-0400 5.161.87.163:58820 -> 160.39.146.50:5900 6 448
15-Mar-2022 03:10:01 GMT-0400 5.161.87.163:64627 -> 129.236.226.191:5900 6 252
15-Mar-2022 03:10:01 GMT-0400 5.161.87.163:64715 -> 160.39.146.50:5900 6 200
15-Mar-2022 03:09:57 GMT-0400 5.161.87.163:58387 -> 160.39.146.50:5900 6 252
15-Mar-2022 03:09:55 GMT-0400 5.161.87.163:64860 -> 160.39.7.43:5900 6 500
15-Mar-2022 03:09:55 GMT-0400 5.161.87.163:58399 -> 160.39.236.83:5900 6 390
15-Mar-2022 03:09:57 GMT-0400 5.161.87.163:58546 -> 160.39.7.43:5900 6 194
15-Mar-2022 03:09:57 GMT-0400 5.161.87.163:58557 -> 160.39.219.240:5900 6 194
15-Mar-2022 03:09:55 GMT-0400 5.161.87.163:58473 -> 129.236.226.191:5900 6 194
15-Mar-2022 03:09:57 GMT-0400 5.161.87.163:64600 -> 129.236.226.191:5900 6 448
15-Mar-2022 03:10:01 GMT-0400 5.161.87.163:63324 -> 129.236.226.191:5900 6 402
15-Mar-2022 03:10:02 GMT-0400 5.161.87.163:63257 -> 160.39.236.83:5900 6 436
15-Mar-2022 03:10:02 GMT-0400 5.161.87.163:63397 -> 160.39.7.43:5900 6 402
15-Mar-2022 03:09:55 GMT-0400 5.161.87.163:58602 -> 160.39.219.240:5900 6 240
15-Mar-2022 03:10:02 GMT-0400 5.161.87.163:63302 -> 160.39.219.240:5900 6 338
15-Mar-2022 03:10:11 GMT-0400 5.161.87.163:63081 -> 160.39.236.83:5900 6 390
15-Mar-2022 03:10:11 GMT-0400 5.161.87.163:63686 -> 160.39.219.240:5900 6 344
15-Mar-2022 03:10:03 GMT-0400 5.161.87.163:64268 -> 160.39.219.240:5900 6 292
15-Mar-2022 03:10:03 GMT-0400 5.161.87.163:64265 -> 160.39.236.83:5900 6 292
15-Mar-2022 03:10:11 GMT-0400 5.161.87.163:63716 -> 160.39.7.43:5900 6 500
15-Mar-2022 03:10:12 GMT-0400 5.161.87.163:58221 -> 129.236.226.191:5900 6 344
15-Mar-2022 03:10:04 GMT-0400 5.161.87.163:64325 -> 160.39.7.43:5900 6 454
15-Mar-2022 03:10:12 GMT-0400 5.161.87.163:62084 -> 160.39.219.240:5900 6 390
15-Mar-2022 03:10:05 GMT-0400 5.161.87.163:58140 -> 160.39.7.43:5900 6 356
15-Mar-2022 03:10:05 GMT-0400 5.161.87.163:64354 -> 160.39.236.83:5900 6 246
15-Mar-2022 03:10:12 GMT-0400 5.161.87.163:49877 -> 160.39.146.50:5900 6 402
15-Mar-2022 03:10:04 GMT-0400 5.161.87.163:64197 -> 160.39.146.50:5900 6 252
15-Mar-2022 03:10:13 GMT-0400 5.161.87.163:49835 -> 160.39.236.83:5900 6 194
15-Mar-2022 03:10:13 GMT-0400 5.161.87.163:62386 -> 160.39.7.43:5900 6 200
15-Mar-2022 03:10:06 GMT-0400 5.161.87.163:58203 -> 160.39.146.50:5900 6 246
15-Mar-2022 03:10:14 GMT-0400 5.161.87.163:57715 -> 160.39.219.240:5900 6 292
15-Mar-2022 03:10:14 GMT-0400 5.161.87.163:58086 -> 160.39.7.43:5900 6 454
15-Mar-2022 03:10:17 GMT-0400 5.161.87.163:51562 -> 160.39.236.83:5900 6 200
15-Mar-2022 03:10:17 GMT-0400 5.161.87.163:51564 -> 160.39.219.240:5900 6 200
15-Mar-2022 03:10:17 GMT-0400 5.161.87.163:50806 -> 160.39.7.43:5900 6 304
15-Mar-2022 03:10:17 GMT-0400 5.161.87.163:51494 -> 160.39.146.50:5900 6 304
15-Mar-2022 03:10:14 GMT-0400 5.161.87.163:49931 -> 129.236.226.191:5900 6 454
15-Mar-2022 03:10:14 GMT-0400 5.161.87.163:49970 -> 160.39.146.50:5900 6 454
15-Mar-2022 03:10:14 GMT-0400 5.161.87.163:50016 -> 160.39.219.240:5900 6 390
15-Mar-2022 03:10:15 GMT-0400 5.161.87.163:50134 -> 160.39.7.43:5900 6 454
15-Mar-2022 03:10:18 GMT-0400 5.161.87.163:51447 -> 160.39.146.50:5900 6 500
15-Mar-2022 03:10:18 GMT-0400 5.161.87.163:51419 -> 160.39.219.240:5900 6 390
15-Mar-2022 03:10:13 GMT-0400 5.161.87.163:57965 -> 129.236.226.191:5900 6 436
15-Mar-2022 03:10:13 GMT-0400 5.161.87.163:62994 -> 160.39.236.83:5900 6 390
15-Mar-2022 03:10:14 GMT-0400 5.161.87.163:50931 -> 160.39.146.50:5900 6 200
15-Mar-2022 03:10:18 GMT-0400 5.161.87.163:51609 -> 129.236.226.191:5900 6 298
15-Mar-2022 03:10:21 GMT-0400 5.161.87.163:51065 -> 160.39.236.83:5900 6 148
15-Mar-2022 03:10:21 GMT-0400 5.161.87.163:51059 -> 160.39.146.50:5900 6 92
15-Mar-2022 03:10:25 GMT-0400 5.161.87.163:62791 -> 129.236.226.191:5900 6 304
Attempts continue…
