Abuse Message [AbuseID:B34DEA:1F]: AbuseInfoMail: Summary of your network security incidents (Hetzner)

We have received information regarding spam and/or abuse from ncsc-fi-autoreporter@traficom.fi.

This is an information email only and does not require any further action on your part.
It is your choice whether or not to investigate the complaint.
We do not expect any response.

Information:

NCSC-FI has received information regarding IP-addresses in your network which may have security problems. Data lines have the following format:
asn|ip|source time|domain name|cc|type|uuid|info

Here cc refers to the country code, type to the type of the security problem, and uuid is the unique identifier of the event in Autoreporter. The info column is reserved for any additional information. The column always includes an anonymous identifier for the datasource that is used in the report. All timestamps are given in UTC.

For more information on the reported events please contact NCSC-FI at cert@traficom.fi.


24940|65.108.15.11|2022-09-29 13:18:14Z||FI|bot|e6759f82-d671-4966-883b-4da0ef984426|Datasource: l, Malware: generic/avalanche, C&C Ip: 216.218.135.114, C&C Port: 80, Additional Information: B67-SS-GENERIC, Source Port: 58678
24940|65.108.15.11|2022-09-29 13:49:01Z||FI|bot|de05db87-c2f5-4b8a-829c-3396feae9279|Datasource: l, Malware: matsnu, C&C Ip: 216.218.185.162, C&C Port: 80, Additional Information: B67-SS-MATSNU, Source Port: 64237
24940|65.108.15.11|2022-09-29 13:13:31Z||FI|bot|bebaac64-abf8-466d-bbf9-7a972eb1ed65|Datasource: b, Malware: avalanche, C&C Ip: 216.218.135.114, C&C Port: 80, Source Port: 58697
24940|65.108.15.11|2022-09-29 13:46:59Z||FI|bot|2f926516-69e7-40cf-ae35-358c4089ad51|Datasource: b, Malware: matsnu, C&C Ip: 216.218.185.162, C&C Port: 80, Source Port: 49508

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *