Dear Network Manager :
This warning is from the Financial Security Institute(FSI) of Korea.
Our job is to protect Korean financial organizations from illegal intrusion attacks.
We have received a report of unauthorized access trial originating from your site as shown below.
| Date/Time(GMT+9) | Source IP | Destination IP | Attack Type |
| 2022-10-04 12:10:36~2022-10-04 03:10:33 | 135.181.112.100 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:05~2022-10-04 11:10:10 | 135.181.217.34 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:20~2022-10-04 11:10:35 | 135.181.219.119 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:45~2022-10-04 11:10:06 | 142.132.147.76 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:26~2022-10-04 11:10:40 | 142.132.194.102 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:23~2022-10-04 04:10:45 | 142.132.197.217 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:13~2022-10-04 09:10:25 | 142.132.222.236 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 02:10:20~2022-10-04 11:10:28 | 142.132.255.113 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:56~2022-10-04 11:10:00 | 144.76.225.60 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:52~2022-10-04 11:10:40 | 144.76.62.120 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:15~2022-10-04 11:10:09 | 157.90.214.114 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 02:10:13~2022-10-04 11:10:44 | 157.90.94.58 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 03:10:56~2022-10-04 03:10:56 | 159.69.182.124 | 112.175.244.177 | F-INV-APP-180224-phpunit_vulnerability_RCE(CVE-2017-9841) |
| 2022-10-04 01:10:41~2022-10-04 01:10:41 | 159.69.182.124 | 211.117.106.113 | F-INV-APP-180224-phpunit_vulnerability_RCE(CVE-2017-9841) |
| 2022-10-04 12:10:59~2022-10-04 10:10:27 | 162.55.102.254 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:17~2022-10-04 11:10:42 | 162.55.232.113 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:06~2022-10-04 09:10:25 | 162.55.232.75 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:08~2022-10-04 11:10:51 | 162.55.92.254 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 02:10:09~2022-10-04 11:10:19 | 162.55.99.233 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:13~2022-10-04 11:10:40 | 167.235.10.137 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:12~2022-10-04 10:10:56 | 167.235.10.138 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:56~2022-10-04 11:10:01 | 167.235.10.90 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:29~2022-10-04 11:10:56 | 167.235.11.26 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:15~2022-10-04 09:10:39 | 167.235.11.91 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:11~2022-10-04 10:10:26 | 167.235.11.92 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 02:10:20~2022-10-04 11:10:42 | 167.235.2.194 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 02:10:44~2022-10-04 11:10:53 | 167.235.2.254 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:48~2022-10-04 11:10:45 | 167.235.4.68 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 03:10:57~2022-10-04 11:10:52 | 168.119.38.244 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:27~2022-10-04 09:10:13 | 176.9.22.198 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:24~2022-10-04 06:10:25 | 176.9.78.80 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 01:10:47~2022-10-04 11:10:49 | 178.63.41.226 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:58~2022-10-04 11:10:25 | 195.201.161.31 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:01~2022-10-04 07:10:52 | 195.201.199.120 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:18~2022-10-04 10:10:38 | 195.201.207.235 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:16~2022-10-04 11:10:56 | 195.201.207.236 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:42~2022-10-04 11:10:40 | 195.201.207.238 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 02:10:11~2022-10-04 11:10:09 | 23.88.7.238 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:46~2022-10-04 11:10:35 | 46.4.113.183 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:02~2022-10-04 11:10:13 | 46.4.114.14 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:37~2022-10-04 11:10:50 | 46.4.116.179 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 12:10:32~2022-10-04 06:10:15 | 46.4.21.240 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 01:10:03~2022-10-04 11:10:16 | 46.4.23.35 | 211.233.74.24 | F-DOS-DOS-200904-GET_Flooding_Attack(CC) |
| 2022-10-04 01:10:16~2022-10-04 01:10:16 | 94.130.106.70 | 211.117.106.113 | F-INV-APP-180224-phpunit_vulnerability_RCE(CVE-2017-9841) |
We are seriously considering notifying these illegal attempts to the related authorities of both your and our countries and requesting proper legal actions.
So, please take appropriate measures to identify and stop the attacker. And, please inform us of the results. (isac@fsec.or.kr)
Thank you for your cooperation.
p.s. : If you are not the correct person to deal with this incident, please forward this to the proper person and inform us for future convenience.
