We have received information regarding spam and/or abuse from ncsc-fi-autoreporter@traficom.fi.
This is an information email only and does not require any further action on your part.
It is your choice whether or not to investigate the complaint.
We do not expect any response.
Information:
NCSC-FI has received information regarding IP-addresses in your network which may have security problems. The information regarding the problems is included as an attachment in CSV format. Data lines have the following format:
asn|ip|source time|domain name|cc|type|uuid|info
Here cc refers to the country code, type to the type of the security problem, and uuid is the unique identifier of the event in Autoreporter. The info column is reserved for any additional information. The column always includes an anonymous identifier for the datasource that is used in the report. All timestamps are given in UTC.
This report is electronically signed using the PGP-key of Autoreporter. The key is available at
https://www.kyberturvallisuuskeskus.fi/sites/default/files/media/file/NCSC-FI_AUTOREPORTER_2019-2024.txt
For more information on the reported events please contact NCSC-FI at cert@traficom.fi.
Network:
— — asn: 24940
— — ip range:
Report:
— — start UTC time: 2022-10-22 06:00:07Z
— — end UTC time: 2022-10-23 06:00:06Z
iQIzBAEBCgAdFiEEg1mZyDyMiOAxIHs40THbfFWUSSwFAmNU2GcACgkQ0THbfFWU
SSymlQ//fbVhzN46uJmxxruuFde1UC/9R2UsHIWq81kBPcQATPIDfqOHKwXVEdna
xFERGVTQLMW6IpSy0oZmxQ1UOvw2fzbCOJznw2zlUF9UXv48FvvrjQ74PMBs9ng4
x4FTDgRdv9vWexLBWJa9HqCPV6/YI3UXjTw2cmOsAzLnQVC98diR1OAmGvRGWbGD
d+zpZjsQBO0xaOXCiTk+vtj1fRRUu6LFXttAwYL5tinXZ6RqPu0kkdHwtYPg19rZ
QFTwXsAJ83d2m5kBUs3Aepq4yxP8KaCB+3aJv7VbEKhGuu3X8PNTjJxh7M1fmVXL
ZrvA6epSV/YlfrBybeQjI54z+oyn+N+I0GRAkY4E+DpHXFsWVtk1CCEL4p2uz6R4
3MKo30ulIAWKrVn9MihfKJ/RSFnITMFmPGon/8JItb7Wg9NGoRz/rtRSlWDLNkJE
+W3cstupqLe556hoZEKete2KzPqZ9JrZLdpxh4NtFahLT2jDVVraQPB3LGkoUNg8
6XbmwNvpubEYCfJO9VBK/SyBKOSuvnkgEJTy7hRc9JwHM+irymmJHs1hjHWKVwbh
5qLe3IiAasuDySUj1xnpxZlQodWXEbLMfKP6M2UzcvVu0QRSIjw6NubxqtIQ2tI7
tdf+oanRdtMsSsm5JlDpeR8ho/m7hYjxHMYz2c5nQORim5P33wA=
=40DW
——END PGP SIGNATURE——
24940|135.181.179.124|2022-10-22 17:52:52Z||FI|bot|cb0c4a79-6cc9-440e-b969-da267fc54bb2|Datasource: b, C&C Dns: autoconfig.anxmalls.com, C&C Ip: 87.106.18.122, C&C Port: 80, Http Request: /mail/config-v1.1.xml?emailaddress=anx412@anxmalls.com, Source Port: 60259