To whom it may concern,
We noticed unusual activity coming from 142.132.20592 on your network to one of our honeypots located at 64.186.38.33.
We have reason to believe 142.132.205.92 may be compromised, is running unauthorized scans of our network, or is being used for illegitimate activity.
Useful Information:
Timestamp: Sat Nov 05 2022 17:29:12 GMT-0400 (Eastern Daylight Time)
Source IP: 142.132.205.92
Destination IP: 64.186.38.33
Protocol: TCP
Source Port: 22 (ssh)
Destination Port: 80 (http)
Reverse IP: static.92.205.132.142.clients.your-server.de
Geolocation: (Winnipeg MB CA)
Google Maps GeoIP: https://www.google.com/maps/@49.898,-97.1401,15z
This is an automated message, however, you can reply to this message and a human will read your response.
We have attached a file with capture data of the traffic to this email. Hopefully you will be able to gather some useful information from it.
Thanks,
Network Security Department
Medical Informatics Engineering
www.mieweb.com
