To whom it may concern,
We noticed unusual activity coming from 94.130.20.156 on your network to one of our honeypots located at 64.186.38.33.
We have reason to believe 94.130.20.156 may be compromised, is running unauthorized scans of our network, or is being used for illegitimate activity.
Useful Information:
Timestamp: Sat Nov 05 2022 17:00:02 GMT-0400 (Eastern Daylight Time)
Source IP: 94.130.20.156
Destination IP: 64.186.3833
Protocol: TCP
Source Port: 22 (ssh)
Destination Port: 80 (http)
Reverse IP: static.156.20.130.94.clients.your-server.de
Geolocation: (DE)
Google Maps GeoIP: https://www.google.com/maps/@51.2993,9.491,15z
This is an automated message, however, you can reply to this message and a human will read your response.
We have attached a file with capture data of the traffic to this email. Hopefully you will be able to gather some useful information from it.
Thanks,
Network Security Department
Medical Informatics Engineering
www.mieweb.com
