[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
new clueless security softwhere
On 11/17/12 3:42 AM, Randy Bush wrote:
> new crapware on the misconfigured loose. did we not just have a thread
> on frags? how long will it take the amateurs to learn about port 53?
> Date: Sat, 17 Nov 2012 16:15:23 +0800
> To: randy at psg.com
> From: Security Ops Center <security at communilink.net>
> Subject: Network abuse from attacker: 184.108.40.206 to 220.127.116.11(ID# 86329)
> Message-ID: <dda9f857e37eff2f1c53e3d60dcb12f6 at localhost.localdomain>
> Dear Sir,
> We detected an attack/abuse to our network that come from an IP owned by your ASN.
> The IP of your network [ 18.104.22.168 ] was infected and sending attack to our network [ 22.214.171.124 ].
> The following is the logs that you can take proper actions. [TimeZone: GMT +8]
> 2012-11-17 20:21:30 Fragmented traffic! From 126.96.36.199:53 to 188.8.131.52:56958,
> 2012-11-17 20:37:56 Fragmented traffic! From 184.108.40.206:53 to 220.127.116.11:39843,
> 2012-11-17 20:37:56 Fragmented traffic! From 18.104.22.168:3600 to 22.214.171.124:20678,
> <hundreds of more lines>
> Should you have any questions, please call us at +(852) 29980833.
> Please include the ticket number, ID#86329, in all communications on this issue.
> Thank you,
> Security Ops Center - CommuniLink Internet Limited.
> security at communilink.net
> 852.2998.0833 (voice) 852.2998.0899 (fax)