|
abuse-ticket@quadranet.com Posted on: 06 Jul 2011 10:12 PM
================================================================
There has been a report of abuse on your server.
Per our policies, we require that all our clients respond to abuse notices as they come in. Failure to do so within a timely manner (within 24 hours) will result in a suspension of services until the server administrator has time to resolve the issue.
The initial complaint is attached to this ticket. If you don't see it under my signature, please log in to your billing interface and view the ticket there.
We will await your response indicating that you have complied with the order, dispute it, or require a reasonable extension of time to resolve the issue.
Awaiting your timely response,
--
Vitaliy Yablonskiy
Support Engineer
The following is a list of IP addresses on your network which we have
good reason to believe may be compromised systems engaging in
malicious activity. Please investigate and take appropriate action to
stop any malicious activity you verify.
The following is a list of types of activity that may appear in this
report:
BEAGLE BEAGLE3 BLASTER BOTNETS BOTS BRUTEFORCE
DAMEWARE DEFACEMENT DIPNET DNSBOTS MALWAREURL MYDOOM
NACHI PHATBOT PHISHING ROUTERS SCAN445 SCANNERS
SINIT SLAMMER SPAM SPYBOT TOXBOT
Open proxies and open mail relays may also appear in this report.
Open proxies are designated by a two-character identifier (s4, s5, wg,
hc, ho, hu, or fu) followed by a colon and a TCP port number. Open
mail relays are designated by the word "relay" followed by a colon
and
a TCP port number.
A detailed description of each of these may be found at
https://security.gblx.net/reports.html
NOTE: IPs identified as hosting botnet controllers, phishing websites,
or malware distribution sites (marked with BOTNETS, PHISHING, or
MALWAREURL respectively) may be null routed by Global Crossing
following a separately emailed notice. We will make every effort
to avoid taking action which will impact legitimate services on
your network, and we will now send notices of botnet controllers
within one hour of their detection.
This report is sent every day. If you would prefer a weekly report,
sent on Mondays, please contact us by replying to this email to
request it. We would prefer, however, that you receive and act upon
these reports daily.
Unless otherwise indicated, time stamps are in UTC (GMT).
29761 | 111.111.111.A| 2011-07-08 10:58:56 3306/tcp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
29761 | 111.111.111.A| 2011-07-10 22:52:03 3389/tcp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
29761 | 111.111.111.A| 2011-07-10 23:45:00 3389/tcp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
29761 | 111.111.111.A| 2011-07-10 18:57:44 5060/udp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
29761 | 111.111.111.A| 2011-07-10 19:00:56 5060/udp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
29761 | 111.111.111.B| 2011-07-10 05:47:57 445/tcp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
29761 | 111.111.111.C| 2011-07-10 03:03:08 445/tcp SCANNERS |
OC3-NETWORKS-AS-NUMBER - OC3 Networks & Web Solutions, LLC
没有附件
其中IP方面,只有一个IP 111.111.111.B 是我的IP ,是什么原因被投诉的?是做攻击还是做什么被投诉了
[ 本帖最后由 西西 于 2011-7-13 17:01 编辑 ] |
|