Notes
Notes - notes.io |
destination IPs, destination ports (numbers like 8888), timestamps,
and protocols (like ssh, ftp) in the below paragraph. Strip out the
HTML before looking at it. Ensure the source ports and destination ports
are integers, the source and destination IPs are IPv4 addresses, and
the protocols are strings.
Output this into a dict where keys are 'SOURCE IP', 'SOURCE PORT', 'DST
IP', "DST PORT", "PROTOCOL", and "TIMESTAMP", and values are lists. Ensure the values are deduplicated.
"Original_Report": " * Log Extract: n<<<nAn attempt to
brute-force account passwords over SSH/FTP by a machine in your domain
or in your network has been detected. Attached are the host who attacks
and time / date of activity. Please take the necessary action(s) to stop
this activity immediately. If you have any questions please reply to
this email.rnrnHost of attacker: 3.137.161.255 =>
ec2-3-137-161-255.us-east-2.compute.amazonaws.com =>
amazonaws.comrnResponsible email contacts:
[email protected] hosts in our Network: 185.39.221.228,
77.75.252.148, 37.228.154.118rnrnLogfile entries (time is
CE(S)T):rnFri Aug 25 20:21:36 2023: user: root service: ssh target:
37.228.154.118 source: 3.137.161.255rnFri Aug 25 20:20:49 2023: user:
root service: ssh target: 185.39.221.228 source: 3.137.161.255rnFri
Aug 25 20:20:29 2023: user: root service: ssh target: 77.75.252.148
source: 3.137.161.255rn...rnrnRegards,rn Profihost AG
TeamrnrnThe recipient address of this report was provided by the
Abuse Contact DB by abusix.com.rnAbusix provides a free proxy DB
service which provides the abuse@ address for all global RIRs.rnAbusix
does not maintain the core DB content but provides a service built on
top of the RIR databases.rnIf you wish to change or report a
non-working abuse contact address.rnplease contact the appropriate RIR
responsible for managing the underlying data.rnIf you have any
further questions about using the Abusix Abuse Contact DB, please either
contact abusix.com directly via email ([email protected]) or visit the
URL here: https://abusix.com/contactdbrnAbusix is neither responsible
nor liable for the content or accuracy of this
message.rnn>>>nn * Comments:
n<<<nn>>>n"
|
|
Notes is a web-based application for online taking notes. You can take your notes and share with others people. If you like taking long notes, notes.io is designed for you. To date, over 8,000,000,000+ notes created and continuing...
With notes.io;
- * You can take a note from anywhere and any device with internet connection.
- * You can share the notes in social platforms (YouTube, Facebook, Twitter, instagram etc.).
- * You can quickly share your contents without website, blog and e-mail.
- * You don't need to create any Account to share a note. As you wish you can use quick, easy and best shortened notes with sms, websites, e-mail, or messaging services (WhatsApp, iMessage, Telegram, Signal).
- * Notes.io has fabulous infrastructure design for a short link and allows you to share the note as an easy and understandable link.
Fast: Notes.io is built for speed and performance. You can take a notes quickly and browse your archive.
Easy: Notes.io doesn’t require installation. Just write and share note!
Short: Notes.io’s url just 8 character. You’ll get shorten link of your note when you want to share. (Ex: notes.io/q )
Free: Notes.io works for 14 years and has been free since the day it was started.
You immediately create your first note and start sharing with the ones you wish. If you want to contact us, you can use the following communication channels;
Email: [email protected]
Twitter: http://twitter.com/notesio
Instagram: http://instagram.com/notes.io
Facebook: http://facebook.com/notesio
Regards;
Notes.io Team
