[AB-C6376yyyyyy] Unauthorized traffic originating from your IP 173.71.yy.zzz


Dear Verizon Online Customer,

On (xx-xx-2015) , your account was reported to have been used in an attempt to gain unauthorized access to another system, or to transmit malicious traffic to another Internet user.

It is possible your system may have been infected by a virus or a botnet that is causing this action.



Report and/or Logs:

# all times are GMT-00:00

# begin logs
Oct 23 06:52:17.684444 173.71.yy.zzz.64896 > xxx.xxx.xxx.162.80: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 3489301615:3489301615(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF)
Oct 23 06:52:17.697068 173.71.yy.zzz.64898 > xxx.xxx.xxx.162.8080: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 1273452136:1273452136(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF)
Oct 23 06:52:18.141090 173.71.yy.zzz.64954 > xxx.xxx.xxx.176.80: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 1070743731:1070743731(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF) [tos 0x20]
Oct 23 06:52:18.150825 173.71.yy.zzz.64956 > xxx.xxx.xxx.176.8080: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 2122106973:2122106973(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF)
Oct 23 06:52:18.167001 173.71.yy.zzz.64958 > xxx.xxx.xxx.177.80: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 696269799:696269799(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF)
Oct 23 06:52:18.186803 173.71.yy.zzz.64960 > xxx.xxx.xxx.177.8080: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 3658392161:3658392161(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF)
Oct 23 06:52:18.199246 173.71.yy.zzz.64962 > xxx.xxx.xxx.178.80: S (src OS: Windows 2000 RFC1323, Windows XP RFC1323) 2112431224:2112431224(0) win 8192 <mss 1360,nop,wscale 8,nop,nop,sackOK> (DF)

Please immediately ensure your anti-virus software is properly updated, and then run a full-system virus scan on your computer(s). Follow the removal instructions for any viruses found, as indicated by your anti-virus software.

Additional information and removal instructions about viruses and your anti-virus software may be found on the website of your anti-virus software manufacturer.

It is difficult to verify the presence of an exact virus which has infected a computer without a full system scan with up-to-date anti-virus software. Therefore, you may wish to contact the Technical Support Department of your anti-virus software manufacturer, should you need assistance with this process, or have any questions or concerns about a possible virus infection.

Please be aware of the importance in taking immediate actions to stop further virus related activity. If you are unable to take immediate action, it would be advisable to remove the computer(s) which may be infected from any networks and the Internet connection until it has been properly cleaned. For DSL customers, this may be easily done by unplugging the network cable that connects the computer to the DSL modem, or the telephone line that connects the DSL modem to the telephone jack.

Verizon Policy:

If you do not take appropriate action to resolve this issue, we will be forced to take further action, which could include the suspension of your service until the issue is resolved, in order to ensure the safety of our network, and the safety of other Internet users.

Please carefully review these agreements, which can be viewed at:

http://www.verizon.com/about/terms/

Any future violation will result in further action being taken, up to,
and including, the termination of your service.


Sincerely,

Verizon Online Abuse
http://www.verizon.com/about/terms/
http://www.verizon.com/securityinfo
[email protected]