Received: from DB5EUR03HT247.eop-EUR03.prod.protection.outlook.com
 (2603:10a6:6:2e::14) by DB4PR06MB585.eurprd06.prod.outlook.com with HTTPS via
 DB6P189CA0001.EURP189.PROD.OUTLOOK.COM; Sat, 17 Jun 2017 13:01:52 +0000
Received: from DB5EUR03FT006.eop-EUR03.prod.protection.outlook.com
 (10.152.20.59) by DB5EUR03HT247.eop-EUR03.prod.protection.outlook.com
 (10.152.21.202) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1157.12; Sat, 17
 Jun 2017 13:01:51 +0000
Authentication-Results: spf=pass (sender IP is 213.133.106.242)
 smtp.mailfrom=hetzner.de; hotmail.com; dkim=none (message not signed)
 header.d=none;hotmail.com; dmarc=bestguesspass action=none
 header.from=hetzner.de;
Received-SPF: Pass (protection.outlook.com: domain of hetzner.de designates
 213.133.106.242 as permitted sender) receiver=protection.outlook.com;
 client-ip=213.133.106.242; helo= mail.hetzner.company;
Received: from BAY004-MC5F19.hotmail.com (10.152.20.59) by
 DB5EUR03FT006.mail.protection.outlook.com (10.152.20.106) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.1.1157.12 via Frontend Transport; Sat, 17 Jun 2017 13:01:50 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:F2C2B314FA45374948D4C84EC967243A55895856E4B95866F67A47E41D3B33EF;UpperCasedChecksum:40517CD64448FF2011DEFC0D8C79CAEFDFEEC4586B5C79FF6816F2AB92539A70;SizeAsReceived:1273;Count:17
Received: from mail.hetzner.company ([213.133.106.242]) by BAY004-MC5F19.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
	 Sat, 17 Jun 2017 06:01:47 -0700
Received: from [188.40.24.70] (helo=abuse.your-server.de)
	by mail.hetzner.company with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.80)
	(envelope-from <abuse@hetzner.de>)
	id 1dMDM8-0005jn-G9
	for keko950@hotmail.com; Sat, 17 Jun 2017 15:01:36 +0200
Received: from localhost.localdomain (localhost [127.0.0.1])
	by abuse.your-server.de (Postfix) with ESMTPS id 684DF30071B
	for <keko950@hotmail.com>; Sat, 17 Jun 2017 15:01:26 +0200 (CEST)
Date: Sat, 17 Jun 2017 15:01:26 +0200
From: <abuse@hetzner.de>
Reply-To: <abuse@hetzner.de>
To: <keko950@hotmail.com>
Message-ID: <594528266648d_20e92cc25d445592fc@abuse.your-server.de.mail>
Subject: Abuse Message [AbuseID:351033:24]: AbuseBSI:
 [CB-Report#20170617-45385176] Offene NetBIOS-Namensdienste in AS24940
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Hetzner-AbuseID: 351033:24
Charset: UTF-8
X-Authenticated-Sender: abuse-queue@hetzner.de
Return-Path: abuse@hetzner.de
X-OriginalArrivalTime: 17 Jun 2017 13:01:47.0327 (UTC) FILETIME=[E09F14F0:01D2E769]
X-IncomingHeaderCount: 17
X-MS-Exchange-Organization-Network-Message-Id: 5b48f80a-b762-442d-cd46-08d4b5810573
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 213.133.106.242
CMM-sending-ip: 213.133.106.242
CMM-Authentication-Results: hotmail.com; spf=temperror (sender IP is
 213.133.106.242) smtp.mailfrom=abuse@hetzner.de; dkim=none
 header.d=hetzner.de; x-hmca=none header.id=abuse@hetzner.de
CMM-X-SID-PRA: abuse@hetzner.de
CMM-X-AUTH-Result: NONE
CMM-X-SID-Result: NONE
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MTtHRD0xO1NDTD0w
CMM-X-Message-Info: NhFq/7gR1vQRHV6jbdvQflMPFnPx/QUT9d3EY7Fk9VN7Iz51loVyqbw6JW1pdsTYrdrEavtFNGvoHn3lbY6nmqJwwsZaQjRk8R0MsQ2J1HMXeMvXoJgbeqer+4as0MdB+7pQ/a4SawWwoGThOjhzXLiGK7HDe/jB28ea9doG1ymGJmE+EczlN8e1NSOjET+r3DaHG3ZdYND75T8cca/c9+RbzZ4h3GpP/hovhN3mYFuJ/rTA21Bmey5GiWcAitkL
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03FT006;1:LqXZ8YA9PkDt8ZCUvuesBkmjYIornNYM/WCup98Ep7dxt7s2P2nowRXPAhd8OWUuyKvCguBSBDS1Nl0UQYtzwNjx9nWHhLUa+mhy/pLtDas7rezOKwwS+84/I5e++/mk8sMWA1bwyDbFCokMTVUKU1TVFmgaJdvcgyr+Ua6B6vtXlkT0WPEyXO8KcVOG2RmtIOnXNrCDvgKpuiO2ESZrnM1p7ZcRPtCFiemPUvc8rpm3kMKyIDprLiJ1qh4cR1lNoLpEBOYBfRYls6AgltSIpg==
X-Forefront-Antispam-Report: EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:DB5EUR03HT247;H:BAY004-MC5F19.hotmail.com;FPR:;SPF:None;LANG:en;
X-MS-Exchange-Organization-AuthSource: DB5EUR03FT006.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB5EUR03HT247:
X-MS-Office365-Filtering-Correlation-Id: 5b48f80a-b762-442d-cd46-08d4b5810573
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(23075)(22001)(8291501071);SRVR:DB5EUR03HT247;
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT247;3:/LTAmThSTIiKkyBkugDWd22ZvHeyDGhoyk+4hBlRNTR2n6Kusain1KTte687/LpEOIDhcMq07ee4mlhaVTvBUePzPHaYEB8ypejz3k0Q1ZO1DECsmQzW/9VWkuPkEcm5ZprjqS1yF3//CJmCV2SLrsfnmCthhY9yu3h+zsk9WfMieLPPczUNMrVSjM67XHK9j7ehuONz5PfuHacS51hSP3iCdeceKeDnTHLLT5zwW2+C5LWiaWFoFmK3ics6nMjnuRQyK4B8VnMEci39nxFHBctoPXYmnEvRUIWeK1DO978XJuyPH/L/aSGPU2f/HE6qFICLNGSTkWIjR7n71l0dlpVQo4jOCzWOQ1+89nw4imQgpL8VDuFBr2Z4aM/tQKoq;25:zcdvLHffbI80u9B+G2HHpVWnx/Xjahs7HZr3bG1V/oO3JZTwmL9hWosXoDuNWSnPgVqJhOAg5wiaDttlW9eeHSHiuhf15JVEXxBsZpDlCoZ3bE9vcuR41EHvxPaT3IcbbwA/d3KyHRlc5N0xjtLf9HwsU6dubBAOlPLDUVXYqhC7nClAChyD8BpXNNMdYmK2hQaVvk3dAI+98OuUHMfnpXpgWE+bWFBfxNqV7SZf6rN+4nKop9WcXZ1BwqrBgXQ6E0rzbaJiUSqlWcv8ZJrXr+t/D2TnYK0Bd+YWHloU8/rozKYkDJKbvWLydhkjcQYTe6OR1fjPzIeQHvdkAS+TWBcXXrn0s3NLVcNTuk6xbGazTe+oZrhS+x9wkdDsoZgaA7ZUz8w1+uI4bXI4TaEMaOXabQP8J3aL4WCwtuRjbna71kCCnHYfpLmFQSXyLK7z7ytdi9GQeB+GkdZCRTi5AHp31teHu77hJH+JmxLYOuQ=
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT247;31:8rz3h+sB3Ptjv2AAp8wqr2e5YUpwZS30pE94vbcQo6jvSJcW9ZwBfPAZlfLm3LxmJIUDdRsBgS5Zi6IbuQah+09qDtnbWsOPcVokVq28PD4XFOE3Yh+x6OfvQbmsUanLpg7ZXK7q9r8oTNPTgrIcFs+FrS4H+/EPk7J9zyl9tH8N/5LW77tPajHGrobFOT2ez4dUw+MuJY0aSOccBnIUdqF2qiKgDHDobNh6u5q10tYyOzasJUFgWxPkxA+ZFWEZyOPDK+8l/OUvJ3bqjxNq537h8Tnj+Dh8eGIcStzoM7WaQqfRqpqWW1fdZUTR0bKh;4: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
X-Exchange-Antispam-Report-Test: UriScan:(20558992708506)(192374486261705);
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444111536)(595095)(82015058);SRVR:DB5EUR03HT247;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DB5EUR03HT247;
X-MS-Exchange-Organization-SCL: 1
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT247;23:V/JS6hCAD7WxJBbzjcQvB+D1Wyzaw2Ulr1LTooVNa37Wg+NUe2Xl3gQ2VFWN+xlw2Cbp2kpobtA1HYmhOol7d7Gt8IKT29kgwKpALaLF4m+DaY0fJgoEtI3cPYq1P8QnPj4YuJ8r9DqsXoVO1HvOodzysIhO997UICM6LisWX7c=
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT247;6: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
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT247;5: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;24:EJPyW9XOd0fBmV56nRvFmZHA1lXp7QRY32LoMScPCIrcy7JvvWdge3rBsoDA+tD5HognStrptFSE7noB+LfmkGUlypnGBZ0b6INKpFlEZMw=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT247;7: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
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jun 2017 13:01:50.6247
 (UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR03HT247
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.4067931
X-Microsoft-Exchange-Diagnostics:
	1;DB4PR06MB585;27:crv3do4OtD751v/bo2gbV3VBxE2n/0FSqEiSW3GNaJz12BvU0fmNHLkWY1MKnpepaZ02abU4w93FhZ9kcdhY5qDLaeFyOwE/ZsZssL+iAEsyaAjqSvClxS5Ny3uNcAwjFP+vdV3uMvyapB0E9Ypx4A==
X-Microsoft-Antispam-Mailbox-Delivery:
	abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;psp:0;auth:0;dest:I;WIMS-SenderIP:213.133.106.242;WIMS-SPF:hetzner%2ede;WIMS-DKIM:hetzner%2ede;WIMS-822:abuse%40hetzner%2ede;WIMS-PRA:abuse%40hetzner%2ede;WIMS-AUTH:NONE;ENG:(5062000180)(5061607266)(5061608170)(4900095)(4950095)(102400140)(400001001128)(400125100095)(400001002128)(400125200095);
MIME-Version: 1.0

Dear Mr Gilberto Plaza,

We received a security alert from the German Federal Office for Information Security (BSI).
Please see the original report included below for details.

Please investigate and solve the reported issue.
It is not required that you reply to either us or the BSI.
If the issue has been fixed successfully, you should not receive any further notifications.

Additional information is provided with the HOWTOs referenced in the report.
In case of further questions, please contact certbund@bsi.bund.de and keep the
ticket number of the original report [CB-Report#...] in the subject line.
Do not reply <reports@reports.cert-bund.de> as this is just the sender address for the
reports and messages sent to this address will not be read.

Kind regards

Abuse team

On 17 Jun 10:45, reports@reports.cert-bund.de wrote:
> [English version below]
>
> Sehr geehrte Damen und Herren,
>
> NetBIOS ist eine Programmierschnittstelle zur Kommunikation zwischen
> Programmen ber ein lokales Netzwerk. NetBIOS over TCP/IP ist ein
> Netzwerkprotokoll, das es ermglicht, auf der Programmierschnittstelle
> NetBIOS aufbauende Programme ber das Netzwerkprotokoll TCP/IP zu
> verwenden.
>
> In den letzten Monaten wurden Systeme, welche Anfragen an NetBIOS-
> Namensdienste aus dem Internet beantworten, zunehmend zur Durchfhrung
> von DDoS-Reflection-Angriffen gegen IT-Systeme Dritter missbraucht.
> Der NetBIOS-Namensdienst verwendet Port 137/udp.
>
> Nachfolgend senden wir Ihnen eine Liste betroffener Systeme in Ihrem
> Netzbereich. Der Zeitstempel (Zeitzone UTC) gibt an, wann der offene
> NetBIOS-Namensdienst identifiziert wurde.
>
> Wir mchten Sie bitten, den Sachverhalt zu prfen und Manahmen zur
> Absicherung der NetBIOS-Namensdienste auf den betroffenen Systemen
> zu ergreifen bzw. Ihre Kunden entsprechend zu informieren.
>
> Falls Sie krzlich bereits Gegenmanahmen getroffen haben und diese
> Benachrichtigung erneut erhalten, beachten Sie bitten den angegebenen
> Zeitstempel. Wurde die Gegenmanahme erfolgreich umgesetzt, sollten
> Sie keine Benachrichtigung mit einem Zeitstempel nach der Umsetzung
> mehr erhalten.
>
> Weitere Informationen zu dieser Benachrichtigung, Hinweise zur
> Behebung gemeldeter Sicherheitsprobleme sowie Antworten auf hufig
> gestellte Fragen finden Sie unter:
> <https://reports.cert-bund.de/>
>
> Diese E-Mail ist mittels PGP digital signiert. Informationen zu dem
> verwendeten Schlssel finden Sie unter vorgenannter URL.
>
> Bitte beachten Sie:
> Dies ist eine automatisch generierte Nachricht. Antworten an die
> Absenderadresse <reports@reports.cert-bund.de> werden NICHT gelesen
> und automatisch verworfen. Bei Rckfragen wenden Sie sich bitte
> unter Beibehaltung der Ticketnummer [CB-Report#...] in der
> Betreffzeile an <certbund@bsi.bund.de>.
>
> !! Bitte lesen Sie zunchst unsere HOWTOs und FAQ, welche unter
> !! <https://reports.cert-bund.de/> verfgbar sind.
>
> ======================================================================
>
> Dear Sir or Madam,
>
> NetBIOS defines a software interface and a naming convention.
> NetBIOS over TCP/IP provides the NetBIOS programming interface
> over the TCP/IP protocol.
>
> Over the past months, systems responding to NetBIOS nameservice
> requests from anywhere on the Internet have been increasingly
> abused for DDoS reflection attacks against third parties.
> The NetBIOS nameservice uses port 137/udp.
>
> Please find below a list of affected systems hosted on your network.
> The timestamp (timezone UTC) indicates when the openly accessible
> NetBIOS nameservice was identified.
>
> We would like to ask you to check this issue and take appropriate
> steps to secure the NetBIOS nameservices services on the affected
> systems or notify your customers accordingly.
>
> If you have recently solved the issue but received this notification
> again, please note the timestamp included below. You should not
> receive any further notifications with timestamps after the issue
> has been solved.
>
> Additional information on this notification, advice on how to fix
> reported issues and answers to frequently asked questions:
> <https://reports.cert-bund.de/en/>
>
> This message is digitally signed using PGP. Information on the
> signature key is available at the aforementioned URL.
>
> Please note:
> This is an automatically generated message. Replies to the
> sender address <reports@reports.cert-bund.de> will NOT be read
> but silently be discarded. In case of questions, please contact
> <certbund@bsi.bund.de> and keep the ticket number [CB-Report#...]
> of this message in the subject line.
>
> !! Please make sure to consult our HOWTOs and FAQ available at
> !! <https://reports.cert-bund.de/en/> first.
>
> ======================================================================
>
> Betroffene Systeme in Ihrem Netzbereich:
> Affected systems on your network:
>
> Format: ASN | IP address | Timestamp (UTC) | Workgroup name | Machine name
>  24940 | 144.76.1.220    | 2017-06-15 01:42:07 | WORKGROUP       | WIN-8TFF523AVFN
>
> Mit freundlichen Gren / Kind regards
> Team CERT-Bund
>
> Bundesamt fr Sicherheit in der Informationstechnik (BSI)
> Federal Office for Information Security
> Referat CK22 - CERT-Bund
> Godesberger Allee 185-189, D-53175 Bonn, Germany