Return-Path: Delivered-To: khizar@dawoodexp.com Received: from fsd-hosting.comsatshosting.com by fsd-hosting.comsatshosting.com with LMTP id L4cHAq5ySmkDvQYAq+928w (envelope-from ) for ; Tue, 23 Dec 2025 15:45:02 +0500 Return-path: Envelope-to: khizar@dawoodexp.com Delivery-date: Tue, 23 Dec 2025 15:45:02 +0500 Received: from [::1] (port=50248 helo=fsd-hosting.comsatshosting.com) by fsd-hosting.comsatshosting.com with esmtpa (Exim 4.99) (envelope-from ) id 1vXzsy-00000001qsT-1KD8 for khizar@dawoodexp.com; Tue, 23 Dec 2025 15:45:01 +0500 MIME-Version: 1.0 Date: Tue, 23 Dec 2025 15:45:01 +0500 From: it@dawoodexp.com To: Khizar Subject: Fwd: Re: Dawood CCTV In-Reply-To: <1628922812.76636480.1766482798773.JavaMail.zimbra@nayatel.com> References: <2066268771.72883359.1766219893346.JavaMail.zimbra@nayatel.com> <1515530223.76570976.1766479694448.JavaMail.zimbra@nayatel.com> <528e7df5fcdcb35c7d131922c24d706d@dawoodexp.com> <1628922812.76636480.1766482798773.JavaMail.zimbra@nayatel.com> User-Agent: Roundcube Webmail/1.6.11 Message-ID: <41ef83812dd7fe16a72577c37f6266f0@dawoodexp.com> X-Sender: it@dawoodexp.com Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit -------- Original Message -------- Subject: Re: Dawood CCTV Date: 2025-12-23 14:39 From: Nayatel Support To: it@dawoodexp.com Cc: support Dear Customer, Please find the relevant logs attached below: Sample 1 ``` Timestamp SrcIP SrcPort DstIP DstPort 2025-12-18T15:35:15.605Z 115.186.137.114 41076 [1] 88x218x206x26 22222 2025-12-18T15:42:30.655Z 115.186.137.114 50950 [2] 88x218x206x215 22222 2025-12-18T21:02:52.844Z 115.186.137.114 50194 [3] 88x218x206x62 2222 2025-12-18T21:53:35.592Z 115.186.137.114 29794 [4] 88x218x206x204 22222 ------------------------------------------------------------------------ ``` Sample 2 Logfile entries (time is CE(S)T): Tue Dec 16 05:32:48 2025: user: root service: ssh target: 37.228.155.234 [5] source: 115.186.137.114 [6] Tue Dec 16 05:32:38 2025: user: root service: ssh target: 37.228.155.234 [5] source: 115.186.137.114 [6] Tue Dec 16 05:32:38 2025: user: root service: ssh target: 37.228.155.234 [5] source: 115.186.137.114 [6] Tue Dec 16 05:32:28 2025: user: root service: ssh target: 37.228.155.234 [5] source: 115.186.137.114 [6] Tue Dec 16 05:32:28 2025: user: root service: ssh target: 37.228.155.234 [5] source: 115.186.137.114 [6] Tue Dec 16 05:31:38 2025: user: root service: ssh target: 37.228.156.213 [7] source: 115.186.137.114 [6] Tue Dec 16 05:31:38 2025: user: root service: ssh target: 37.228.156.213 [7] source: 115.186.137.114 [6] Tue Dec 16 05:31:38 2025: user: root service: ssh target: 37.228.156.213 [7] source: 115.186.137.114 [6] Tue Dec 16 05:31:28 2025: user: root service: ssh target: 37.228.156.213 [7] source: 115.186.137.114 [6] Tue Dec 16 05:31:18 2025: user: root service: ssh target: 37.228.156.74 [8] source: 115.186.137.114 [6] Tue Dec 16 05:31:08 2025: user: root service: ssh target: 37.228.156.74 [8] source: 115.186.137.114 [6] Tue Dec 16 05:31:08 2025: user: root service: ssh target: 37.228.156.74 [8] source: 115.186.137.114 [6] Tue Dec 16 05:31:08 2025: user: root service: ssh target: 37.228.156.74 [8] source: 115.186.137.114 [6] Tue Dec 16 05:30:58 2025: user: root service: ssh target: 37.228.156.74 [8] source: 115.186.137.114 [6] Tue Dec 16 05:30:58 2025: user: root service: ssh target: 37.228.156.74 [8] source: 115.186.137.114 [6] Tue Dec 16 05:30:55 2025: user: root service: ssh target: 91.151.21.143 [9] source: 115.186.137.114 [6] Tue Dec 16 05:30:55 2025: user: root service: ssh target: 91.151.21.143 [9] source: 115.186.137.114 [6] Tue Dec 16 05:30:55 2025: user: root service: ssh target: 91.151.21.143 [9] source: 115.186.137.114 [6] Tue Dec 16 05:30:45 2025: user: root service: ssh target: 91.151.21.143 [9] source: 115.186.137.114 [6] Tue Dec 16 05:30:45 2025: user: root service: ssh target: 91.151.21.143 [9] source: 115.186.137.114 [6] Tue Dec 16 05:30:40 2025: user: root service: ssh target: 37.228.156.195 [10] source: 115.186.137.114 [6] Tue Dec 16 05:30:40 2025: user: root service: ssh target: 37.228.156.195 [10] source: 115.186.137.114 [6] Tue Dec 16 05:30:40 2025: user: root service: ssh target: 37.228.156.195 [10] source: 115.186.137.114 [6] Tue Dec 16 04:53:00 2025: user: root service: ssh target: 85.158.176.92 [11] source: 115.186.137.114 [6] Tue Dec 16 04:52:30 2025: user: root service: ssh target: 85.158.176.92 [11] source: 115.186.137.114 [6] Tue Dec 16 04:52:10 2025: user: root service: ssh target: 85.158.176.92 [11] source: 115.186.137.114 [6] Tue Dec 16 04:46:39 2025: user: root service: ssh target: 77.75.249.32 [12] source: 115.186.137.114 [6] Tue Dec 16 04:46:39 2025: user: root service: ssh target: 77.75.249.32 [12] source: 115.186.137.114 [6] Tue Dec 16 04:46:39 2025: user: root service: ssh target: 77.75.249.32 [12] source: 115.186.137.114 [6] Tue Dec 16 04:46:29 2025: user: root service: ssh target: 77.75.249.32 [12] source: 115.186.137.114 [6] Tue Dec 16 04:46:29 2025: user: root service: ssh target: 77.75.249.32 [12] source: 115.186.137.114 [6] Tue Dec 16 03:53:46 2025: user: root service: ssh target: 85.158.176.19 [13] source: 115.186.137.114 [6] Tue Dec 16 03:53:46 2025: user: root service: ssh target: 85.158.176.19 [13] source: 115.186.137.114 [6] Tue Dec 16 03:53:46 2025: user: root service: ssh target: 85.158.176.19 [13] source: 115.186.137.114 [6] Tue Dec 16 03:53:16 2025: user: root service: ssh target: 85.158.176.19 [13] source: 115.186.137.114 [6] Tue Dec 16 02:09:40 2025: user: root service: ssh target: 178.250.14.184 [14] source: 115.186.137.114 [6] Tue Dec 16 02:09:30 2025: user: root service: ssh target: 178.250.14.184 [14] source: 115.186.137.114 [6] Tue Dec 16 02:09:30 2025: user: root service: ssh target: 178.250.14.184 [14] source: 115.186.137.114 [6] Tue Dec 16 02:09:20 2025: user: root service: ssh target: 178.250.14.184 [14] source: 115.186.137.114 [6] Tue Dec 16 02:09:20 2025: user: root service: ssh target: 178.250.14.184 [14] source: 115.186.137.114 [6] Tue Dec 16 02:09:11 2025: user: root service: ssh target: 37.228.158.103 [15] source: 115.186.137.114 [6] Tue Dec 16 02:09:11 2025: user: root service: ssh target: 37.228.158.103 [15] source: 115.186.137.114 [6] Tue Dec 16 02:09:11 2025: user: root service: ssh target: 37.228.158.103 [15] source: 115.186.137.114 [6] Tue Dec 16 02:09:01 2025: user: root service: ssh target: 37.228.158.103 [15] source: 115.186.137.114 [6] Tue Dec 16 02:09:01 2025: user: root service: ssh target: 37.228.158.103 [15] source: 115.186.137.114 [6] Mon Dec 15 22:23:21 2025: user: root service: ssh target: 194.34.225.51 [16] source: 115.186.137.114 [6] Mon Dec 15 22:23:01 2025: user: root service: ssh target: 194.34.225.51 [16] source: 115.186.137.114 [6] Mon Dec 15 22:22:31 2025: user: root service: ssh target: 194.34.225.51 [16] source: 115.186.137.114 [6] Mon Dec 15 20:27:29 2025: user: root service: ssh target: 77.75.250.61 [17] source: 115.186.137.114 [6] ... Regards, Owais Raza _Operations Engineer_ Technical Assistance Center Nayatel ------------------------- From: it@dawoodexp.com To: "Nayatel Support" Sent: Tuesday, December 23, 2025 2:29:11 PM Subject: Re: Dawood CCTV On 2025-12-23 13:48, Nayatel Support wrote: > Dear Customer, > > We have detected multiple repeated SSH login attempts originating > from > your IP 115.186.137.114 targeting external servers. This activity > appears to be automated and may indicate a brute-force attempt. > > Please note that this activity may be unintentional, as a device on > your network could be compromised. If required, we can share the > related logs for your review. > > We recommend taking immediate precautions: > > * > > Restrict or block outgoing SSH connections from the affected > device(s). > * > > Ensure all devices on your network are scanned for malware or > compromised software. > * > > Disable root login over SSH and use key-based authentication on your > own servers if applicable. > > Kindly let us know if you require further support. > > Regards, > > Owais Raza > _Operations Engineer_ > Technical Assistance Center > Nayatel > > ------------------------- > > From: it@dawoodexp.com > To: "Support" > Sent: Monday, December 22, 2025 1:40:28 PM > Subject: Fwd: Re: Dawood CCTV > > Nayatel whats update about > > plz tell us in detail > > Thanks > > -------- Original Message -------- > Subject: Re: Dawood CCTV > Date: 2025-12-20 13:38 > From: Nayatel Support > To: it@dawoodexp.com > Cc: security > > Dear Team, > > FYI. > > Regards, > > Muhammad Auns > _Operations Engineer_ > Technical Assistance Center > Nayatel > > ------------------------- > > From: it@dawoodexp.com > To: "support" > Sent: Saturday, December 20, 2025 1:35:35 PM > Subject: Dawood CCTV plz send us log in detail thanks Links: ------ [1] callto:115.186.137.11441076 [2] callto:115.186.137.11450950 [3] callto:115.186.137.11450194 [4] callto:115.186.137.11429794 [5] callto:37.228.155.234 [6] callto:115.186.137.114 [7] callto:37.228.156.213 [8] callto:37.228.156.74 [9] callto:91.151.21.143 [10] callto:37.228.156.195 [11] callto:85.158.176.92 [12] callto:77.75.249.32 [13] callto:85.158.176.19 [14] callto:178.250.14.184 [15] callto:37.228.158.103 [16] callto:194.34.225.51 [17] callto:77.75.250.61