15 May
2019
15 May
'19
2:11 p.m.
To whom it may concern:
It looks like the system at 44.170.109.92, DNS name 9a5c-webcam.ampr.org, has been
affected by a worm of some kind.
It is scanning the IP space to find new victims.
Another thing is that the routing to here is strange. It appears to be on BGP routed
space, but the traffic is received via IPIP tunnel.
(so it is being rejected anyway, but that is how I encountered it in the logs)
Rob