Dear romi@mido.ro and noc@in.bell.ca, My name is Tyler Hudak and I am the Security Analyst for xxx company. A machine owned by us was recently attacked and compromised by a machine under your control. You are being contacted because your names came up under the whois entry for the attacking IP addresses. romi@mido.ro: The machine under your control that we were attacked by is located at IP address 217.156.93.166. noc@in.bell.ca: The machine under your control that we were attacked by is located at IP address 207.35.251.172. Since machines under your control attacked us, it may mean that these machine have been compromised or that you have a malicious user in control of these machines. Please take whatever steps are necessary to fix this. I have attached the relevant alerts obtained from my intrusion detection system which show the connections from your machines. Please feel free to contact me for more information. Tyler Hudak xxx company (100) 555-1212 < The files alert.txt, 207.35.251.172.txt and 217.156.93.166.txt located in the snort-logs directory would be attached. >