I haven't made it home, I was out of town working. Should be back this week.
Recieved this from my girlfriend this morning.
Account ending in XXX<br></u>This is a courtesy notice from AT&T. We have identified opportunities for you to enhance your Internet security and privacy.<br>Please review the issues identified below on the IP address(es) using your Internet service. Check the settings on your router or gateway to ensure these devices are not improperly exposed to the Internet.
My.X.X.IP :
Mirai infection: Mirai refers to a type of IoT malware. It is different than regular malware because it targets equipment on your network, such as surveillance cameras, rather than traditional PCs. Presence of Mirai on one of your devices allows hackers to use your equipment to attack other computers.<br><br>Because this malware targets equipment rather than a PC, it can be difficult to detect and remove.<br><br>Removal steps:
Determine which devices on your network may be exposed to the Internet. Pay special attention to cameras, digital video recorders (DVR’s), and video surveillance systems; and devices with model numbers LS300, GX400, GX/ES440, GX/ES450, and RV50k manufactured by Sierra Wireless.
Ensure that your firewall or wireless router is configured to block access to ports 22/tcp (ssh) and 23/tcp (telnet). If you are not able to disable access to these ports, limit access to only the remote IP addresses you need for remote management.
Restart the equipment. If you continue to receive alerts, you may need to reset the device to “factory settings”. Consult the equipment manual for more information.
Visit the manufacturer’s website for the latest firmware updates for your device.
After restarting, change the administrator password for the device.
<br>Additional tools and information:
US CERT ALERT regarding Mirai: Heightened DDoS Threat Posed by Mirai and Other Botnets | CISA
US CERT ALERT regarding Sierra Wireless Equipment: Sierra Wireless Mitigations Against Mirai Malware | CISA