rendered paste body=-=-=-=-=-=-=-=-=-=-=-= Fri Oct 7 21:56:03 2011 =-=-=-=-=-=-=-=-=-=-=-=
Danger level: [2] (out of 5)
Scanned TCP ports: [1433: 2 packets]
TCP flags: [SYN: 2 packets, Nmap: -sT or -sS]
iptables chain: INPUT, 1 packets
iptables chain: INPUT (prefix "[UFW BLOCK]"), 1 packets
Source: 176.8.241.3
DNS: [No reverse dns info available]
Destination: 176.9.40.170
DNS: l2furrina.info
Overall scan start: Fri Oct 7 19:59:07 2011
Total email alerts: 5
Complete TCP range: [135-1433]
Syslog hostname: l2furrina
Global stats: chain: interface: TCP: UDP: ICMP:
INPUT eth0 14 0 0
[+] TCP scan signatures:
"MISC Microsoft SQL Server communication attempt"
dst port: 1433 (no server bound to local port)
flags: SYN
psad_id: 100205
chain: INPUT
packets: 2
classtype: attempted-admin
[+] Whois Information (source IP):
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '176.8.0.0 - 176.8.255.255'
inetnum: 176.8.0.0 - 176.8.255.255
netname: UA-KYIVSTAR-20110513
descr: Kyivstar GSM
country: UA
org: ORG-KG8-RIPE
admin-c: KSUA-RIPE
tech-c: KSUA-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: KYIVSTAR-MNT
mnt-routes: KYIVSTAR-MNT
mnt-domains: KYIVSTAR-MNT
source: RIPE # Filtered
organisation: ORG-KG8-RIPE
org-name: KYIVSTAR GSM
org-type: LIR
address: KYIVSTAR GSM
Andriy Elperin
Degtyarevskaya 53
03113 Kiev
Ukraine
phone: +380 44 2473939
fax-no: +380 67 2219251
e-mail: hostmaster@kyivstar.net
admin-c: AEL17-RIPE
admin-c: KSUA-RIPE
admin-c: VY11-RIPE
admin-c: VSZ1-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: KYIVSTAR-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
role: Kyivstar GSM
address: Degtyarevskaya, 53
address: Kiev, Ukraine
e-mail: noc@kyivstar.net
admin-c: AEL17-RIPE
tech-c: JEDI-RIPE
tech-c: VZ485-RIPE
tech-c: AEL17-RIPE
tech-c: VSZ1-RIPE
nic-hdl: KSUA-RIPE
mnt-by: KYIVSTAR-MNT
source: RIPE # Filtered
% Information related to '176.8.0.0/16AS15895'
route: 176.8.0.0/16
descr: Kyivstar GSM, Kiev, Ukraine
origin: AS15895
mnt-by: KYIVSTAR-MNT
source: RIPE # Filtered
=-=-=-=-=-=-=-=-=-=-=-= Fri Oct 7 21:56:03 2011 =-=-=-=-=-=-=-=-=-=-=-=