=-=-=-=-=-=-=-=-=-=-=-= Fri Oct  7 21:56:03 2011 =-=-=-=-=-=-=-=-=-=-=-=


         Danger level: [2] (out of 5)

    Scanned TCP ports: [1433: 2 packets]
            TCP flags: [SYN: 2 packets, Nmap: -sT or -sS]
       iptables chain: INPUT, 1 packets
       iptables chain: INPUT (prefix "[UFW BLOCK]"), 1 packets

               Source: 176.8.241.3
                  DNS: [No reverse dns info available]

          Destination: 176.9.40.170
                  DNS: l2furrina.info

   Overall scan start: Fri Oct  7 19:59:07 2011
   Total email alerts: 5
   Complete TCP range: [135-1433]
      Syslog hostname: l2furrina

         Global stats: chain:   interface:   TCP:   UDP:   ICMP:  
                       INPUT    eth0         14     0      0      


[+] TCP scan signatures:

   "MISC Microsoft SQL Server communication attempt"
       dst port:  1433 (no server bound to local port)
       flags:     SYN
       psad_id:   100205
       chain:     INPUT
       packets:   2
       classtype: attempted-admin


[+] Whois Information (source IP):
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '176.8.0.0 - 176.8.255.255'

inetnum:         176.8.0.0 - 176.8.255.255
netname:         UA-KYIVSTAR-20110513
descr:           Kyivstar GSM
country:         UA
org:             ORG-KG8-RIPE
admin-c:         KSUA-RIPE
tech-c:          KSUA-RIPE
status:          ALLOCATED PA
mnt-by:          RIPE-NCC-HM-MNT
mnt-lower:       KYIVSTAR-MNT
mnt-routes:      KYIVSTAR-MNT
mnt-domains:     KYIVSTAR-MNT
source:          RIPE # Filtered

organisation:   ORG-KG8-RIPE
org-name:       KYIVSTAR GSM
org-type:       LIR
address:        KYIVSTAR GSM
                Andriy Elperin
                Degtyarevskaya 53
                03113 Kiev
                Ukraine
phone:          +380 44 2473939
fax-no:         +380 67 2219251
e-mail:         hostmaster@kyivstar.net
admin-c:        AEL17-RIPE
admin-c:        KSUA-RIPE
admin-c:        VY11-RIPE
admin-c:        VSZ1-RIPE
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        KYIVSTAR-MNT
mnt-by:         RIPE-NCC-HM-MNT
source:         RIPE # Filtered

role:           Kyivstar GSM
address:        Degtyarevskaya, 53
address:        Kiev, Ukraine
e-mail:         noc@kyivstar.net
admin-c:        AEL17-RIPE
tech-c:         JEDI-RIPE
tech-c:         VZ485-RIPE
tech-c:         AEL17-RIPE
tech-c:         VSZ1-RIPE
nic-hdl:        KSUA-RIPE
mnt-by:         KYIVSTAR-MNT
source:         RIPE # Filtered

% Information related to '176.8.0.0/16AS15895'

route:           176.8.0.0/16
descr:           Kyivstar GSM, Kiev, Ukraine
origin:          AS15895
mnt-by:          KYIVSTAR-MNT
source:          RIPE # Filtered



=-=-=-=-=-=-=-=-=-=-=-= Fri Oct  7 21:56:03 2011 =-=-=-=-=-=-=-=-=-=-=-=