Stealth portscans
Florian Lohoff
flo at rfc822.org
Sun Jan 20 15:59:03 CET 2002
Hi,
ich habe noch im Ohr das der CCC an distributed stealth portscans
gearbeitet hat - Weiss jemand da URLs oder Software ? Ich denke ich
bin bei denen in der Datenbank gelandet :)
Jan 20 15:41:24 source ippl: port 41001 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:26 source ippl: port 41002 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:28 source ippl: port 41005 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:29 source ippl: port 41007 connection attempt from johndavies.demon.co.uk [158.152.204.72]
Jan 20 15:41:29 source ippl: port 41008 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:30 source ippl: port 41009 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:31 source ippl: port 41011 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:41:32 source ippl: port 41012 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:42 source ippl: port 41014 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:41:44 source ippl: port 41015 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:47 source ippl: port 41016 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:52 source ippl: port 41017 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:41:57 source ippl: port 41021 connection attempt from p3EE34A5D.dip.t-dialin.net [62.227.74.93]
Jan 20 15:42:01 source ippl: port 41023 connection attempt from p3EE34A5D.dip.t-dialin.net [62.227.74.93]
Jan 20 15:42:07 source ippl: port 41024 connection attempt from pD9EB40A9.dip0.t-ipconnect.de [217.235.64.169]
Jan 20 15:42:09 source ippl: port 41026 connection attempt from alf.pmnet.uni-oldenburg.de [134.106.120.73]
Jan 20 15:42:38 source ippl: port 41029 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:42:46 source ippl: port 41030 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:42:50 source ippl: port 41031 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:42:53 source ippl: port 41032 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:06 source ippl: port 41033 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:12 source ippl: port 41034 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:17 source ippl: port 41035 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:18 source ippl: port 41036 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:19 source ippl: port 41037 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:20 source ippl: port 41038 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:21 source ippl: port 41039 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:23 source ippl: port 41040 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:26 source ippl: port 41041 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:36 source ippl: port 41043 connection attempt from ppp064.urz.uni-heidelberg.de [129.206.202.104]
Jan 20 15:43:44 source ippl: port 41046 connection attempt from ppp13.hdh.hz-online.de [62.132.109.79]
Jan 20 15:43:47 source ippl: port 41047 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:43:53 source ippl: port 41048 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:44:13 source ippl: port 41049 connection attempt from ppp13.hdh.hz-online.de [62.132.109.79]
Jan 20 15:44:20 source ippl: port 41052 connection attempt from boercke.xs4all.nl [213.84.29.244]
Jan 20 15:44:29 source ippl: port 41054 connection attempt from boercke.xs4all.nl [213.84.29.244]
Jan 20 15:45:00 source ippl: port 41055 connection attempt from p3EE3A336.dip.t-dialin.net [62.227.163.54]
Jan 20 15:45:10 source ippl: port 41056 connection attempt from ppp064.urz.uni-heidelberg.de [129.206.202.104]
Jan 20 15:45:43 source ippl: port 41059 connection attempt from p3EE3A336.dip.t-dialin.net [62.227.163.54]
Jan 20 15:45:50 source ippl: port 41060 connection attempt from p3EE3A336.dip.t-dialin.net [62.227.163.54]
Jan 20 15:46:08 source ippl: port 41062 connection attempt from ppp064.urz.uni-heidelberg.de [129.206.202.104]
Jan 20 15:46:14 source ippl: port 41063 connection attempt from p3EE3A336.dip.t-dialin.net [62.227.163.54]
Jan 20 15:46:15 source ippl: port 41064 connection attempt from gw.grosche.de [212.23.137.251]
Jan 20 15:46:15 source ippl: port 41065 connection attempt from gw.grosche.de [212.23.137.251]
Jan 20 15:46:15 source ippl: port 41066 connection attempt from gw.grosche.de [212.23.137.251]
Jan 20 15:46:15 source ippl: port 41067 connection attempt from gw.grosche.de [212.23.137.251]
Jan 20 15:46:15 source ippl: port 41068 connection attempt from gw.grosche.de [212.23.137.251]
Jan 20 15:46:42 source ippl: port 41071 connection attempt from pD952F1EE.dip.t-dialin.net [217.82.241.238]
Jan 20 15:46:48 source ippl: port 41074 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:46:53 source ippl: port 41075 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:46:54 source ippl: port 41076 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:46:55 source ippl: port 41077 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:46:56 source ippl: port 41078 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:46:59 source ippl: port 41078 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:47:00 source ippl: port 41079 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:47:46 source ippl: port 41080 connection attempt from ppp13.hdh.hz-online.de [62.132.109.79]
Jan 20 15:47:51 source ippl: port 41082 connection attempt from pD9E6A1C1.dip0.t-ipconnect.de [217.230.161.193]
Jan 20 15:47:58 source ippl: port 41083 connection attempt from pD9E6A1C1.dip0.t-ipconnect.de [217.230.161.193]
Jan 20 15:48:42 source ippl: port 41085 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:48:49 source ippl: port 41086 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:48:52 source ippl: port 41087 connection attempt from ppp13.hdh.hz-online.de [62.132.109.79]
Jan 20 15:49:02 source ippl: port 41088 connection attempt from pD9578346.dip.t-dialin.net [217.87.131.70]
Jan 20 15:49:12 source ippl: port 41093 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:13 source ippl: port 41094 connection attempt from pD950A405.dip.t-dialin.net [217.80.164.5]
Jan 20 15:49:31 source ippl: port 41096 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:32 source ippl: port 41097 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:33 source ippl: port 41098 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:34 source ippl: port 41099 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:35 source ippl: port 41100 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:36 source ippl: port 41101 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:42 source ippl: port 41104 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:42 source ippl: port 41105 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:44 source ippl: port 41106 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:44 source ippl: port 41107 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:49:44 source ippl: port 41108 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:45 source ippl: port 41109 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:46 source ippl: port 41110 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:46 source ippl: port 41114 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:46 source ippl: port 41115 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:49:47 source ippl: port 41116 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:47 source ippl: port 41117 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:47 source ippl: port 41118 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:47 source ippl: port 41124 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:47 source ippl: port 41125 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:47 source ippl: port 41123 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:47 source ippl: port 41127 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:48 source ippl: port 41126 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:48 source ippl: port 41128 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:49:48 source ippl: port 41134 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:48 source ippl: port 41135 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:48 source ippl: port 41137 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:48 source ippl: port 41138 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:48 source ippl: port 41139 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:49 source ippl: port 41143 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:49 source ippl: port 41144 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:50 source ippl: port 41145 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:50 source ippl: port 41146 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:50 source ippl: port 41147 connection attempt from pD95093B9.dip.t-dialin.net [217.80.147.185]
Jan 20 15:49:51 source ippl: port 41153 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:51 source ippl: port 41154 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:51 source ippl: port 41155 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:51 source ippl: port 41156 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:51 source ippl: port 41158 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:51 source ippl: port 41159 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:51 source ippl: port 41157 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:52 source ippl: port 41165 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
Jan 20 15:49:52 source ippl: port 41166 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:52 source ippl: port 41167 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:52 source ippl: port 41168 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:52 source ippl: port 41169 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:52 source ippl: port 41170 connection attempt from proxy1.rz.uni-karlsruhe.de [129.13.64.201]
Jan 20 15:49:53 source ippl: port 41171 connection attempt from pD9E1CFB3.dip.t-dialin.net [217.225.207.179]
--
Florian Lohoff flo at rfc822.org +49-5201-669912
Nine nineth on september the 9th Welcome to the new billenium
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
URL: <http://lug-owl.de/pipermail/linux/attachments/20020120/4b20bfbf/attachment.sig>
More information about the Linux
mailing list