From owner-freebsd-questions@FreeBSD.ORG Thu Jul 28 13:06:02 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8589316A41F for ; Thu, 28 Jul 2005 13:06:02 +0000 (GMT) (envelope-from hornetmadness@gmail.com) Received: from rproxy.gmail.com (rproxy.gmail.com [64.233.170.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 74E5543D49 for ; Thu, 28 Jul 2005 13:05:57 +0000 (GMT) (envelope-from hornetmadness@gmail.com) Received: by rproxy.gmail.com with SMTP id 34so104428rns for ; Thu, 28 Jul 2005 06:05:56 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nz8daGtJbWtEvjB3g7qvoIHLK9tW3jRR0pbZAwVEwWu+K6j3kB8tCzMLh9aBQ48CBMveXj63fIC1JG8EoGOLE8TxrVHBh6tPKmir4p+PEBca7fQ0GfW+ksCVhNF8CvyqPkaK0LE+Dh0MSJi15LDwHJFrJ2PSOsTmoN+FFRjAiog= Received: by 10.38.8.47 with SMTP id 47mr62133rnh; Thu, 28 Jul 2005 06:05:56 -0700 (PDT) Received: by 10.38.8.23 with HTTP; Thu, 28 Jul 2005 06:05:31 -0700 (PDT) Message-ID: Date: Thu, 28 Jul 2005 09:05:31 -0400 From: Hornet To: Cody Holland In-Reply-To: <4B3EE484EEA4F344BBB62F831648998637C8BB@corpsrv.RedMoon.local> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <4B3EE484EEA4F344BBB62F831648998637C8BB@corpsrv.RedMoon.local> Cc: freebsd-questions@freebsd.org Subject: Re: Port Scan X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Hornet List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Jul 2005 13:06:02 -0000 On 7/28/05, Cody Holland wrote: > Does anyone know what could be causing this? Some of these are probes > from external IP's, but a lot of these are the servers probing itself. >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02 >=20 > > Connection attempt to UDP 206.123.80.170:1026 from > > 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:1027 > > from 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:137 >=20 > > from 61.231.179.224:1026 Connection attempt to UDP 206.123.80.170:137 > > from 201.26.75.232:1031 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:55955 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:63129 flags:0x02 Connection attempt to UDP 127.0.0.1:123 > > from 127.0.0.1:56993 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:56993 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:51848 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55282 flags:0x02 Connection attempt to UDP 127.0.0.1:123 > > from 127.0.0.1:53426 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:53426 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:64592 flags:0x02 Connection attempt to UDP > > 206.123.80.170:1026 from 221.10.201.190:44654 Connection attempt to > > TCP 206.123.80.170:135 from 206.123.215.83:28963 flags:0x02 Connection >=20 > > attempt to TCP 206.123.80.170:135 from 206.123.215.83:28963 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58536 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:57678 flags:0x02 >=20 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55382 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55382 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02 >=20 > > Connection attempt to UDP 206.123.80.170:1026 from 220.175.8.154:38035 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:55080 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:57468 flags:0x02 >=20 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:62552 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:62552 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02 >=20 > > Connection attempt to UDP 206.123.80.170:1026 from > > 221.10.201.190:45214 Connection attempt to UDP 206.123.80.170:1027 > > from 221.10.201.190:45214 Connection attempt to UDP 206.123.80.170:137 >=20 > > from 162.84.57.153:50821 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:51070 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57270 flags:0x02 Connection attempt to UDP 127.0.0.1:123 > > from 127.0.0.1:49270 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:49270 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:57134 flags:0x02 Connection attempt to UDP > > 206.123.80.170:1434 from 221.202.129.164:1196 Connection attempt to > > UDP 206.123.80.170:1027 from 216.67.231.137:33281 Connection attempt > > to UDP 206.123.80.170:137 from 206.113.176.131:1038 Connection attempt >=20 > > to UDP 206.123.80.170:137 from 200.233.227.54:1027 Connection attempt > > to TCP 127.0.0.1:80 from 127.0.0.1:52965 flags:0x02 Connection attempt >=20 > > to TCP 127.0.0.1:80 from 127.0.0.1:64315 flags:0x02 Connection attempt >=20 > > to UDP 127.0.0.1:123 from 127.0.0.1:55479 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:55479 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:137 from 148.221.231.83:1029 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:61306 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53905 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:53157 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:53157 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:1434 from 68.254.205.210:1293 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP >=20 > > 206.123.80.170:4899 from 211.47.128.143:3494 flags:0x02 Connection > > attempt to UDP 206.123.80.170:137 from 67.78.166.190:1096 Connection > > attempt to UDP 206.123.80.170:1027 from 218.66.104.140:37456 > > Connection attempt to UDP 206.123.80.170:1026 from > > 218.66.104.140:37456 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:65387 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56212 flags:0x02 Connection attempt to UDP 127.0.0.1:123 > > from 127.0.0.1:51896 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:51896 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:50588 flags:0x02 Connection attempt to UDP > > 206.123.80.170:1027 from 216.67.231.137:33313 Connection attempt to > > TCP 206.123.80.170:1433 from 210.82.89.208:2393 flags:0x02 Connection > > attempt to TCP 206.123.80.170:1433 from 210.82.89.208:2393 flags:0x02 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51422 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51555 flags:0x02 >=20 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:54217 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:54217 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:57131 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65235 flags:0x02 >=20 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55115 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55115 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02 >=20 > > Connection attempt to UDP 206.123.80.170:1027 from 70.85.176.210:32939 >=20 > > Connection attempt to UDP 206.123.80.170:1026 from 70.85.176.210:32939 >=20 > > Connection attempt to UDP 206.123.80.170:1027 from > > 221.10.201.190:48062 Connection attempt to UDP 206.123.80.170:1026 > > from 221.10.201.190:48062 Connection attempt to TCP 206.123.80.170:139 >=20 > > from 66.202.43.195:23691 flags:0x02 Connection attempt to TCP > > 206.123.80.170:139 from 66.202.43.195:23691 flags:0x02 Connection > > attempt to TCP 206.123.80.170:139 from 66.202.43.195:23691 flags:0x02 > > Connection attempt to TCP 206.123.80.170:445 from 66.202.43.195:25018 > > flags:0x02 Connection attempt to TCP 206.123.80.170:445 from > > 66.202.43.195:25018 flags:0x02 Connection attempt to TCP > > 206.123.80.170:445 from 66.202.43.195:25018 flags:0x02 Connection > > attempt to TCP 127.0.0.1:80 from 127.0.0.1:64696 flags:0x02 Connection >=20 > > attempt to TCP 127.0.0.1:80 from 127.0.0.1:51971 flags:0x02 Connection >=20 > > attempt to UDP 127.0.0.1:123 from 127.0.0.1:64470 Connection attempt > > to UDP 127.0.0.1:123 from 127.0.0.1:64470 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:1027 from 216.67.231.137:33346 Connection attempt to > > TCP 127.0.0.1:80 from 127.0.0.1:65144 flags:0x02 Connection attempt to >=20 > > TCP 127.0.0.1:80 from 127.0.0.1:55984 flags:0x02 Connection attempt to >=20 > > UDP 127.0.0.1:123 from 127.0.0.1:49967 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:49967 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP >=20 > > 206.123.80.170:25 from 61.31.134.117:4998 flags:0x02 Connection > > attempt to TCP 206.123.80.170:25 from 61.31.134.117:4998 flags:0x02 > > Connection attempt to TCP 206.123.80.170:25 from 61.31.134.117:4998 > > flags:0x02 Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:50700 >=20 > > flags:0x02 Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:59252 >=20 > > flags:0x02 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:61448 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:61448 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:55124 flags:0x02 Connection attempt to UDP > > 206.123.80.170:1434 from 60.18.168.25:1030 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:58475 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58505 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:58678 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:58678 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:137 from 218.172.106.84:1027 Connection attempt to UDP > > 192.168.253.32:56341 from 192.168.253.2:161 Connection attempt to UDP > > 206.123.80.170:1434 from 61.175.207.38:3170 Connection attempt to UDP > > 206.123.80.170:1434 from 219.159.73.220:1058 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50813 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62543 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:61879 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:61879 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:1026 from 218.66.104.140:34830 Connection attempt to > > UDP 206.123.80.170:1027 from 218.66.104.140:34830 Connection attempt > > to TCP 127.0.0.1:80 from 127.0.0.1:62416 flags:0x02 Connection attempt >=20 > > to TCP 127.0.0.1:80 from 127.0.0.1:50300 flags:0x02 Connection attempt >=20 > > to UDP 127.0.0.1:123 from 127.0.0.1:58013 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:58013 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:1026 from 221.10.201.190:51892 Connection attempt to > > UDP 206.123.80.170:1027 from 221.10.201.190:51892 Connection attempt > > to UDP 206.123.80.170:137 from 211.22.169.123:1029 Connection attempt > > to UDP 206.123.80.170:1434 from 60.179.148.160:1937 Connection attempt >=20 > > to TCP 127.0.0.1:80 from 127.0.0.1:59963 flags:0x02 Connection attempt >=20 > > to TCP 127.0.0.1:80 from 127.0.0.1:52306 flags:0x02 Connection attempt >=20 > > to UDP 127.0.0.1:123 from 127.0.0.1:63406 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:63406 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:55443 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50721 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:54942 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:54942 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49917 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63752 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:63807 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:63807 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP >=20 > > 206.123.80.170:139 from 206.228.205.129:3165 flags:0x02 Connection > > attempt to TCP 206.123.80.170:139 from 206.228.205.129:3165 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:55585 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60823 flags:0x02 >=20 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:64022 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:64022 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02 >=20 > > Connection attempt to UDP 206.123.80.170:137 from 61.37.166.72:1477 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:52235 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:59234 flags:0x02 >=20 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:60251 > > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:60251 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02 >=20 > > Connection attempt to UDP 206.123.80.170:1026 from > > 216.67.231.137:33473 Connection attempt to UDP 206.123.80.170:137 from >=20 > > 200.68.226.150:1026 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:52880 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:54657 flags:0x02 Connection attempt to UDP 127.0.0.1:123 > > from 127.0.0.1:61743 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:61743 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:62078 flags:0x02 Connection attempt to UDP > > 206.123.80.170:137 from 219.160.225.172:61553 Connection attempt to > > TCP 206.123.80.170:1080 from 202.73.247.160:4187 flags:0x02 Connection >=20 > > attempt to UDP 206.123.80.170:1027 from 218.66.104.140:35566 > > Connection attempt to UDP 206.123.80.170:1434 from 219.136.44.73:3034 > > Connection attempt to TCP 206.123.80.170:135 from 81.182.54.227:4553 > > flags:0x02 Connection attempt to UDP 206.123.80.170:1434 from > > 202.101.70.43:3013 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:57530 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:59490 flags:0x02 Connection attempt to UDP 127.0.0.1:123 > > from 127.0.0.1:51191 Connection attempt to UDP 127.0.0.1:123 from > > 127.0.0.1:51191 Connection attempt to TCP 127.0.0.1:80 from > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from >=20 > > 127.0.0.1:56484 flags:0x02 Connection attempt to UDP > > 206.123.80.170:1434 from 61.185.24.67:1101 Connection attempt to UDP > > 206.123.80.170:1434 from 202.96.89.45:1416 Connection attempt to TCP > > 206.123.80.170:15118 from 217.116.136.42:3908 flags:0x02 Connection > > attempt to TCP 206.123.80.170:15118 from 217.116.136.42:3908 > > flags:0x02 Connection attempt to TCP 206.123.80.170:445 from > > 217.116.136.42:4423 flags:0x02 Connection attempt to TCP > > 206.123.80.170:445 from 217.116.136.42:4423 flags:0x02 Connection > > attempt to UDP 206.123.80.170:1434 from 202.97.174.226:1038 Connection >=20 > > attempt to TCP 127.0.0.1:80 from 127.0.0.1:60151 flags:0x02 Connection >=20 > > attempt to TCP 127.0.0.1:80 from 127.0.0.1:55783 flags:0x02 Connection >=20 > > attempt to UDP 127.0.0.1:123 from 127.0.0.1:53008 Connection attempt > > to UDP 127.0.0.1:123 from 127.0.0.1:53008 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:137 from 83.235.253.167:10018 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64106 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:62577 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:60805 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:60805 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:137 from 67.68.138.222:61631 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:58875 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:51079 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:59719 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:59719 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:137 from 222.213.93.106:1034 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:49637 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:64161 flags:0x02 Connection attempt to UDP >=20 > > 127.0.0.1:123 from 127.0.0.1:62528 Connection attempt to UDP > > 127.0.0.1:123 from 127.0.0.1:62528 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP >=20 > > 206.123.80.170:1433 from 84.131.177.47:21938 flags:0x02 Connection > > attempt to UDP 192.168.253.32:64807 from 192.168.253.2:161 Connection > > attempt to UDP 206.123.80.170:1027 from 220.175.8.154:33972 Connection >=20 > > attempt to TCP 127.0.0.1:80 from 127.0.0.1:63194 flags:0x02 Connection >=20 > > attempt to TCP 127.0.0.1:80 from 127.0.0.1:53348 flags:0x02 Connection >=20 > > attempt to UDP 127.0.0.1:123 from 127.0.0.1:50654 Connection attempt > > to UDP 127.0.0.1:123 from 127.0.0.1:50654 Connection attempt to TCP > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP >=20 > > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to UDP >=20 > > 206.123.80.170:137 from 82.104.59.45:1027 >=20 > Cody Holland > Network Engineer > Redmoon Broadband, Inc. > 972-599-3900x26 > cholland@redmoonbroadband.com > ****************************************** > The information contained in, or attached to, this e-mail, may contain > confidential information and is intended solely for the use of the > individual or entity to whom they are addressed and may be subject to > legal privilege. If you have received this e-mail in error you should > notify the sender immediately by reply e-mail, delete the message from > your system and notify your system manager. Please do not copy it for > any purpose, or disclose its contents to any other person. The views or > opinions presented in this e-mail are solely those of the author and do > not necessarily represent those of the company. The recipient should > check this e-mail and any attachments for the presence of viruses. The > company accepts no liability for any damage caused, directly or > indirectly, by any virus transmitted in this email. > ****************************************** > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" >=20 At first glance, I would think that the 127.0.0.1:80 might be a service monitoring tool that is running. It didn't see any time stamps, so I'm not sure of the frequency of probes. It could be a user up to no good or your box has been zombiefied. The external IP attempts, I would not be to worried about as it is only a few attempts and should be expected on a public box. Look at your /var/log/messages for cron changes/additions, sudo or root logins, and any weirdness. Check /var/log/auth.log for users that have logged in around the time these started to happen. Also don't forget to check your archive logs if you run logrotation. Also a rootcheck app might be a good idea. Is your box up2date on patches? -Erik-