Port Scan
Hornet
hornetmadness at gmail.com
Thu Jul 28 13:06:02 GMT 2005
On 7/28/05, Cody Holland <cholland at redmoonbroadband.com> wrote:
> Does anyone know what could be causing this? Some of these are probes
> from external IP's, but a lot of these are the servers probing itself.
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65215 flags:0x02
>
> > Connection attempt to UDP 206.123.80.170:1026 from
> > 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:1027
> > from 218.66.104.140:38828 Connection attempt to UDP 206.123.80.170:137
>
> > from 61.231.179.224:1026 Connection attempt to UDP 206.123.80.170:137
> > from 201.26.75.232:1031 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:55955 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:63129 flags:0x02 Connection attempt to UDP 127.0.0.1:123
> > from 127.0.0.1:56993 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:56993 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64144 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:51848 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55282 flags:0x02 Connection attempt to UDP 127.0.0.1:123
> > from 127.0.0.1:53426 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:53426 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:64592 flags:0x02 Connection attempt to UDP
> > 206.123.80.170:1026 from 221.10.201.190:44654 Connection attempt to
> > TCP 206.123.80.170:135 from 206.123.215.83:28963 flags:0x02 Connection
>
> > attempt to TCP 206.123.80.170:135 from 206.123.215.83:28963 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58536 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:57678 flags:0x02
>
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55382
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55382
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51988 flags:0x02
>
> > Connection attempt to UDP 206.123.80.170:1026 from 220.175.8.154:38035
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:55080 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:57468 flags:0x02
>
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:62552
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:62552
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:49701 flags:0x02
>
> > Connection attempt to UDP 206.123.80.170:1026 from
> > 221.10.201.190:45214 Connection attempt to UDP 206.123.80.170:1027
> > from 221.10.201.190:45214 Connection attempt to UDP 206.123.80.170:137
>
> > from 162.84.57.153:50821 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:51070 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57270 flags:0x02 Connection attempt to UDP 127.0.0.1:123
> > from 127.0.0.1:49270 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:49270 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:57134 flags:0x02 Connection attempt to UDP
> > 206.123.80.170:1434 from 221.202.129.164:1196 Connection attempt to
> > UDP 206.123.80.170:1027 from 216.67.231.137:33281 Connection attempt
> > to UDP 206.123.80.170:137 from 206.113.176.131:1038 Connection attempt
>
> > to UDP 206.123.80.170:137 from 200.233.227.54:1027 Connection attempt
> > to TCP 127.0.0.1:80 from 127.0.0.1:52965 flags:0x02 Connection attempt
>
> > to TCP 127.0.0.1:80 from 127.0.0.1:64315 flags:0x02 Connection attempt
>
> > to UDP 127.0.0.1:123 from 127.0.0.1:55479 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:55479 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:59405 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:137 from 148.221.231.83:1029 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:61306 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53905 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:53157 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:53157 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:1434 from 68.254.205.210:1293 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:53457 flags:0x02 Connection attempt to TCP
>
> > 206.123.80.170:4899 from 211.47.128.143:3494 flags:0x02 Connection
> > attempt to UDP 206.123.80.170:137 from 67.78.166.190:1096 Connection
> > attempt to UDP 206.123.80.170:1027 from 218.66.104.140:37456
> > Connection attempt to UDP 206.123.80.170:1026 from
> > 218.66.104.140:37456 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:65387 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56212 flags:0x02 Connection attempt to UDP 127.0.0.1:123
> > from 127.0.0.1:51896 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:51896 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:50588 flags:0x02 Connection attempt to UDP
> > 206.123.80.170:1027 from 216.67.231.137:33313 Connection attempt to
> > TCP 206.123.80.170:1433 from 210.82.89.208:2393 flags:0x02 Connection
> > attempt to TCP 206.123.80.170:1433 from 210.82.89.208:2393 flags:0x02
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51422 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:51555 flags:0x02
>
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:54217
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:54217
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:54552 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:57131 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:65235 flags:0x02
>
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55115
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:55115
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:62085 flags:0x02
>
> > Connection attempt to UDP 206.123.80.170:1027 from 70.85.176.210:32939
>
> > Connection attempt to UDP 206.123.80.170:1026 from 70.85.176.210:32939
>
> > Connection attempt to UDP 206.123.80.170:1027 from
> > 221.10.201.190:48062 Connection attempt to UDP 206.123.80.170:1026
> > from 221.10.201.190:48062 Connection attempt to TCP 206.123.80.170:139
>
> > from 66.202.43.195:23691 flags:0x02 Connection attempt to TCP
> > 206.123.80.170:139 from 66.202.43.195:23691 flags:0x02 Connection
> > attempt to TCP 206.123.80.170:139 from 66.202.43.195:23691 flags:0x02
> > Connection attempt to TCP 206.123.80.170:445 from 66.202.43.195:25018
> > flags:0x02 Connection attempt to TCP 206.123.80.170:445 from
> > 66.202.43.195:25018 flags:0x02 Connection attempt to TCP
> > 206.123.80.170:445 from 66.202.43.195:25018 flags:0x02 Connection
> > attempt to TCP 127.0.0.1:80 from 127.0.0.1:64696 flags:0x02 Connection
>
> > attempt to TCP 127.0.0.1:80 from 127.0.0.1:51971 flags:0x02 Connection
>
> > attempt to UDP 127.0.0.1:123 from 127.0.0.1:64470 Connection attempt
> > to UDP 127.0.0.1:123 from 127.0.0.1:64470 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55753 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:1027 from 216.67.231.137:33346 Connection attempt to
> > TCP 127.0.0.1:80 from 127.0.0.1:65144 flags:0x02 Connection attempt to
>
> > TCP 127.0.0.1:80 from 127.0.0.1:55984 flags:0x02 Connection attempt to
>
> > UDP 127.0.0.1:123 from 127.0.0.1:49967 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:49967 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:60508 flags:0x02 Connection attempt to TCP
>
> > 206.123.80.170:25 from 61.31.134.117:4998 flags:0x02 Connection
> > attempt to TCP 206.123.80.170:25 from 61.31.134.117:4998 flags:0x02
> > Connection attempt to TCP 206.123.80.170:25 from 61.31.134.117:4998
> > flags:0x02 Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:50700
>
> > flags:0x02 Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:59252
>
> > flags:0x02 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:61448 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:61448 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:55124 flags:0x02 Connection attempt to UDP
> > 206.123.80.170:1434 from 60.18.168.25:1030 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:58475 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58505 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:58678 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:58678 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51200 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:137 from 218.172.106.84:1027 Connection attempt to UDP
> > 192.168.253.32:56341 from 192.168.253.2:161 Connection attempt to UDP
> > 206.123.80.170:1434 from 61.175.207.38:3170 Connection attempt to UDP
> > 206.123.80.170:1434 from 219.159.73.220:1058 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50813 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62543 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:61879 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:61879 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:58516 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:1026 from 218.66.104.140:34830 Connection attempt to
> > UDP 206.123.80.170:1027 from 218.66.104.140:34830 Connection attempt
> > to TCP 127.0.0.1:80 from 127.0.0.1:62416 flags:0x02 Connection attempt
>
> > to TCP 127.0.0.1:80 from 127.0.0.1:50300 flags:0x02 Connection attempt
>
> > to UDP 127.0.0.1:123 from 127.0.0.1:58013 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:58013 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62138 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:1026 from 221.10.201.190:51892 Connection attempt to
> > UDP 206.123.80.170:1027 from 221.10.201.190:51892 Connection attempt
> > to UDP 206.123.80.170:137 from 211.22.169.123:1029 Connection attempt
> > to UDP 206.123.80.170:1434 from 60.179.148.160:1937 Connection attempt
>
> > to TCP 127.0.0.1:80 from 127.0.0.1:59963 flags:0x02 Connection attempt
>
> > to TCP 127.0.0.1:80 from 127.0.0.1:52306 flags:0x02 Connection attempt
>
> > to UDP 127.0.0.1:123 from 127.0.0.1:63406 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:63406 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64991 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:55443 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50721 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:54942 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:54942 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62712 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49917 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63752 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:63807 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:63807 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:54096 flags:0x02 Connection attempt to TCP
>
> > 206.123.80.170:139 from 206.228.205.129:3165 flags:0x02 Connection
> > attempt to TCP 206.123.80.170:139 from 206.228.205.129:3165 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:55585 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60823 flags:0x02
>
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:64022
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:64022
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:58708 flags:0x02
>
> > Connection attempt to UDP 206.123.80.170:137 from 61.37.166.72:1477
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:52235 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:59234 flags:0x02
>
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:60251
> > Connection attempt to UDP 127.0.0.1:123 from 127.0.0.1:60251
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to TCP 127.0.0.1:80 from 127.0.0.1:60291 flags:0x02
>
> > Connection attempt to UDP 206.123.80.170:1026 from
> > 216.67.231.137:33473 Connection attempt to UDP 206.123.80.170:137 from
>
> > 200.68.226.150:1026 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:52880 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:54657 flags:0x02 Connection attempt to UDP 127.0.0.1:123
> > from 127.0.0.1:61743 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:61743 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:62078 flags:0x02 Connection attempt to UDP
> > 206.123.80.170:137 from 219.160.225.172:61553 Connection attempt to
> > TCP 206.123.80.170:1080 from 202.73.247.160:4187 flags:0x02 Connection
>
> > attempt to UDP 206.123.80.170:1027 from 218.66.104.140:35566
> > Connection attempt to UDP 206.123.80.170:1434 from 219.136.44.73:3034
> > Connection attempt to TCP 206.123.80.170:135 from 81.182.54.227:4553
> > flags:0x02 Connection attempt to UDP 206.123.80.170:1434 from
> > 202.101.70.43:3013 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:57530 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:59490 flags:0x02 Connection attempt to UDP 127.0.0.1:123
> > from 127.0.0.1:51191 Connection attempt to UDP 127.0.0.1:123 from
> > 127.0.0.1:51191 Connection attempt to TCP 127.0.0.1:80 from
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to TCP 127.0.0.1:80 from
>
> > 127.0.0.1:56484 flags:0x02 Connection attempt to UDP
> > 206.123.80.170:1434 from 61.185.24.67:1101 Connection attempt to UDP
> > 206.123.80.170:1434 from 202.96.89.45:1416 Connection attempt to TCP
> > 206.123.80.170:15118 from 217.116.136.42:3908 flags:0x02 Connection
> > attempt to TCP 206.123.80.170:15118 from 217.116.136.42:3908
> > flags:0x02 Connection attempt to TCP 206.123.80.170:445 from
> > 217.116.136.42:4423 flags:0x02 Connection attempt to TCP
> > 206.123.80.170:445 from 217.116.136.42:4423 flags:0x02 Connection
> > attempt to UDP 206.123.80.170:1434 from 202.97.174.226:1038 Connection
>
> > attempt to TCP 127.0.0.1:80 from 127.0.0.1:60151 flags:0x02 Connection
>
> > attempt to TCP 127.0.0.1:80 from 127.0.0.1:55783 flags:0x02 Connection
>
> > attempt to UDP 127.0.0.1:123 from 127.0.0.1:53008 Connection attempt
> > to UDP 127.0.0.1:123 from 127.0.0.1:53008 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50111 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:137 from 83.235.253.167:10018 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64106 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:62577 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:60805 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:60805 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:63600 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:137 from 67.68.138.222:61631 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:58875 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:51079 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:59719 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:59719 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:50912 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:137 from 222.213.93.106:1034 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:49637 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:64161 flags:0x02 Connection attempt to UDP
>
> > 127.0.0.1:123 from 127.0.0.1:62528 Connection attempt to UDP
> > 127.0.0.1:123 from 127.0.0.1:62528 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:61587 flags:0x02 Connection attempt to TCP
>
> > 206.123.80.170:1433 from 84.131.177.47:21938 flags:0x02 Connection
> > attempt to UDP 192.168.253.32:64807 from 192.168.253.2:161 Connection
> > attempt to UDP 206.123.80.170:1027 from 220.175.8.154:33972 Connection
>
> > attempt to TCP 127.0.0.1:80 from 127.0.0.1:63194 flags:0x02 Connection
>
> > attempt to TCP 127.0.0.1:80 from 127.0.0.1:53348 flags:0x02 Connection
>
> > attempt to UDP 127.0.0.1:123 from 127.0.0.1:50654 Connection attempt
> > to UDP 127.0.0.1:123 from 127.0.0.1:50654 Connection attempt to TCP
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to TCP
>
> > 127.0.0.1:80 from 127.0.0.1:49386 flags:0x02 Connection attempt to UDP
>
> > 206.123.80.170:137 from 82.104.59.45:1027
>
> Cody Holland
> Network Engineer
> Redmoon Broadband, Inc.
> 972-599-3900x26
> cholland at redmoonbroadband.com
> ******************************************
> The information contained in, or attached to, this e-mail, may contain
> confidential information and is intended solely for the use of the
> individual or entity to whom they are addressed and may be subject to
> legal privilege. If you have received this e-mail in error you should
> notify the sender immediately by reply e-mail, delete the message from
> your system and notify your system manager. Please do not copy it for
> any purpose, or disclose its contents to any other person. The views or
> opinions presented in this e-mail are solely those of the author and do
> not necessarily represent those of the company. The recipient should
> check this e-mail and any attachments for the presence of viruses. The
> company accepts no liability for any damage caused, directly or
> indirectly, by any virus transmitted in this email.
> ******************************************
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>
At first glance, I would think that the 127.0.0.1:80 might be a
service monitoring tool that is running. It didn't see any time
stamps, so I'm not sure of the frequency of probes. It could be a user
up to no good or your box has been zombiefied. The external IP
attempts, I would not be to worried about as it is only a few attempts
and should be expected on a public box. Look at your /var/log/messages
for cron changes/additions, sudo or root logins, and any weirdness.
Check /var/log/auth.log for users that have logged in around the time
these started to happen. Also don't forget to check your archive logs
if you run logrotation. Also a rootcheck app might be a good idea. Is
your box up2date on patches?
-Erik-
More information about the freebsd-questions
mailing list