■あまてらす
----------------------------
携帯電話を新しくしました。なかなかおしゃれな携帯です。
お気に入りは、「iチャネル」です。ニュース、スポーツ＆芸能情報などの最新コンテンツが月額157.5円（税込）で利用可能です。最新ニュースが新聞を買わなくても読めるので通勤時間を有効に活用できますよ♪
http://www.nttdocomo.co.jp/service/imode/ichannel/index.html
■不正なアクセス(日本を送信元とした攻撃)
----------------------------
自分の管理するグローバルIPアドレスが以下のリストに含まれている場合は、ウィルスまたはボットワームに感染している恐れが高いです。至急ウィルススキャンを実行される事を推奨します。
61.44.110.110 110.110.44.61.fbb.aol.co.jp
61.89.217.251 catv61-89-217-251.sensyu.ne.jp
61.114.196.156 h196156.ppp.asahi-net.or.jp
61.125.36.162 z162.61-125-36.ppp.wakwak.ne.jp
61.125.225.224 i225224.ppp.asahi-net.or.jp
61.195.7.249 PPPa2249.tokyo-ip.dti.ne.jp
61.202.4.81 N004081.ppp.dion.ne.jp
61.203.161.35 35.161.203.61.ap.yournet.ne.jp
61.205.163.121 zaq3dcda379.zaq.ne.jp
61.207.206.85 p4085-ipad01sasajima.aichi.ocn.ne.jp
61.209.66.136 CBCnni-03S1p136.ppp12.odn.ad.jp
61.209.164.170 OFSfa-02p5-170.ppp11.odn.ad.jp
61.210.14.11 ntoska127011.oska.nt.adsl.ppp.infoweb.ne.jp
61.211.140.111 a140111.usr.starcat.ne.jp
61.213.71.15 j071015.ppp.asahi-net.or.jp
61.213.71.202 j071202.ppp.asahi-net.or.jp
61.213.73.8 j073008.ppp.asahi-net.or.jp
61.213.75.234 j075234.ppp.asahi-net.or.jp
61.213.88.201 j088201.ppp.asahi-net.or.jp
61.213.93.219 j093219.ppp.asahi-net.or.jp
61.213.108.166 j108166.ppp.asahi-net.or.jp
61.213.109.176 j109176.ppp.asahi-net.or.jp
61.213.110.141 j110141.ppp.asahi-net.or.jp
61.213.117.211 j117211.ppp.asahi-net.or.jp
61.213.118.167 j118167.ppp.asahi-net.or.jp
61.213.119.20 j119020.ppp.asahi-net.or.jp
61.213.119.128 j119128.ppp.asahi-net.or.jp
61.214.98.112 p4112-ipad02niho.hiroshima.ocn.ne.jp
203.140.170.106 106170.140203.hyogo.h555.net
219.17.216.4 softbank219017216004.bbtec.net
220.221.164.109 i220-221-164-109.s02.a019.ap.plala.or.jp
- Honeynet: 192.168.37.0/24
- Starting Date: 20051226 (inclusive)
- Ending Date: 20051227 (exclusive)
- Number of days: 1
- Output file: /tmp/.sum.mSRK3664
Total pcap records processed: 3,344
Total snort records processed: 116
========================================
Summary
=======
Remote IP Count: 194
Ports Scanned: 42
Connection Packets Packets Bytes Bytes
Type Count In Out In Out
-------- --------- --------- --------- --------- ---------
Inbound 1309 8465 6887 1289445 570654
Outbound 27 169 169 66868 66868
Total Snort SIDs: 11
Total Snort Alerts: 116
========================================
Top 10 Snort Alerts
===================
Count SID Alert Description
----- ------ ---------------------------------
52 402 ICMP Destination Unreachable Port Unreachable
20 1390 SHELLCODE x86 inc ebx NOOP
12 2 (spp_stream4) possible EVASIVE RST detection
6 2050 MS-SQL version overflow attempt
6 2004 MS-SQL Worm propagation attempt OUTBOUND
6 2003 MS-SQL Worm propagation attempt
4 2466 NETBIOS SMB-DS IPC$ unicode share access
4 648 SHELLCODE x86 NOOP
2 2351 NETBIOS DCERPC ISystemActivator path overflow attempt little endian unicode
2 2404 NETBIOS SMB-DS Session Setup AndX request unicode username overflow attempt
2 1042 WEB-IIS view source via translate header
========================================
All Snort Alerts
================
Count SID Alert Description
----- ------ ---------------------------------
12 2 (spp_stream4) possible EVASIVE RST detection
52 402 ICMP Destination Unreachable Port Unreachable
4 648 SHELLCODE x86 NOOP
2 1042 WEB-IIS view source via translate header
20 1390 SHELLCODE x86 inc ebx NOOP
6 2003 MS-SQL Worm propagation attempt
6 2004 MS-SQL Worm propagation attempt OUTBOUND
6 2050 MS-SQL version overflow attempt
2 2351 NETBIOS DCERPC ISystemActivator path overflow attempt little endian unicode
2 2404 NETBIOS SMB-DS Session Setup AndX request unicode username overflow attempt
4 2466 NETBIOS SMB-DS IPC$ unicode share access
========================================
Top 10 Scanned Ports:
=====================
Port Packets Bytes Conns
--------- --------- --------- ---------
tcp/139 7379 721723 377
tcp/445 4612 523224 274
udp/1026 141 63681 137
udp/1027 141 63985 136
tcp/6881 406 0 106
tcp/135 833 54362 79
tcp/80 554 108604 60
tcp/4899 102 0 20
tcp/1025 195 20924 16
tcp/1433 429 25629 15
========================================
All Scanned Ports:
==================
Port Packets Bytes Conns
--------- --------- --------- ---------
tcp/21 8 58 1
tcp/22 6 0 3
tcp/25 14 352 1
tcp/80 554 108604 60
tcp/113 1 0 1
tcp/135 833 54362 79
tcp/139 7379 721723 377
tcp/143 6 0 1
tcp/445 4612 523224 274
tcp/1025 195 20924 16
tcp/1041 1 0 1
tcp/1071 307 252372 1
tcp/1076 1 0 1
tcp/1080 4 0 1
tcp/1433 429 25629 15
tcp/1613 1 0 1
tcp/1813 2 0 1
tcp/2100 8 0 2
tcp/3306 12 0 2
tcp/3389 8 0 2
tcp/4444 30 0 5
tcp/4899 102 0 20
tcp/5000 36 0 6
tcp/5114 6 0 1
tcp/5651 6 0 1
tcp/6881 406 0 106
tcp/6999 6 0 1
tcp/8080 12 0 2
udp/2 3 1053 3
udp/137 30 5265 9
udp/500 5 920 1
udp/1026 141 63681 137
udp/1027 141 63985 136
udp/1028 4 1964 4
udp/1029 5 2310 5
udp/1030 3 1048 3
udp/1031 5 2870 5
udp/1032 2 1252 2
udp/1033 1 906 1
udp/1434 15 5640 15
udp/4081 5 1770 5
udp/6999 7 187 2