PortPeeker Capture of mySQL Bot attack
mySQL Bot scans TCP Port 3306 looking for mySQL Database Servers with weak
passwords to exploit and install a bot on.
TCP Connection Request
---- 07/02/2005 19:41:12.357
218.144.20.68 : 3286 TCP Connected ID = 1
---- 07/02/2005 19:41:12.367
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
TCP Connection Request
---- 07/02/2005 19:41:12.847
218.144.20.68 : 3318 TCP Connected ID = 2
---- 07/02/2005 19:41:12.847
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 3318 TCP Data In Length 14 bytes
MD5 = 22782E643AD6746A62ADC798C2EAB1DC
---- 07/02/2005 19:41:13.128
0 0A 00 00 01 05 20 00 00 00 72 6F 6F 74 00 ..... ...root.
---- Echoed Data
218.144.20.68 : 3318 TCP Disconnected ID = 2
---- 07/02/2005 19:41:13.448
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:13.779
218.144.20.68 : 3429 TCP Connected ID = 2
---- 07/02/2005 19:41:13.789
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
TCP Connection Request
---- 07/02/2005 19:41:14.940
218.144.20.68 : 3532 TCP Connected ID = 3
---- 07/02/2005 19:41:14.950
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 3429 TCP Data In Length 22 bytes
MD5 = 1B2B82CB7C31A219504327CA7C738336
---- 07/02/2005 19:41:14.950
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 48 5F ..... ...root.H_
10 4D 48 5C 43 44 40 MH\CD@
---- Echoed Data
218.144.20.68 : 3532 TCP Data In Length 23 bytes
MD5 = 29F891F694BFDB3FDEEB93A3AB0FEA43
---- 07/02/2005 19:41:15.131
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 4D ..... ...mysql.M
10 50 43 46 4E 5C 59 50 PCFN\YP
---- Echoed Data
218.144.20.68 : 3429 TCP Disconnected ID = 2
---- 07/02/2005 19:41:15.151
Status Code: 10053 [10053] Software caused connection abort
218.144.20.68 : 3532 TCP Disconnected ID = 3
---- 07/02/2005 19:41:16.112
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:16.122
218.144.20.68 : 3653 TCP Connected ID = 2
---- 07/02/2005 19:41:16.122
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 3653 TCP Data In Length 14 bytes
MD5 = 22782E643AD6746A62ADC798C2EAB1DC
---- 07/02/2005 19:41:16.342
0 0A 00 00 01 05 20 00 00 00 72 6F 6F 74 00 ..... ...root.
---- Echoed Data
218.144.20.68 : 3653 TCP Disconnected ID = 2
---- 07/02/2005 19:41:16.583
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:16.613
218.144.20.68 : 3767 TCP Connected ID = 2
---- 07/02/2005 19:41:16.623
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 3767 TCP Data In Length 15 bytes
MD5 = EDC12F2F42DA744D00410B518CC81B9E
---- 07/02/2005 19:41:17.474
0 0B 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 ..... ...mysql.
---- Echoed Data
TCP Connection Request
---- 07/02/2005 19:41:17.634
218.144.20.68 : 3874 TCP Connected ID = 3
---- 07/02/2005 19:41:17.644
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 3767 TCP Disconnected ID = 2
---- 07/02/2005 19:41:17.684
Status Code: 10053 [10053] Software caused connection abort
218.144.20.68 : 3874 TCP Data In Length 22 bytes
MD5 = 5B892EACCDEF4E32C8526C0DB0352711
---- 07/02/2005 19:41:17.945
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 50 44 ..... ...root.PD
10 40 5C 52 5F 5F 57 @\R__W
---- Echoed Data
218.144.20.68 : 3874 TCP Disconnected ID = 3
---- 07/02/2005 19:41:18.125
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:18.686
218.144.20.68 : 3978 TCP Connected ID = 2
---- 07/02/2005 19:41:18.686
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 3978 TCP Data In Length 23 bytes
MD5 = C80405D1BBE351373D2C740A3D818E88
---- 07/02/2005 19:41:18.926
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 50 ..... ...mysql.P
10 44 40 5C 52 5F 5F 57 D@\R__W
---- Echoed Data
218.144.20.68 : 3978 TCP Disconnected ID = 2
---- 07/02/2005 19:41:19.136
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:19.597
218.144.20.68 : 4074 TCP Connected ID = 2
---- 07/02/2005 19:41:19.597
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 4074 TCP Data In Length 22 bytes
MD5 = DC973BB649D40ACA870FCC70B6BDAFC2
---- 07/02/2005 19:41:19.827
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 4E 51 ..... ...root.NQ
10 5F 53 56 4C 46 41 _SVLFA
---- Echoed Data
218.144.20.68 : 4074 TCP Disconnected ID = 2
---- 07/02/2005 19:41:20.118
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:21.169
218.144.20.68 : 4165 TCP Connected ID = 2
---- 07/02/2005 19:41:21.169
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 4165 TCP Data In Length 23 bytes
MD5 = 9BCFC4992933179A33EF22C344907D75
---- 07/02/2005 19:41:21.450
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 4E ..... ...mysql.N
10 51 5F 53 56 4C 46 41 Q_SVLFA
---- Echoed Data
TCP Connection Request
---- 07/02/2005 19:41:21.650
218.144.20.68 : 4382 TCP Connected ID = 3
---- 07/02/2005 19:41:21.660
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 4165 TCP Disconnected ID = 2
---- 07/02/2005 19:41:21.660
Status Code: 10053 [10053] Software caused connection abort
218.144.20.68 : 4382 TCP Data In Length 22 bytes
MD5 = 49D8F2BA12029B9A7BE4BE3B4EC32E58
---- 07/02/2005 19:41:22.151
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 4D 46 ..... ...root.MF
10 4A 59 51 4C 4C 59 JYQLLY
---- Echoed Data
218.144.20.68 : 4382 TCP Disconnected ID = 3
---- 07/02/2005 19:41:22.451
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:22.691
218.144.20.68 : 4501 TCP Connected ID = 2
---- 07/02/2005 19:41:22.701
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 4501 TCP Data In Length 23 bytes
MD5 = 422EB43281AAE33092FE1EDF040CD558
---- 07/02/2005 19:41:22.912
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 4D ..... ...mysql.M
10 46 4A 59 51 4C 4C 59 FJYQLLY
---- Echoed Data
218.144.20.68 : 4501 TCP Disconnected ID = 2
---- 07/02/2005 19:41:23.142
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:23.623
218.144.20.68 : 4606 TCP Connected ID = 2
---- 07/02/2005 19:41:23.633
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 4606 TCP Data In Length 22 bytes
MD5 = CFEEAB148CB5A9E6229E1CB168D74BF7
---- 07/02/2005 19:41:23.883
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 4B 57 ..... ...root.KW
10 59 5A 59 52 4C 4E YZYRLN
---- Echoed Data
218.144.20.68 : 4606 TCP Disconnected ID = 2
---- 07/02/2005 19:41:25.455
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:25.455
218.144.20.68 : 1040 TCP Connected ID = 2
---- 07/02/2005 19:41:25.465
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
TCP Connection Request
---- 07/02/2005 19:41:25.626
218.144.20.68 : 1126 TCP Connected ID = 3
---- 07/02/2005 19:41:25.626
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1040 TCP Data In Length 23 bytes
MD5 = 406CF716F216488D9AFFF39D6BF3E908
---- 07/02/2005 19:41:25.666
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 4B ..... ...mysql.K
10 57 59 5A 59 52 4C 4E WYZYRLN
---- Echoed Data
218.144.20.68 : 1126 TCP Data In Length 22 bytes
MD5 = 07AC38DC27918BCC03734E3278CE5E42
---- 07/02/2005 19:41:25.826
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 55 48 ..... ...root.UH
10 5E 50 43 52 5E 56 ^PCR^V
---- Echoed Data
218.144.20.68 : 1040 TCP Disconnected ID = 2
---- 07/02/2005 19:41:25.926
Status Code: 10053 [10053] Software caused connection abort
218.144.20.68 : 1126 TCP Disconnected ID = 3
---- 07/02/2005 19:41:26.046
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:26.777
218.144.20.68 : 1216 TCP Connected ID = 2
---- 07/02/2005 19:41:26.787
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1216 TCP Data In Length 23 bytes
MD5 = 1608D2F944830B6A2B4CE5CDF4F3232F
---- 07/02/2005 19:41:26.988
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 55 ..... ...mysql.U
10 48 5E 50 43 52 5E 56 H^PCR^V
---- Echoed Data
218.144.20.68 : 1216 TCP Disconnected ID = 2
---- 07/02/2005 19:41:27.228
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:27.639
218.144.20.68 : 1332 TCP Connected ID = 2
---- 07/02/2005 19:41:27.639
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1332 TCP Data In Length 22 bytes
MD5 = 1B2B82CB7C31A219504327CA7C738336
---- 07/02/2005 19:41:28.099
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 48 5F ..... ...root.H_
10 4D 48 5C 43 44 40 MH\CD@
---- Echoed Data
218.144.20.68 : 1332 TCP Disconnected ID = 2
---- 07/02/2005 19:41:28.390
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:28.730
218.144.20.68 : 1467 TCP Connected ID = 2
---- 07/02/2005 19:41:28.740
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1467 TCP Data In Length 23 bytes
MD5 = CDC2E064AA2086DA80844E5B8A47A2CA
---- 07/02/2005 19:41:29.451
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 48 ..... ...mysql.H
10 5F 4D 48 5C 43 44 40 _MH\CD@
---- Echoed Data
218.144.20.68 : 1467 TCP Disconnected ID = 2
---- 07/02/2005 19:41:29.892
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:29.902
218.144.20.68 : 1599 TCP Connected ID = 2
---- 07/02/2005 19:41:29.902
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1599 TCP Data In Length 22 bytes
MD5 = 25628BA6BB0550CD8F02FCA268D0D495
---- 07/02/2005 19:41:30.122
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 44 4A ..... ...root.DJ
10 5B 41 4F 5E 41 56 [AO^AV
---- Echoed Data
218.144.20.68 : 1599 TCP Disconnected ID = 2
---- 07/02/2005 19:41:30.673
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:30.713
218.144.20.68 : 1724 TCP Connected ID = 2
---- 07/02/2005 19:41:30.723
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1724 TCP Data In Length 23 bytes
MD5 = D14D6819B5A108EBB326D237E5E8EA0E
---- 07/02/2005 19:41:30.903
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 44 ..... ...mysql.D
10 4A 5B 41 4F 5E 41 56 J[AO^AV
---- Echoed Data
218.144.20.68 : 1724 TCP Disconnected ID = 2
---- 07/02/2005 19:41:31.124
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:31.805
218.144.20.68 : 1859 TCP Connected ID = 2
---- 07/02/2005 19:41:31.815
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1859 TCP Data In Length 22 bytes
MD5 = EBEE9C91B2288EA59E1A5F312A8FA5CC
---- 07/02/2005 19:41:32.075
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 42 56 ..... ...root.BV
10 56 5B 56 44 54 4B V[VDTK
---- Echoed Data
218.144.20.68 : 1859 TCP Disconnected ID = 2
---- 07/02/2005 19:41:32.375
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:33.046
218.144.20.68 : 1994 TCP Connected ID = 2
---- 07/02/2005 19:41:33.056
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 1994 TCP Data In Length 23 bytes
MD5 = 0BE8882BA3AA3A1B89928BA343D5B713
---- 07/02/2005 19:41:33.247
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 42 ..... ...mysql.B
10 56 56 5B 56 44 54 4B VV[VDTK
---- Echoed Data
218.144.20.68 : 1994 TCP Disconnected ID = 2
---- 07/02/2005 19:41:33.567
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:33.898
218.144.20.68 : 2127 TCP Connected ID = 2
---- 07/02/2005 19:41:33.898
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 2127 TCP Data In Length 22 bytes
MD5 = 410D909497E4B69EE7E715E62FFDB876
---- 07/02/2005 19:41:34.098
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 4D 50 ..... ...root.MP
10 43 46 4E 5C 59 50 CFN\YP
---- Echoed Data
218.144.20.68 : 2127 TCP Disconnected ID = 2
---- 07/02/2005 19:41:34.348
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:35.740
218.144.20.68 : 2253 TCP Connected ID = 2
---- 07/02/2005 19:41:35.750
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
TCP Connection Request
---- 07/02/2005 19:41:35.800
218.144.20.68 : 2348 TCP Connected ID = 3
---- 07/02/2005 19:41:35.810
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 2253 TCP Data In Length 23 bytes
MD5 = 29F891F694BFDB3FDEEB93A3AB0FEA43
---- 07/02/2005 19:41:35.940
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 4D ..... ...mysql.M
10 50 43 46 4E 5C 59 50 PCFN\YP
---- Echoed Data
218.144.20.68 : 2348 TCP Data In Length 22 bytes
MD5 = 0808395F2870A4724818391E4A48FDFE
---- 07/02/2005 19:41:36.021
0 12 00 00 01 05 20 00 00 00 72 6F 6F 74 00 47 5F ..... ...root.G_
10 4C 5F 4B 4E 53 5B L_KNS[
---- Echoed Data
218.144.20.68 : 2253 TCP Disconnected ID = 2
---- 07/02/2005 19:41:36.121
Status Code: 10053 [10053] Software caused connection abort
218.144.20.68 : 2348 TCP Disconnected ID = 3
---- 07/02/2005 19:41:36.201
Status Code: 10053 [10053] Software caused connection abort
TCP Connection Request
---- 07/02/2005 19:41:36.882
218.144.20.68 : 2430 TCP Connected ID = 2
---- 07/02/2005 19:41:36.892
Status Code: 0 OK
---- Data Sent
0 2B 00 00 00 0A 33 2E 32 33 2E 35 34 2D 6E 74 00 +....3.23.54-nt.
10 09 09 00 00 38 67 21 68 6B 61 27 3D 00 2C 00 08 ....8g!hka'=.,..
20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ...............
218.144.20.68 : 2430 TCP Data In Length 23 bytes
MD5 = 171EEDBFE01E9E8DE86EF239CAED467A
---- 07/02/2005 19:41:37.092
0 13 00 00 01 05 20 00 00 00 6D 79 73 71 6C 00 47 ..... ...mysql.G
10 5F 4C 5F 4B 4E 53 5B _L_KNS[
---- Echoed Data
218.144.20.68 : 2430 TCP Disconnected ID = 2
---- 07/02/2005 19:41:37.383
Status Code: 10053 [10053] Software caused connection abort
218.144.20.68 : 3286 TCP Disconnected ID = 1
---- 07/02/2005 19:41:39.606
Status Code: 10053 [10053] Software caused connection abort
While PortPeeker is not an officially supported product if you have any
suggestions or find any bugs please send them to PortPeeker@LinkLogger.com
|
Latest News