Date: Sat, 01 Nov 2014 15:03:34 +0100
From: root <root@zerjav.biz>
To: ervin@zerjav.biz
Subject: [psad-alert] DL2 src: gameservertracking.xfire.com dst: eshnox
User-Agent: Heirloom mailx 12.5 6/20/10

=-=-=-=-=-=-=-=-=-=-=-= Sat Nov  1 15:03:34 2014 =-=-=-=-=-=-=-=-=-=-=-=


         Danger level: [2] (out of 5)

    Scanned UDP ports: [27960: 2 packets, Nmap: -sU]
       iptables chain: INPUT (prefix "[2223021.775507] LOG-EVERYTHING"), 1 packets
       iptables chain: INPUT (prefix "[2223021.774996] UPD-CONNECTION"), 1 packets

               Source: 208.88.178.59
                  DNS: gameservertracking.xfire.com

          Destination: 78.47.40.18
                  DNS: eshnox

   Overall scan start: Sat Nov  1 07:47:33 2014
   Total email alerts: 14
   Complete UDP range: [27960-27961]
      Syslog hostname: eshnox

         Global stats: chain:   interface:   TCP:   UDP:   ICMP:
                       INPUT    eth0         0      32     0

[+] Whois Information (source IP):

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=208.88.178.59?showDetails=true&showARIN=false&ext=netref2
#

NetRange:       208.88.176.0 - 208.88.183.255
CIDR:           208.88.176.0/21
NetName:        VARIOUS
NetHandle:      NET-208-88-176-0-1
Parent:         NET208 (NET-208-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS32527
Organization:   FriendFinder Networks Inc (FRIEN-11)
RegDate:        2008-03-24
Updated:        2012-06-06
Ref:            http://whois.arin.net/rest/net/NET-208-88-176-0-1

OrgName:        FriendFinder Networks Inc
OrgId:          FRIEN-11
Address:        220 Humboldt ct
City:           Sunnyvale
StateProv:      CA
PostalCode:     94089
Country:        US
RegDate:        2008-07-18
Updated:        2014-08-19
Ref:            http://whois.arin.net/rest/org/FRIEN-11

OrgTechHandle: CAWLE2-ARIN
OrgTechName:   CAWLEY, JEREMY
OrgTechPhone:  +1-408-745-5582
OrgTechEmail:  jcawley@ffn.com
OrgTechRef:    http://whois.arin.net/rest/poc/CAWLE2-ARIN

OrgAbuseHandle: OPERA393-ARIN
OrgAbuseName:   Operations
OrgAbusePhone:  +1-408-745-5000
OrgAbuseEmail:  ff_ops@ffn.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/OPERA393-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


=-=-=-=-=-=-=-=-=-=-=-= Sat Nov  1 15:03:34 2014 =-=-=-=-=-=-=-=-=-=-=-=