RE: Intrusions Digest, Vol 5, Issue 42
"lee forrest" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
Hi You can create a distribution list in Microsoft Outlook and allso program your own spam filter using VBA for outlook , just write some code for the MAPI , ( Mail applications Programming Interface ) , why spend money on something when you can learn to write it yourself. >From: [email protected] >Reply-To: [email protected] >To: [email protected] >Subject: Intrusions Digest, Vol 5, Issue 42 >Date: Thu, 26 Aug 2004 10:38:33 GMT > >Send Intrusions mailing list submissions to > [email protected] > >To subscribe or unsubscribe via the World Wide Web, visit > http://www.dshield.org/mailman/listinfo/intrusions >or, via email, send a message with subject or body 'help' to > [email protected] > >You can reach the person managing the list at > [email protected] > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of Intrusions digest..." > > >Today's Topics: > > 1. Re: Re: [Intrusions] Sendmail whitelists (Don Murdoch) > 2. RE: Sendmail whitelists (Eric Peters) > 3. [LOGS] Summary of large-scale portscanning detects > ([email protected]) > > >---------------------------------------------------------------------- > >Message: 1 >Date: Wed, 25 Aug 2004 8:06:14 -0400 >From: Don Murdoch <[email protected]> >Subject: Re: Re: [Intrusions] Sendmail whitelists >To: "Intrusions List (GCIA Practicals)" <[email protected]> >Message-ID: > <[email protected]> >Content-Type: text/plain; charset=ISO-8859-1 > > >If you are not adverse to buying something I am almost sure the standard >version of CanIT by roaringpenguin.com will do that. > > >From the webmail box of .... >don murdoch - gcwn, gcia, gcih, gcux, mcse and mcsd > > > >------------------------------ > >Message: 2 >Date: Wed, 25 Aug 2004 08:33:07 -0700 >From: Eric Peters <[email protected]> >Subject: RE: [Intrusions] Sendmail whitelists >To: "Intrusions List (GCIA Practicals)" <[email protected]> >Message-ID: <E4987A7A1042D511848F0008C71BB06B0431F691@PCT_EXCH> >Content-Type: text/plain > >I use Postfix with Mailscanner (www.mailscanner.info) Spamassassin, >rulesdujour, clamav. Not to hard to setup especially on a Gentoo box, >delivering mail for 3 doamins. > >Before this setup my predecessor only had a BSD box with Postfix and >rudimentary spamassassin setup. Some of my users were averaging between 50 >to 100 spams a day, and viruses were sneaking every which way even with AV >software on the exchange server. > >Since my new setup, users now average 1 or 2 spams a day with 0 viruses >getting in. Postfix is the way into the light my friend :) > >Cheers, >Eric > > > >-----Original Message----- >From: Brian Collins [mailto:[email protected]] >Sent: Tuesday, August 24, 2004 3:04 AM >To: Intrusions List (GCIA Practicals) >Subject: Re: [Intrusions] Sendmail whitelists > >On Thu, 2004-07-01 at 11:11, Robert Wagner wrote: > > I was wondering if anyone has come up with a good method for creating a > > whitelist on a sendmail gateway? > > > > -Background: I have been running sendmail successfully for a while. I >am > > interested in > > locking down a mail gateway a bit further. Currently, mail comes in >from > > the outside, through a gateway, then on to a final mailserver. The >problem > > is with spam, since the gateway just looks at the domain and then >relays > > (access file) the mail inside. If the user doesn't exist, the internal > > server then tries to return the mail. > > > > I would like to create a whitelist of known email addresses, so only >they > > get passed through. Bad email addresses are stopped/rejected at the > > gateway. I see how to reject bad addresses, but there are an unlimited > > amount of these. > > > > The problem is the relay command in the access file only works for the > > entire domain. Is there a simple method for doing this? > > > > Someone mentioned: define(`_RELAY_FULL_ADDR_', `1') > > But I cannot find any information on where this will work and what >exactly > > it does. > >Have you considered switching to Postfix? It does it fairly easily. > > >-- >Brian Collins <[email protected]> > >_______________________________________________ >Intrusions mailing list >[email protected] >http://www.dshield.org/mailman/listinfo/intrusions > > >------------------------------ > >Message: 3 >Date: Wed, 25 Aug 2004 12:48:58 -0500 (CDT) >From: [email protected] >Subject: [Intrusions] [LOGS] Summary of large-scale portscanning > detects >To: [email protected] >Message-ID: <[email protected]> > >The following extracts show the beginning and ending of scan activity >was detected on my network. The number following each set is the total >number of probes for that source. Timestamps are GMT-0500. > >Aug 24 07:58:41 82.33.50.168:4448 -> xxx.yyy.1.0:1433 SYN ******S* >Aug 24 07:58:41 82.33.50.168:4453 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 07:58:39 82.33.50.168:1289 -> xxx.yyy.1.11:1433 SYN ******S* >Aug 24 07:58:39 82.33.50.168:1871 -> xxx.yyy.1.14:1433 SYN ******S* >Aug 24 07:58:42 82.33.50.168:1885 -> xxx.yyy.1.17:1433 SYN ******S* >Aug 24 07:58:39 82.33.50.168:1891 -> xxx.yyy.1.19:1433 SYN ******S* >Aug 24 07:58:42 82.33.50.168:1903 -> xxx.yyy.1.23:1433 SYN ******S* >Aug 24 07:58:39 82.33.50.168:1943 -> xxx.yyy.1.38:1433 SYN ******S* >[...] >Aug 24 11:47:24 82.33.50.168:2571 -> xxx.yyy.255.243:1433 SYN ******S* >Aug 24 11:47:24 82.33.50.168:2568 -> xxx.yyy.255.242:1433 SYN ******S* >Aug 24 11:47:25 82.33.50.168:2590 -> xxx.yyy.255.249:1433 SYN ******S* >Aug 24 11:47:25 82.33.50.168:2589 -> xxx.yyy.255.248:1433 SYN ******S* >Aug 24 11:47:25 82.33.50.168:2587 -> xxx.yyy.255.246:1433 SYN ******S* >Aug 24 11:47:25 82.33.50.168:2595 -> xxx.yyy.255.250:1433 SYN ******S* >Aug 24 11:47:25 82.33.50.168:2602 -> xxx.yyy.255.252:1433 SYN ******S* >Aug 24 11:47:25 82.33.50.168:2606 -> xxx.yyy.255.253:1433 SYN ******S* >95931 > >Aug 24 09:19:23 80.182.109.105:3420 -> xxx.yyy.1.0:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3421 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3422 -> xxx.yyy.1.2:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3423 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3425 -> xxx.yyy.1.5:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3424 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3428 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 09:19:26 80.182.109.105:3432 -> xxx.yyy.1.8:1433 SYN ******S* >[...] >Aug 24 13:08:48 80.182.109.105:3208 -> xxx.yyy.255.244:1433 SYN ******S* >Aug 24 13:08:48 80.182.109.105:3218 -> xxx.yyy.255.247:1433 SYN ******S* >Aug 24 13:08:48 80.182.109.105:3225 -> xxx.yyy.255.250:1433 SYN ******S* >Aug 24 13:08:48 80.182.109.105:3223 -> xxx.yyy.255.249:1433 SYN ******S* >Aug 24 13:08:48 80.182.109.105:3231 -> xxx.yyy.255.251:1433 SYN ******S* >Aug 24 13:08:48 80.182.109.105:3232 -> xxx.yyy.255.252:1433 SYN ******S* >Aug 24 13:08:49 80.182.109.105:3237 -> xxx.yyy.255.254:1433 SYN ******S* >Aug 24 13:08:49 80.182.109.105:3235 -> xxx.yyy.255.253:1433 SYN ******S* >92790 > >Aug 24 10:21:31 65.5.93.12:3603 -> xxx.yyy.1.2:139 SYN ******S* >Aug 24 10:21:31 65.5.93.12:3604 -> xxx.yyy.1.3:139 SYN ******S* >Aug 24 10:21:31 65.5.93.12:3605 -> xxx.yyy.1.4:139 SYN ******S* >Aug 24 10:21:31 65.5.93.12:3606 -> xxx.yyy.1.5:139 SYN ******S* >Aug 24 10:21:31 65.5.93.12:3609 -> xxx.yyy.1.8:139 SYN ******S* >Aug 24 10:21:28 65.5.93.12:3610 -> xxx.yyy.1.9:139 SYN ******S* >Aug 24 10:21:31 65.5.93.12:3611 -> xxx.yyy.1.10:139 SYN ******S* >Aug 24 10:21:31 65.5.93.12:3612 -> xxx.yyy.1.11:139 SYN ******S* >[...] >Aug 24 10:43:31 65.5.93.12:3589 -> xxx.yyy.255.242:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3587 -> xxx.yyy.255.240:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3588 -> xxx.yyy.255.241:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3603 -> xxx.yyy.255.244:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3620 -> xxx.yyy.255.251:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3613 -> xxx.yyy.255.249:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3614 -> xxx.yyy.255.250:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3624 -> xxx.yyy.255.254:139 SYN ******S* >Aug 24 10:43:31 65.5.93.12:3622 -> xxx.yyy.255.253:139 SYN ******S* >85635 > >Aug 24 13:45:46 69.166.243.227:1715 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 13:45:43 69.166.243.227:1717 -> xxx.yyy.1.2:1433 SYN ******S* >Aug 24 13:45:46 69.166.243.227:1718 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 13:45:47 69.166.243.227:1721 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 13:45:47 69.166.243.227:1726 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 13:45:47 69.166.243.227:1727 -> xxx.yyy.1.7:1433 SYN ******S* >Aug 24 13:45:44 69.166.243.227:1728 -> xxx.yyy.1.8:1433 SYN ******S* >Aug 24 13:45:47 69.166.243.227:1732 -> xxx.yyy.1.9:1433 SYN ******S* >[...] >Aug 24 17:35:50 69.166.243.227:3971 -> xxx.yyy.255.242:1433 SYN ******S* >Aug 24 17:35:51 69.166.243.227:3973 -> xxx.yyy.255.244:1433 SYN ******S* >Aug 24 17:35:51 69.166.243.227:3975 -> xxx.yyy.255.245:1433 SYN ******S* >Aug 24 17:35:51 69.166.243.227:3976 -> xxx.yyy.255.246:1433 SYN ******S* >Aug 24 17:35:52 69.166.243.227:3978 -> xxx.yyy.255.248:1433 SYN ******S* >Aug 24 17:35:52 69.166.243.227:3980 -> xxx.yyy.255.249:1433 SYN ******S* >Aug 24 17:35:52 69.166.243.227:3983 -> xxx.yyy.255.250:1433 SYN ******S* >Aug 24 17:35:53 69.166.243.227:3985 -> xxx.yyy.255.252:1433 SYN ******S* >82278 > >Aug 24 22:31:09 163.15.197.201:3571 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 22:31:07 163.15.197.201:3577 -> xxx.yyy.1.7:1433 SYN ******S* >Aug 24 22:31:10 163.15.197.201:3579 -> xxx.yyy.1.9:1433 SYN ******S* >Aug 24 22:31:10 163.15.197.201:3588 -> xxx.yyy.1.18:1433 SYN ******S* >Aug 24 22:31:10 163.15.197.201:3589 -> xxx.yyy.1.19:1433 SYN ******S* >Aug 24 22:31:10 163.15.197.201:3590 -> xxx.yyy.1.20:1433 SYN ******S* >Aug 24 22:31:10 163.15.197.201:3591 -> xxx.yyy.1.21:1433 SYN ******S* >Aug 24 22:31:10 163.15.197.201:3592 -> xxx.yyy.1.22:1433 SYN ******S* >[...] >Aug 24 22:42:48 163.15.197.201:3725 -> xxx.yyy.255.246:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3728 -> xxx.yyy.255.249:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3731 -> xxx.yyy.255.252:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3729 -> xxx.yyy.255.250:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3726 -> xxx.yyy.255.247:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3727 -> xxx.yyy.255.248:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3732 -> xxx.yyy.255.253:1433 SYN ******S* >Aug 24 22:42:48 163.15.197.201:3730 -> xxx.yyy.255.251:1433 SYN ******S* >52127 > >Aug 24 00:00:04 219.249.50.215:4057 -> xxx.yyy.166.121:1433 SYN ******S* >Aug 24 00:00:04 219.249.50.215:3708 -> xxx.yyy.166.114:1433 SYN ******S* >Aug 24 00:00:04 219.249.50.215:3711 -> xxx.yyy.166.115:1433 SYN ******S* >Aug 24 00:00:04 219.249.50.215:3774 -> xxx.yyy.166.116:1433 SYN ******S* >Aug 24 00:00:05 219.249.50.215:3812 -> xxx.yyy.166.117:1433 SYN ******S* >Aug 24 00:00:05 219.249.50.215:3832 -> xxx.yyy.166.118:1433 SYN ******S* >Aug 24 00:00:05 219.249.50.215:3839 -> xxx.yyy.166.119:1433 SYN ******S* >Aug 24 00:00:08 219.249.50.215:4164 -> xxx.yyy.166.122:1433 SYN ******S* >[...] >Aug 24 01:20:26 219.249.50.215:3873 -> xxx.yyy.255.249:1433 SYN ******S* >Aug 24 01:20:27 219.249.50.215:3901 -> xxx.yyy.255.254:1433 SYN ******S* >Aug 24 01:20:27 219.249.50.215:3900 -> xxx.yyy.255.253:1433 SYN ******S* >Aug 24 01:20:30 219.249.50.215:3615 -> xxx.yyy.255.239:1433 SYN ******S* >Aug 24 01:20:30 219.249.50.215:3626 -> xxx.yyy.255.240:1433 SYN ******S* >Aug 24 01:20:30 219.249.50.215:3687 -> xxx.yyy.255.241:1433 SYN ******S* >Aug 24 01:20:31 219.249.50.215:3803 -> xxx.yyy.255.245:1433 SYN ******S* >Aug 24 01:20:32 219.249.50.215:3837 -> xxx.yyy.255.247:1433 SYN ******S* >49866 > >Aug 24 15:45:06 213.132.178.141:2010 -> xxx.yyy.1.2:3632 SYN ******S* >Aug 24 15:45:09 213.132.178.141:2012 -> xxx.yyy.1.4:3632 SYN ******S* >Aug 24 15:45:09 213.132.178.141:2013 -> xxx.yyy.1.5:3632 SYN ******S* >Aug 24 15:45:09 213.132.178.141:2014 -> xxx.yyy.1.6:3632 SYN ******S* >Aug 24 15:45:09 213.132.178.141:2016 -> xxx.yyy.1.8:3632 SYN ******S* >Aug 24 15:45:09 213.132.178.141:2017 -> xxx.yyy.1.9:3632 SYN ******S* >Aug 24 15:45:07 213.132.178.141:2018 -> xxx.yyy.1.10:3632 SYN ******S* >Aug 24 15:45:07 213.132.178.141:2019 -> xxx.yyy.1.11:3632 SYN ******S* >[...] >Aug 24 15:56:48 213.132.178.141:4326 -> xxx.yyy.255.238:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4323 -> xxx.yyy.255.235:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4338 -> xxx.yyy.255.250:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4335 -> xxx.yyy.255.247:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4332 -> xxx.yyy.255.244:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4336 -> xxx.yyy.255.248:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4337 -> xxx.yyy.255.249:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4333 -> xxx.yyy.255.245:3632 SYN ******S* >Aug 24 15:56:48 213.132.178.141:4334 -> xxx.yyy.255.246:3632 SYN ******S* >45360 > >Aug 24 08:15:50 210.200.243.53:2452 -> xxx.yyy.64.176:1433 SYN ******S* >Aug 24 08:15:50 210.200.243.53:2454 -> xxx.yyy.64.177:1433 SYN ******S* >Aug 24 08:15:50 210.200.243.53:2457 -> xxx.yyy.64.178:1433 SYN ******S* >Aug 24 08:15:50 210.200.243.53:2460 -> xxx.yyy.64.179:1433 SYN ******S* >Aug 24 08:15:47 210.200.243.53:2462 -> xxx.yyy.64.180:1433 SYN ******S* >Aug 24 08:15:47 210.200.243.53:2464 -> xxx.yyy.64.181:1433 SYN ******S* >Aug 24 08:15:47 210.200.243.53:2469 -> xxx.yyy.64.182:1433 SYN ******S* >Aug 24 08:15:47 210.200.243.53:2471 -> xxx.yyy.64.183:1433 SYN ******S* >[...] >Aug 24 09:39:11 210.200.243.53:1733 -> xxx.yyy.157.175:1433 SYN ******S* >Aug 24 09:39:11 210.200.243.53:1735 -> xxx.yyy.157.176:1433 SYN ******S* >Aug 24 09:39:11 210.200.243.53:1737 -> xxx.yyy.157.178:1433 SYN ******S* >Aug 24 09:39:12 210.200.243.53:1717 -> xxx.yyy.157.167:1433 SYN ******S* >Aug 24 09:39:12 210.200.243.53:1751 -> xxx.yyy.157.181:1433 SYN ******S* >Aug 24 09:39:12 210.200.243.53:1718 -> xxx.yyy.157.168:1433 SYN ******S* >Aug 24 09:39:12 210.200.243.53:1719 -> xxx.yyy.157.169:1433 SYN ******S* >Aug 24 09:39:12 210.200.243.53:1758 -> xxx.yyy.157.184:1433 SYN ******S* >39343 > >Aug 24 18:00:46 216.229.142.202:3787 -> xxx.yyy.1.9:1433 SYN ******S* >Aug 24 18:00:46 216.229.142.202:3790 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 18:00:46 216.229.142.202:3792 -> xxx.yyy.1.12:1433 SYN ******S* >Aug 24 18:00:46 216.229.142.202:3794 -> xxx.yyy.1.14:1433 SYN ******S* >Aug 24 18:00:46 216.229.142.202:3797 -> xxx.yyy.1.17:1433 SYN ******S* >Aug 24 18:00:46 216.229.142.202:3799 -> xxx.yyy.1.19:1433 SYN ******S* >Aug 24 18:00:46 216.229.142.202:3800 -> xxx.yyy.1.20:1433 SYN ******S* >Aug 24 18:00:43 216.229.142.202:3801 -> xxx.yyy.1.21:1433 SYN ******S* >[...] >Aug 24 18:04:13 216.229.142.202:1339 -> xxx.yyy.246.158:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1336 -> xxx.yyy.246.155:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1333 -> xxx.yyy.246.152:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:4357 -> xxx.yyy.247.196:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1330 -> xxx.yyy.246.149:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1327 -> xxx.yyy.246.146:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1311 -> xxx.yyy.246.130:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1340 -> xxx.yyy.246.159:1433 SYN ******S* >Aug 24 18:04:13 216.229.142.202:1403 -> xxx.yyy.246.221:1433 SYN ******S* >38183 > >Aug 24 15:11:23 211.239.172.73:1965 -> xxx.yyy.1.8:1433 SYN ******S* >Aug 24 15:11:23 211.239.172.73:1967 -> xxx.yyy.1.10:1433 SYN ******S* >Aug 24 15:11:23 211.239.172.73:1968 -> xxx.yyy.1.11:1433 SYN ******S* >Aug 24 15:11:20 211.239.172.73:1960 -> xxx.yyy.1.5:1433 SYN ******S* >Aug 24 15:11:20 211.239.172.73:1964 -> xxx.yyy.1.7:1433 SYN ******S* >Aug 24 15:11:23 211.239.172.73:1959 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 15:11:20 211.239.172.73:1961 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 15:11:20 211.239.172.73:1977 -> xxx.yyy.1.20:1433 SYN ******S* >[...] >Aug 24 15:15:10 211.239.172.73:2425 -> xxx.yyy.255.236:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2433 -> xxx.yyy.255.244:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2434 -> xxx.yyy.255.245:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2423 -> xxx.yyy.255.234:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2432 -> xxx.yyy.255.243:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2427 -> xxx.yyy.255.238:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2441 -> xxx.yyy.255.252:1433 SYN ******S* >Aug 24 15:15:10 211.239.172.73:2429 -> xxx.yyy.255.240:1433 SYN ******S* >37631 > >Aug 24 09:05:29 216.233.207.125:3586 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 09:05:26 216.233.207.125:3588 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 09:05:29 216.233.207.125:3589 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 09:05:26 216.233.207.125:3591 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 09:05:26 216.233.207.125:3592 -> xxx.yyy.1.7:1433 SYN ******S* >Aug 24 09:05:29 216.233.207.125:3594 -> xxx.yyy.1.9:1433 SYN ******S* >Aug 24 09:05:29 216.233.207.125:3595 -> xxx.yyy.1.10:1433 SYN ******S* >Aug 24 09:05:29 216.233.207.125:3596 -> xxx.yyy.1.11:1433 SYN ******S* >[...] >Aug 24 09:16:22 216.233.207.125:2506 -> xxx.yyy.255.240:1433 SYN ******S* >Aug 24 09:16:22 216.233.207.125:2510 -> xxx.yyy.255.244:1433 SYN ******S* >Aug 24 09:16:22 216.233.207.125:2507 -> xxx.yyy.255.241:1433 SYN ******S* >Aug 24 09:16:23 216.233.207.125:2520 -> xxx.yyy.255.254:1433 SYN ******S* >Aug 24 09:16:23 216.233.207.125:2517 -> xxx.yyy.255.251:1433 SYN ******S* >Aug 24 09:16:23 216.233.207.125:2518 -> xxx.yyy.255.252:1433 SYN ******S* >Aug 24 09:16:23 216.233.207.125:2515 -> xxx.yyy.255.249:1433 SYN ******S* >Aug 24 09:16:23 216.233.207.125:2519 -> xxx.yyy.255.253:1433 SYN ******S* >Aug 24 09:16:23 216.233.207.125:2516 -> xxx.yyy.255.250:1433 SYN ******S* >37278 > >Aug 24 16:34:37 66.108.43.173:3068 -> xxx.yyy.1.11:4000 SYN ******S* >Aug 24 16:34:40 66.108.43.173:3088 -> xxx.yyy.1.31:4000 SYN ******S* >Aug 24 16:34:39 66.108.43.173:3089 -> xxx.yyy.1.32:4000 SYN ******S* >Aug 24 16:34:37 66.108.43.173:3090 -> xxx.yyy.1.33:4000 SYN ******S* >Aug 24 16:34:37 66.108.43.173:3087 -> xxx.yyy.1.30:4000 SYN ******S* >Aug 24 16:34:37 66.108.43.173:3094 -> xxx.yyy.1.37:4000 SYN ******S* >Aug 24 16:34:40 66.108.43.173:3096 -> xxx.yyy.1.39:4000 SYN ******S* >Aug 24 16:34:39 66.108.43.173:3095 -> xxx.yyy.1.38:4000 SYN ******S* >[...] >Aug 24 16:45:43 66.108.43.173:3084 -> xxx.yyy.255.230:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3092 -> xxx.yyy.255.238:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3096 -> xxx.yyy.255.241:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3097 -> xxx.yyy.255.242:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3090 -> xxx.yyy.255.236:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3094 -> xxx.yyy.255.239:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3089 -> xxx.yyy.255.235:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3091 -> xxx.yyy.255.237:4000 SYN ******S* >Aug 24 16:45:43 66.108.43.173:3095 -> xxx.yyy.255.240:4000 SYN ******S* >35690 > >Aug 24 00:00:09 220.71.28.202:46382 -> xxx.yyy.147.45:443 SYN ******S* >Aug 24 00:00:06 220.71.28.202:46385 -> xxx.yyy.147.48:443 SYN ******S* >Aug 24 00:00:09 220.71.28.202:46383 -> xxx.yyy.147.46:443 SYN ******S* >Aug 24 00:00:09 220.71.28.202:46384 -> xxx.yyy.147.47:443 SYN ******S* >Aug 24 00:00:09 220.71.28.202:46391 -> xxx.yyy.147.54:443 SYN ******S* >Aug 24 00:00:09 220.71.28.202:46392 -> xxx.yyy.147.55:443 SYN ******S* >Aug 24 00:00:09 220.71.28.202:46387 -> xxx.yyy.147.50:443 SYN ******S* >Aug 24 00:00:09 220.71.28.202:46386 -> xxx.yyy.147.49:443 SYN ******S* >[...] >Aug 24 00:18:16 220.71.28.202:42578 -> xxx.yyy.255.16:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42570 -> xxx.yyy.255.12:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42579 -> xxx.yyy.255.17:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42581 -> xxx.yyy.255.19:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42583 -> xxx.yyy.255.21:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42569 -> xxx.yyy.255.11:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42585 -> xxx.yyy.255.23:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42580 -> xxx.yyy.255.18:443 SYN ******S* >Aug 24 00:18:16 220.71.28.202:42582 -> xxx.yyy.255.20:443 SYN ******S* >33286 > >Aug 24 04:33:19 222.182.216.227:3070 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 04:33:16 222.182.216.227:3078 -> xxx.yyy.1.8:1433 SYN ******S* >Aug 24 04:33:19 222.182.216.227:3083 -> xxx.yyy.1.10:1433 SYN ******S* >Aug 24 04:33:16 222.182.216.227:3091 -> xxx.yyy.1.12:1433 SYN ******S* >Aug 24 04:33:17 222.182.216.227:3102 -> xxx.yyy.1.16:1433 SYN ******S* >Aug 24 04:33:20 222.182.216.227:3062 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 04:33:17 222.182.216.227:3112 -> xxx.yyy.1.20:1433 SYN ******S* >Aug 24 04:33:20 222.182.216.227:3066 -> xxx.yyy.1.3:1433 SYN ******S* >[...] >Aug 24 06:52:27 222.182.216.227:4013 -> xxx.yyy.255.196:1433 SYN ******S* >Aug 24 06:52:27 222.182.216.227:3612 -> xxx.yyy.255.195:1433 SYN ******S* >Aug 24 06:52:27 222.182.216.227:4144 -> xxx.yyy.255.197:1433 SYN ******S* >Aug 24 06:52:27 222.182.216.227:4620 -> xxx.yyy.255.198:1433 SYN ******S* >Aug 24 06:52:27 222.182.216.227:4216 -> xxx.yyy.255.203:1433 SYN ******S* >Aug 24 06:52:27 222.182.216.227:2740 -> xxx.yyy.255.205:1433 SYN ******S* >Aug 24 06:52:28 222.182.216.227:4202 -> xxx.yyy.255.221:1433 SYN ******S* >Aug 24 06:52:28 222.182.216.227:1704 -> xxx.yyy.255.227:1433 SYN ******S* >Aug 24 06:52:29 222.182.216.227:1315 -> xxx.yyy.255.241:1433 SYN ******S* >32991 > >Aug 24 03:12:33 221.12.122.153:4718 -> xxx.yyy.1.0:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4720 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4721 -> xxx.yyy.1.2:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4722 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4723 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4724 -> xxx.yyy.1.5:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4725 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 03:12:33 221.12.122.153:4726 -> xxx.yyy.1.7:1433 SYN ******S* >[...] >Aug 24 04:33:34 221.12.122.153:3646 -> xxx.yyy.91.47:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3648 -> xxx.yyy.91.48:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3651 -> xxx.yyy.91.51:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3650 -> xxx.yyy.91.50:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3649 -> xxx.yyy.91.49:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3652 -> xxx.yyy.91.52:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3654 -> xxx.yyy.91.53:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3658 -> xxx.yyy.91.55:1433 SYN ******S* >Aug 24 04:33:34 221.12.122.153:3657 -> xxx.yyy.91.54:1433 SYN ******S* >27612 > >Aug 24 09:22:46 211.141.95.18:14234 -> xxx.yyy.1.0:1433 SYN ******S* >Aug 24 09:22:46 211.141.95.18:14243 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 09:22:46 211.141.95.18:14247 -> xxx.yyy.1.2:1433 SYN ******S* >Aug 24 09:22:47 211.141.95.18:14255 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 09:22:47 211.141.95.18:14263 -> xxx.yyy.1.5:1433 SYN ******S* >Aug 24 09:22:47 211.141.95.18:14278 -> xxx.yyy.1.7:1433 SYN ******S* >Aug 24 09:22:50 211.141.95.18:14286 -> xxx.yyy.1.8:1433 SYN ******S* >Aug 24 09:22:50 211.141.95.18:14306 -> xxx.yyy.1.9:1433 SYN ******S* >[...] >Aug 24 11:20:17 211.141.95.18:7852 -> xxx.yyy.131.189:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:7849 -> xxx.yyy.131.188:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:8938 -> xxx.yyy.131.245:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:7889 -> xxx.yyy.131.190:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:8983 -> xxx.yyy.131.246:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:7894 -> xxx.yyy.131.192:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:7890 -> xxx.yyy.131.191:1433 SYN ******S* >Aug 24 11:20:17 211.141.95.18:8989 -> xxx.yyy.131.247:1433 SYN ******S* >Aug 24 11:20:18 211.141.95.18:7948 -> xxx.yyy.131.194:1433 SYN ******S* >27173 > >Aug 24 22:28:54 81.44.202.196:4133 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 22:28:54 81.44.202.196:4134 -> xxx.yyy.1.2:1433 SYN ******S* >Aug 24 22:28:54 81.44.202.196:4135 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 22:28:54 81.44.202.196:4136 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 22:28:54 81.44.202.196:4138 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 22:28:54 81.44.202.196:4140 -> xxx.yyy.1.8:1433 SYN ******S* >Aug 24 22:28:54 81.44.202.196:4142 -> xxx.yyy.1.9:1433 SYN ******S* >Aug 24 22:28:51 81.44.202.196:4143 -> xxx.yyy.1.10:1433 SYN ******S* >[...] >Aug 24 23:54:07 81.44.202.196:4157 -> xxx.yyy.95.245:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4165 -> xxx.yyy.95.249:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4170 -> xxx.yyy.95.254:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4169 -> xxx.yyy.95.253:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4168 -> xxx.yyy.95.252:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4167 -> xxx.yyy.95.251:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4166 -> xxx.yyy.95.250:1433 SYN ******S* >Aug 24 23:54:07 81.44.202.196:4189 -> xxx.yyy.95.255:1433 SYN ******S* >24718 > >Aug 24 12:29:45 202.211.121.55:1964 -> xxx.yyy.1.0:1433 SYN ******S* >Aug 24 12:29:42 202.211.121.55:1967 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 12:29:45 202.211.121.55:1972 -> xxx.yyy.1.2:1433 SYN ******S* >Aug 24 12:29:45 202.211.121.55:1983 -> xxx.yyy.1.5:1433 SYN ******S* >Aug 24 12:29:42 202.211.121.55:1988 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 12:29:45 202.211.121.55:1992 -> xxx.yyy.1.7:1433 SYN ******S* >Aug 24 12:29:45 202.211.121.55:2000 -> xxx.yyy.1.9:1433 SYN ******S* >Aug 24 12:29:45 202.211.121.55:2005 -> xxx.yyy.1.10:1433 SYN ******S* >[...] >Aug 24 13:54:58 202.211.121.55:3601 -> xxx.yyy.95.238:1433 SYN ******S* >Aug 24 13:54:58 202.211.121.55:3622 -> xxx.yyy.95.242:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3640 -> xxx.yyy.95.246:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3650 -> xxx.yyy.95.248:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3669 -> xxx.yyy.95.251:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3676 -> xxx.yyy.95.253:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3681 -> xxx.yyy.95.255:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3679 -> xxx.yyy.95.254:1433 SYN ******S* >Aug 24 13:54:59 202.211.121.55:3675 -> xxx.yyy.95.252:1433 SYN ******S* >21183 > >Aug 24 23:31:56 222.47.80.210:4756 -> xxx.yyy.64.0:1433 SYN ******S* >Aug 24 23:31:56 222.47.80.210:4767 -> xxx.yyy.64.1:1433 SYN ******S* >Aug 24 23:31:56 222.47.80.210:4769 -> xxx.yyy.64.2:1433 SYN ******S* >Aug 24 23:31:56 222.47.80.210:4771 -> xxx.yyy.64.3:1433 SYN ******S* >Aug 24 23:31:56 222.47.80.210:4789 -> xxx.yyy.64.4:1433 SYN ******S* >Aug 24 23:31:56 222.47.80.210:4795 -> xxx.yyy.64.5:1433 SYN ******S* >Aug 24 23:31:57 222.47.80.210:4797 -> xxx.yyy.64.6:1433 SYN ******S* >Aug 24 23:31:57 222.47.80.210:4846 -> xxx.yyy.64.7:1433 SYN ******S* >[...] >Aug 24 23:59:58 222.47.80.210:4546 -> xxx.yyy.94.188:1433 SYN ******S* >Aug 24 23:59:59 222.47.80.210:4582 -> xxx.yyy.94.191:1433 SYN ******S* >Aug 24 23:59:59 222.47.80.210:4590 -> xxx.yyy.94.192:1433 SYN ******S* >Aug 24 23:59:59 222.47.80.210:4596 -> xxx.yyy.94.193:1433 SYN ******S* >Aug 24 23:59:59 222.47.80.210:4388 -> xxx.yyy.94.176:1433 SYN ******S* >Aug 25 00:00:00 222.47.80.210:4636 -> xxx.yyy.94.196:1433 SYN ******S* >Aug 25 00:00:00 222.47.80.210:4643 -> xxx.yyy.94.197:1433 SYN ******S* >Aug 25 00:00:00 222.47.80.210:4656 -> xxx.yyy.94.199:1433 SYN ******S* >12528 > >Aug 24 23:54:38 218.224.173.127:3004 -> xxx.yyy.235.112:5554 SYN ******S* >Aug 24 23:54:38 218.224.173.127:3006 -> xxx.yyy.235.115:5554 SYN ******S* >Aug 24 23:54:39 218.224.173.127:3537 -> xxx.yyy.235.115:1023 SYN ******S* >Aug 24 23:54:38 218.224.173.127:3009 -> xxx.yyy.235.118:5554 SYN ******S* >Aug 24 23:54:41 218.224.173.127:1080 -> xxx.yyy.235.118:9898 SYN ******S* >Aug 24 23:54:38 218.224.173.127:3012 -> xxx.yyy.235.120:5554 SYN ******S* >Aug 24 23:54:41 218.224.173.127:1087 -> xxx.yyy.235.120:9898 SYN ******S* >Aug 24 23:54:38 218.224.173.127:3016 -> xxx.yyy.235.123:5554 SYN ******S* >[...] >Aug 24 23:55:23 218.224.173.127:1416 -> xxx.yyy.255.224:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1424 -> xxx.yyy.255.225:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1442 -> xxx.yyy.255.226:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1451 -> xxx.yyy.255.229:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1458 -> xxx.yyy.255.228:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1460 -> xxx.yyy.255.230:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1473 -> xxx.yyy.255.231:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1468 -> xxx.yyy.255.232:9898 SYN ******S* >Aug 24 23:55:23 218.224.173.127:1481 -> xxx.yyy.255.233:9898 SYN ******S* >9360 > >Aug 24 00:00:37 221.148.209.99:4697 -> xxx.yyy.194.126:5554 SYN ******S* >Aug 24 00:00:38 221.148.209.99:1173 -> xxx.yyy.194.126:1023 SYN ******S* >Aug 24 00:00:40 221.148.209.99:2075 -> xxx.yyy.194.126:9898 SYN ******S* >Aug 24 00:00:37 221.148.209.99:4705 -> xxx.yyy.194.134:5554 SYN ******S* >Aug 24 00:00:38 221.148.209.99:1181 -> xxx.yyy.194.134:1023 SYN ******S* >Aug 24 00:00:40 221.148.209.99:2083 -> xxx.yyy.194.134:9898 SYN ******S* >Aug 24 00:00:37 221.148.209.99:4707 -> xxx.yyy.194.136:5554 SYN ******S* >Aug 24 00:00:38 221.148.209.99:1183 -> xxx.yyy.194.136:1023 SYN ******S* >[...] >Aug 24 00:01:18 221.148.209.99:2722 -> xxx.yyy.214.224:1023 SYN ******S* >Aug 24 00:01:20 221.148.209.99:3616 -> xxx.yyy.214.224:9898 SYN ******S* >Aug 24 00:01:18 221.148.209.99:2723 -> xxx.yyy.214.225:1023 SYN ******S* >Aug 24 00:01:20 221.148.209.99:3617 -> xxx.yyy.214.225:9898 SYN ******S* >Aug 24 00:01:18 221.148.209.99:2728 -> xxx.yyy.214.230:1023 SYN ******S* >Aug 24 00:01:20 221.148.209.99:3622 -> xxx.yyy.214.230:9898 SYN ******S* >Aug 24 00:01:20 221.148.209.99:3626 -> xxx.yyy.214.234:9898 SYN ******S* >Aug 24 00:01:20 221.148.209.99:3609 -> xxx.yyy.214.217:9898 SYN ******S* >9284 > >Aug 24 23:34:02 207.177.38.199:50841 -> xxx.yyy.77.126:264 SYN ******S* >Aug 24 23:34:02 207.177.38.199:50842 -> xxx.yyy.77.126:317 SYN ******S* >Aug 24 23:34:05 207.177.38.199:50843 -> xxx.yyy.77.126:73 SYN ******S* >Aug 24 23:34:05 207.177.38.199:50844 -> xxx.yyy.77.126:2111 SYN ******S* >Aug 24 23:34:05 207.177.38.199:50845 -> xxx.yyy.77.126:1059 SYN ******S* >Aug 24 23:34:05 207.177.38.199:50848 -> xxx.yyy.77.126:175 SYN ******S* >Aug 24 23:34:05 207.177.38.199:50849 -> xxx.yyy.77.126:637 SYN ******S* >Aug 24 23:34:05 207.177.38.199:50850 -> xxx.yyy.77.126:1021 SYN ******S* >[...] >Aug 25 00:00:00 207.177.38.199:56493 -> xxx.yyy.77.126:286 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56492 -> xxx.yyy.77.126:777 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56491 -> xxx.yyy.77.126:93 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56550 -> xxx.yyy.77.126:543 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56551 -> xxx.yyy.77.126:761 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56552 -> xxx.yyy.77.126:1083 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56553 -> xxx.yyy.77.126:134 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56554 -> xxx.yyy.77.126:1508 SYN ******S* >Aug 25 00:00:00 207.177.38.199:56555 -> xxx.yyy.77.126:270 SYN ******S* >8960 > >Aug 24 23:00:37 218.189.152.125:63553 -> xxx.yyy.1.0:1433 SYN ******S* >Aug 24 23:00:37 218.189.152.125:63814 -> xxx.yyy.1.1:1433 SYN ******S* >Aug 24 23:00:34 218.189.152.125:62225 -> xxx.yyy.1.3:1433 SYN ******S* >Aug 24 23:00:34 218.189.152.125:61626 -> xxx.yyy.1.4:1433 SYN ******S* >Aug 24 23:00:34 218.189.152.125:62907 -> xxx.yyy.1.5:1433 SYN ******S* >Aug 24 23:00:37 218.189.152.125:63564 -> xxx.yyy.1.6:1433 SYN ******S* >Aug 24 23:00:35 218.189.152.125:61844 -> xxx.yyy.1.10:1433 SYN ******S* >Aug 24 23:00:35 218.189.152.125:64551 -> xxx.yyy.1.11:1433 SYN ******S* >[...] >Aug 25 00:00:00 218.189.152.125:62181 -> xxx.yyy.67.44:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:62488 -> xxx.yyy.67.43:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:63801 -> xxx.yyy.67.51:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:63162 -> xxx.yyy.67.50:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:64040 -> xxx.yyy.67.52:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:65313 -> xxx.yyy.67.53:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:64626 -> xxx.yyy.67.48:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:61454 -> xxx.yyy.67.49:1433 SYN ******S* >Aug 25 00:00:00 218.189.152.125:63794 -> xxx.yyy.67.47:1433 SYN ******S* >8167 > >Aug 24 00:56:33 221.202.16.201:3528 -> xxx.yyy.236.78:5554 SYN ******S* >Aug 24 00:56:36 221.202.16.201:1724 -> xxx.yyy.236.78:9898 SYN ******S* >Aug 24 00:56:33 221.202.16.201:3524 -> xxx.yyy.236.77:5554 SYN ******S* >Aug 24 00:56:36 221.202.16.201:1722 -> xxx.yyy.236.77:9898 SYN ******S* >Aug 24 00:56:33 221.202.16.201:3529 -> xxx.yyy.236.79:5554 SYN ******S* >Aug 24 00:56:34 221.202.16.201:4097 -> xxx.yyy.236.79:1023 SYN ******S* >Aug 24 00:56:36 221.202.16.201:1725 -> xxx.yyy.236.79:9898 SYN ******S* >Aug 24 00:56:33 221.202.16.201:3526 -> xxx.yyy.236.76:5554 SYN ******S* >[...] >Aug 24 00:57:19 221.202.16.201:3840 -> xxx.yyy.237.246:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3843 -> xxx.yyy.237.251:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3849 -> xxx.yyy.238.2:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3858 -> xxx.yyy.238.10:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3860 -> xxx.yyy.237.255:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3859 -> xxx.yyy.238.12:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3865 -> xxx.yyy.238.1:9898 SYN ******S* >Aug 24 00:57:19 221.202.16.201:3869 -> xxx.yyy.238.13:9898 SYN ******S* >7054 > >-- >- Ken >=========================================================================== >Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services >University of Northern Iowa Cedar Falls, IA 50614-0121 >email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 > > >------------------------------ > >_______________________________________________ >Intrusions mailing list >[email protected] >http://www.dshield.org/mailman/listinfo/intrusions > > >End of Intrusions Digest, Vol 5, Issue 42 >***************************************** _________________________________________________________________ Use MSN Messenger to send music and pics to your friends http://www.msn.co.uk/messenger _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions