Re: [LOGS] Summary of large-scale portscanning detects
Ken Connelly <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
No, I haven't tried to do anything like that, but that never really was my focus. - ken Jason "JC" Monroe wrote: >Ken, > >Hi there having seen these log entries for in excess of a year it just >occurred to me ask "Having compiled these reports do you find that is it >possible to do forecasting of any kind as far as TCP / UDP ports X thru >Y? " > >Software vulnerabilities in network daemons, trojans etc... run the >gambit of ports, however, you might be able to say given current >information we've found that every 14 months there is a new >vulnerability found in a core service from Microsoft that typically run >in the 1-5000 port range is likely to occur? > >Thanks, > >JC >On Fri, 2004-10-08 at 05:04, [email protected] wrote: > > >>The following extracts show the beginning and ending of scan activity >>was detected on my network. The number following each set is the total >>number of probes for that source. Timestamps are GMT-0500. >> >>Oct 7 03:46:35 216.117.178.238:3920 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3921 -> xxx.yyy.1.2:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3922 -> xxx.yyy.1.3:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3923 -> xxx.yyy.1.4:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3924 -> xxx.yyy.1.5:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3925 -> xxx.yyy.1.6:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3926 -> xxx.yyy.1.7:1433 SYN ******S* >>Oct 7 03:46:35 216.117.178.238:3927 -> xxx.yyy.1.8:1433 SYN ******S* >>[...] >>Oct 7 04:10:09 216.117.178.238:2164 -> xxx.yyy.255.213:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2169 -> xxx.yyy.255.218:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2166 -> xxx.yyy.255.215:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2174 -> xxx.yyy.255.223:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2162 -> xxx.yyy.255.211:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2173 -> xxx.yyy.255.222:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2168 -> xxx.yyy.255.217:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2165 -> xxx.yyy.255.214:1433 SYN ******S* >>Oct 7 04:10:09 216.117.178.238:2167 -> xxx.yyy.255.216:1433 SYN ******S* >>98758 >> >>Oct 7 21:55:07 67.101.226.131:3655 -> xxx.yyy.1.1:25 SYN ******S* >>Oct 7 21:55:04 67.101.226.131:3659 -> xxx.yyy.1.2:25 SYN ******S* >>Oct 7 21:55:07 67.101.226.131:3663 -> xxx.yyy.1.3:25 SYN ******S* >>Oct 7 21:55:04 67.101.226.131:3668 -> xxx.yyy.1.4:25 SYN ******S* >>Oct 7 21:55:04 67.101.226.131:3669 -> xxx.yyy.1.6:25 SYN ******S* >>Oct 7 21:55:04 67.101.226.131:3671 -> xxx.yyy.1.5:25 SYN ******S* >>Oct 7 21:55:07 67.101.226.131:3672 -> xxx.yyy.1.7:25 SYN ******S* >>Oct 7 21:55:04 67.101.226.131:3676 -> xxx.yyy.1.8:25 SYN ******S* >>[...] >>Oct 7 22:16:51 67.101.226.131:3188 -> xxx.yyy.255.240:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3213 -> xxx.yyy.255.254:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3212 -> xxx.yyy.255.253:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3209 -> xxx.yyy.255.252:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3205 -> xxx.yyy.255.251:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3201 -> xxx.yyy.255.249:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3200 -> xxx.yyy.255.248:25 SYN ******S* >>Oct 7 22:16:51 67.101.226.131:3199 -> xxx.yyy.255.247:25 SYN ******S* >>74544 >> >>Oct 7 08:44:05 213.114.2.225:3174 -> xxx.yyy.1.0:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3177 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3181 -> xxx.yyy.1.2:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3182 -> xxx.yyy.1.3:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3185 -> xxx.yyy.1.5:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3187 -> xxx.yyy.1.7:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3188 -> xxx.yyy.1.8:1433 SYN ******S* >>Oct 7 08:44:05 213.114.2.225:3189 -> xxx.yyy.1.9:1433 SYN ******S* >>[...] >>Oct 7 12:31:18 213.114.2.225:2972 -> xxx.yyy.255.254:1433 SYN ******S* >>Oct 7 12:31:19 213.114.2.225:4439 -> xxx.yyy.255.235:1433 SYN ******S* >>Oct 7 12:31:20 213.114.2.225:4847 -> xxx.yyy.255.236:1433 SYN ******S* >>Oct 7 12:31:20 213.114.2.225:1163 -> xxx.yyy.255.238:1433 SYN ******S* >>Oct 7 12:31:21 213.114.2.225:1587 -> xxx.yyy.255.241:1433 SYN ******S* >>Oct 7 12:31:21 213.114.2.225:1691 -> xxx.yyy.255.242:1433 SYN ******S* >>Oct 7 12:31:23 213.114.2.225:2526 -> xxx.yyy.255.248:1433 SYN ******S* >>Oct 7 12:31:23 213.114.2.225:2597 -> xxx.yyy.255.251:1433 SYN ******S* >>Oct 7 12:31:23 213.114.2.225:2585 -> xxx.yyy.255.250:1433 SYN ******S* >>69831 >> >>Oct 7 03:41:48 213.140.17.111:57699 -> xxx.yyy.1.44:1433 SYN ******S* >>Oct 7 03:41:48 213.140.17.111:57703 -> xxx.yyy.1.45:1433 SYN ******S* >>Oct 7 03:41:48 213.140.17.111:57705 -> xxx.yyy.1.46:1433 SYN ******S* >>Oct 7 03:41:48 213.140.17.111:57707 -> xxx.yyy.1.47:1433 SYN ******S* >>Oct 7 03:41:48 213.140.17.111:57710 -> xxx.yyy.1.48:1433 SYN ******S* >>Oct 7 03:41:48 213.140.17.111:57711 -> xxx.yyy.1.49:1433 SYN ******S* >>Oct 7 03:41:48 213.140.17.111:57714 -> xxx.yyy.1.50:1433 SYN ******S* >>Oct 7 03:41:46 213.140.17.111:57783 -> xxx.yyy.1.84:1433 SYN ******S* >>[...] >>Oct 7 07:30:27 213.140.17.111:27143 -> xxx.yyy.255.227:1433 SYN ******S* >>Oct 7 07:30:27 213.140.17.111:27142 -> xxx.yyy.255.226:1433 SYN ******S* >>Oct 7 07:30:27 213.140.17.111:27399 -> xxx.yyy.255.246:1433 SYN ******S* >>Oct 7 07:30:27 213.140.17.111:27402 -> xxx.yyy.255.247:1433 SYN ******S* >>Oct 7 07:30:28 213.140.17.111:27190 -> xxx.yyy.255.230:1433 SYN ******S* >>Oct 7 07:30:31 213.140.17.111:27258 -> xxx.yyy.255.235:1433 SYN ******S* >>Oct 7 07:30:31 213.140.17.111:27271 -> xxx.yyy.255.236:1433 SYN ******S* >>Oct 7 07:30:33 213.140.17.111:27402 -> xxx.yyy.255.247:1433 SYN ******S* >>Oct 7 07:30:33 213.140.17.111:27399 -> xxx.yyy.255.246:1433 SYN ******S* >>64798 >> >>Oct 7 17:23:41 68.80.153.172:3988 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 17:23:41 68.80.153.172:3986 -> xxx.yyy.1.0:1433 SYN ******S* >>Oct 7 17:23:41 68.80.153.172:3996 -> xxx.yyy.1.5:1433 SYN ******S* >>Oct 7 17:23:41 68.80.153.172:3990 -> xxx.yyy.1.2:1433 SYN ******S* >>Oct 7 17:23:38 68.80.153.172:4004 -> xxx.yyy.1.9:1433 SYN ******S* >>Oct 7 17:23:38 68.80.153.172:4000 -> xxx.yyy.1.7:1433 SYN ******S* >>Oct 7 17:23:39 68.80.153.172:4006 -> xxx.yyy.1.10:1433 SYN ******S* >>Oct 7 17:23:39 68.80.153.172:4011 -> xxx.yyy.1.13:1433 SYN ******S* >>[...] >>Oct 7 20:32:23 68.80.153.172:3694 -> xxx.yyy.203.139:1433 SYN ******S* >>Oct 7 20:32:23 68.80.153.172:3713 -> xxx.yyy.203.144:1433 SYN ******S* >>Oct 7 20:32:23 68.80.153.172:3706 -> xxx.yyy.203.142:1433 SYN ******S* >>Oct 7 20:32:23 68.80.153.172:3717 -> xxx.yyy.203.146:1433 SYN ******S* >>Oct 7 20:32:23 68.80.153.172:3620 -> xxx.yyy.203.127:1433 SYN ******S* >>Oct 7 20:32:24 68.80.153.172:3628 -> xxx.yyy.203.129:1433 SYN ******S* >>Oct 7 20:32:24 68.80.153.172:3479 -> xxx.yyy.203.104:1433 SYN ******S* >>Oct 7 20:32:24 68.80.153.172:3730 -> xxx.yyy.203.149:1433 SYN ******S* >>Oct 7 20:32:25 68.80.153.172:3487 -> xxx.yyy.203.106:1433 SYN ******S* >>55237 >> >>Oct 7 02:14:18 220.112.134.192:4975 -> xxx.yyy.1.7:1433 SYN ******S* >>Oct 7 02:14:18 220.112.134.192:4962 -> xxx.yyy.1.4:1433 SYN ******S* >>Oct 7 02:14:21 220.112.134.192:1044 -> xxx.yyy.1.16:1433 SYN ******S* >>Oct 7 02:14:21 220.112.134.192:1046 -> xxx.yyy.1.18:1433 SYN ******S* >>Oct 7 02:14:21 220.112.134.192:1052 -> xxx.yyy.1.20:1433 SYN ******S* >>Oct 7 02:14:19 220.112.134.192:4985 -> xxx.yyy.1.9:1433 SYN ******S* >>Oct 7 02:14:19 220.112.134.192:4999 -> xxx.yyy.1.12:1433 SYN ******S* >>Oct 7 02:14:19 220.112.134.192:1027 -> xxx.yyy.1.13:1433 SYN ******S* >>[...] >>Oct 7 05:37:25 220.112.134.192:1452 -> xxx.yyy.226.190:1433 SYN ******S* >>Oct 7 05:37:25 220.112.134.192:2191 -> xxx.yyy.226.248:1433 SYN ******S* >>Oct 7 05:37:26 220.112.134.192:1482 -> xxx.yyy.226.193:1433 SYN ******S* >>Oct 7 05:37:26 220.112.134.192:1947 -> xxx.yyy.226.230:1433 SYN ******S* >>Oct 7 05:37:26 220.112.134.192:1447 -> xxx.yyy.226.189:1433 SYN ******S* >>Oct 7 05:37:26 220.112.134.192:1964 -> xxx.yyy.226.231:1433 SYN ******S* >>Oct 7 05:37:26 220.112.134.192:1971 -> xxx.yyy.226.235:1433 SYN ******S* >>Oct 7 05:37:26 220.112.134.192:1965 -> xxx.yyy.226.232:1433 SYN ******S* >>Oct 7 05:37:27 220.112.134.192:1996 -> xxx.yyy.226.236:1433 SYN ******S* >>53034 >> >>Oct 7 00:14:04 62.194.134.252:4275 -> xxx.yyy.1.1:1024 SYN ******S* >>Oct 7 00:14:06 62.194.134.252:4278 -> xxx.yyy.1.4:1024 SYN ******S* >>Oct 7 00:14:04 62.194.134.252:4277 -> xxx.yyy.1.3:1024 SYN ******S* >>Oct 7 00:14:06 62.194.134.252:4279 -> xxx.yyy.1.5:1024 SYN ******S* >>Oct 7 00:14:06 62.194.134.252:4280 -> xxx.yyy.1.6:1024 SYN ******S* >>Oct 7 00:14:06 62.194.134.252:4281 -> xxx.yyy.1.7:1024 SYN ******S* >>Oct 7 00:14:03 62.194.134.252:4283 -> xxx.yyy.1.9:1024 SYN ******S* >>Oct 7 00:14:03 62.194.134.252:4284 -> xxx.yyy.1.10:1024 SYN ******S* >>[...] >>Oct 7 06:24:41 62.194.134.252:4933 -> xxx.yyy.220.2:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4935 -> xxx.yyy.224.67:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4936 -> xxx.yyy.224.141:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4939 -> xxx.yyy.236.69:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4938 -> xxx.yyy.236.65:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4942 -> xxx.yyy.248.80:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4943 -> xxx.yyy.248.165:1024 SYN ******S* >>Oct 7 06:24:41 62.194.134.252:4946 -> xxx.yyy.249.249:1024 SYN ******S* >>47347 >> >>Oct 7 18:43:30 208.178.29.48:1264 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 18:43:30 208.178.29.48:1266 -> xxx.yyy.1.3:1433 SYN ******S* >>Oct 7 18:43:30 208.178.29.48:1270 -> xxx.yyy.1.7:1433 SYN ******S* >>Oct 7 18:43:33 208.178.29.48:1274 -> xxx.yyy.1.11:1433 SYN ******S* >>Oct 7 18:43:30 208.178.29.48:1277 -> xxx.yyy.1.14:1433 SYN ******S* >>Oct 7 18:43:33 208.178.29.48:1284 -> xxx.yyy.1.21:1433 SYN ******S* >>Oct 7 18:43:33 208.178.29.48:1287 -> xxx.yyy.1.24:1433 SYN ******S* >>Oct 7 18:43:33 208.178.29.48:1288 -> xxx.yyy.1.25:1433 SYN ******S* >>[...] >>Oct 7 18:55:14 208.178.29.48:2360 -> xxx.yyy.255.198:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2381 -> xxx.yyy.255.214:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2374 -> xxx.yyy.255.207:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2389 -> xxx.yyy.255.222:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2390 -> xxx.yyy.255.223:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2383 -> xxx.yyy.255.216:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2393 -> xxx.yyy.255.226:1433 SYN ******S* >>Oct 7 18:55:14 208.178.29.48:2423 -> xxx.yyy.255.249:1433 SYN ******S* >>Oct 7 18:55:15 208.178.29.48:2427 -> xxx.yyy.255.253:1433 SYN ******S* >>46659 >> >>Oct 7 10:45:21 217.153.4.42:2808 -> xxx.yyy.1.0:1433 SYN ******S* >>Oct 7 10:45:24 217.153.4.42:2809 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 10:45:21 217.153.4.42:2813 -> xxx.yyy.1.5:1433 SYN ******S* >>Oct 7 10:45:22 217.153.4.42:2824 -> xxx.yyy.1.14:1433 SYN ******S* >>Oct 7 10:45:22 217.153.4.42:2826 -> xxx.yyy.1.16:1433 SYN ******S* >>Oct 7 10:45:22 217.153.4.42:2827 -> xxx.yyy.1.17:1433 SYN ******S* >>Oct 7 10:45:22 217.153.4.42:2829 -> xxx.yyy.1.19:1433 SYN ******S* >>Oct 7 10:45:22 217.153.4.42:2836 -> xxx.yyy.1.23:1433 SYN ******S* >>[...] >>Oct 7 14:10:40 217.153.4.42:2318 -> xxx.yyy.229.129:1433 SYN ******S* >>Oct 7 14:10:40 217.153.4.42:2484 -> xxx.yyy.229.142:1433 SYN ******S* >>Oct 7 14:10:40 217.153.4.42:2320 -> xxx.yyy.229.131:1433 SYN ******S* >>Oct 7 14:10:40 217.153.4.42:2488 -> xxx.yyy.229.143:1433 SYN ******S* >>Oct 7 14:10:41 217.153.4.42:2510 -> xxx.yyy.229.147:1433 SYN ******S* >>Oct 7 14:10:41 217.153.4.42:2511 -> xxx.yyy.229.148:1433 SYN ******S* >>Oct 7 14:10:41 217.153.4.42:2512 -> xxx.yyy.229.149:1433 SYN ******S* >>Oct 7 14:10:41 217.153.4.42:2526 -> xxx.yyy.229.151:1433 SYN ******S* >>46607 >> >>Oct 7 17:53:10 65.184.57.202:1831 -> xxx.yyy.1.2:6129 SYN ******S* >>Oct 7 17:53:12 65.184.57.202:1835 -> xxx.yyy.1.4:6129 SYN ******S* >>Oct 7 17:53:12 65.184.57.202:1838 -> xxx.yyy.1.5:6129 SYN ******S* >>Oct 7 17:53:12 65.184.57.202:1839 -> xxx.yyy.1.6:6129 SYN ******S* >>Oct 7 17:53:09 65.184.57.202:1843 -> xxx.yyy.1.8:6129 SYN ******S* >>Oct 7 17:53:09 65.184.57.202:1846 -> xxx.yyy.1.9:6129 SYN ******S* >>Oct 7 17:53:12 65.184.57.202:1847 -> xxx.yyy.1.10:6129 SYN ******S* >>Oct 7 17:53:10 65.184.57.202:1850 -> xxx.yyy.1.11:6129 SYN ******S* >>[...] >>Oct 7 18:05:00 65.184.57.202:2105 -> xxx.yyy.255.215:6129 SYN ******S* >>Oct 7 18:05:00 65.184.57.202:2111 -> xxx.yyy.255.218:6129 SYN ******S* >>Oct 7 18:05:00 65.184.57.202:2101 -> xxx.yyy.255.213:6129 SYN ******S* >>Oct 7 18:05:00 65.184.57.202:2113 -> xxx.yyy.255.219:6129 SYN ******S* >>Oct 7 18:05:01 65.184.57.202:2184 -> xxx.yyy.255.254:6129 SYN ******S* >>Oct 7 18:05:01 65.184.57.202:2176 -> xxx.yyy.255.250:6129 SYN ******S* >>Oct 7 18:05:01 65.184.57.202:2178 -> xxx.yyy.255.251:6129 SYN ******S* >>Oct 7 18:05:01 65.184.57.202:2182 -> xxx.yyy.255.253:6129 SYN ******S* >>Oct 7 18:05:01 65.184.57.202:2180 -> xxx.yyy.255.252:6129 SYN ******S* >>41736 >> >>Oct 7 06:17:46 82.35.31.97:3081 -> xxx.yyy.1.1:5900 SYN ******S* >>Oct 7 06:17:46 82.35.31.97:3082 -> xxx.yyy.1.2:5900 SYN ******S* >>Oct 7 06:17:46 82.35.31.97:3083 -> xxx.yyy.1.3:5900 SYN ******S* >>Oct 7 06:17:48 82.35.31.97:3084 -> xxx.yyy.1.4:5900 SYN ******S* >>Oct 7 06:17:48 82.35.31.97:3085 -> xxx.yyy.1.5:5900 SYN ******S* >>Oct 7 06:17:48 82.35.31.97:3087 -> xxx.yyy.1.7:5900 SYN ******S* >>Oct 7 06:17:48 82.35.31.97:3086 -> xxx.yyy.1.6:5900 SYN ******S* >>Oct 7 06:17:52 82.35.31.97:3088 -> xxx.yyy.1.8:5900 SYN ******S* >>[...] >>Oct 7 15:50:23 82.35.31.97:3766 -> xxx.yyy.255.235:5900 SYN ******S* >>Oct 7 15:50:23 82.35.31.97:3226 -> xxx.yyy.255.234:5900 SYN ******S* >>Oct 7 15:50:23 82.35.31.97:4374 -> xxx.yyy.255.236:5900 SYN ******S* >>Oct 7 15:50:24 82.35.31.97:3218 -> xxx.yyy.255.241:5900 SYN ******S* >>Oct 7 15:50:24 82.35.31.97:3226 -> xxx.yyy.255.242:5900 SYN ******S* >>Oct 7 15:50:27 82.35.31.97:4374 -> xxx.yyy.255.244:5900 SYN ******S* >>Oct 7 15:50:31 82.35.31.97:3218 -> xxx.yyy.255.249:5900 SYN ******S* >>Oct 7 15:50:31 82.35.31.97:3226 -> xxx.yyy.255.250:5900 SYN ******S* >>Oct 7 15:50:28 82.35.31.97:4374 -> xxx.yyy.255.252:5900 SYN ******S* >>41509 >> >>Oct 7 02:20:01 134.159.109.240:1706 -> xxx.yyy.1.1:4899 SYN ******S* >>Oct 7 02:20:01 134.159.109.240:1707 -> xxx.yyy.1.2:4899 SYN ******S* >>Oct 7 02:20:01 134.159.109.240:1708 -> xxx.yyy.1.3:4899 SYN ******S* >>Oct 7 02:19:59 134.159.109.240:1709 -> xxx.yyy.1.4:4899 SYN ******S* >>Oct 7 02:19:59 134.159.109.240:1710 -> xxx.yyy.1.5:4899 SYN ******S* >>Oct 7 02:19:59 134.159.109.240:1711 -> xxx.yyy.1.6:4899 SYN ******S* >>Oct 7 02:19:59 134.159.109.240:1712 -> xxx.yyy.1.7:4899 SYN ******S* >>Oct 7 02:19:59 134.159.109.240:1713 -> xxx.yyy.1.8:4899 SYN ******S* >>[...] >>Oct 7 02:26:03 134.159.109.240:1392 -> xxx.yyy.255.246:4899 SYN ******S* >>Oct 7 02:26:03 134.159.109.240:1393 -> xxx.yyy.255.247:4899 SYN ******S* >>Oct 7 02:26:03 134.159.109.240:1394 -> xxx.yyy.255.248:4899 SYN ******S* >>Oct 7 02:26:03 134.159.109.240:1395 -> xxx.yyy.255.249:4899 SYN ******S* >>Oct 7 02:26:03 134.159.109.240:1396 -> xxx.yyy.255.250:4899 SYN ******S* >>Oct 7 02:26:03 134.159.109.240:1399 -> xxx.yyy.255.253:4899 SYN ******S* >>Oct 7 02:26:05 134.159.109.240:1084 -> xxx.yyy.255.47:4899 SYN ******S* >>Oct 7 02:26:05 134.159.109.240:1085 -> xxx.yyy.255.48:4899 SYN ******S* >>Oct 7 02:26:05 134.159.109.240:1086 -> xxx.yyy.255.49:4899 SYN ******S* >>40370 >> >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.1:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.2:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.3:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.4:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.6:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.9:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.14:80 SYN ******S* >>Oct 7 02:53:14 211.75.221.105:80 -> xxx.yyy.1.15:80 SYN ******S* >>[...] >>Oct 7 02:55:20 211.75.221.105:1623 -> xxx.yyy.248.80:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1624 -> xxx.yyy.249.249:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1625 -> xxx.yyy.249.5:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1626 -> xxx.yyy.252.124:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1627 -> xxx.yyy.252.20:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1628 -> xxx.yyy.252.21:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1629 -> xxx.yyy.29.214:80 SYN ******S* >>Oct 7 02:55:20 211.75.221.105:1630 -> xxx.yyy.4.20:80 SYN ******S* >>38072 >> >>Oct 7 15:59:58 24.205.116.79:2268 -> xxx.yyy.1.1:1024 SYN ******S* >>Oct 7 15:59:57 24.205.116.79:2270 -> xxx.yyy.1.3:1024 SYN ******S* >>Oct 7 15:59:57 24.205.116.79:2271 -> xxx.yyy.1.4:1024 SYN ******S* >>Oct 7 15:59:57 24.205.116.79:2274 -> xxx.yyy.1.7:1024 SYN ******S* >>Oct 7 15:59:57 24.205.116.79:2277 -> xxx.yyy.1.10:1024 SYN ******S* >>Oct 7 15:59:57 24.205.116.79:2281 -> xxx.yyy.1.14:1024 SYN ******S* >>Oct 7 15:59:57 24.205.116.79:2285 -> xxx.yyy.1.17:1024 SYN ******S* >>Oct 7 15:59:58 24.205.116.79:2288 -> xxx.yyy.1.20:1024 SYN ******S* >>[...] >>Oct 7 16:11:17 24.205.116.79:3181 -> xxx.yyy.255.203:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3184 -> xxx.yyy.255.206:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3202 -> xxx.yyy.255.224:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3213 -> xxx.yyy.255.235:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3216 -> xxx.yyy.255.238:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3220 -> xxx.yyy.255.242:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3221 -> xxx.yyy.255.243:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3227 -> xxx.yyy.255.249:1024 SYN ******S* >>Oct 7 16:11:18 24.205.116.79:3229 -> xxx.yyy.255.251:1024 SYN ******S* >>36711 >> >>Oct 7 20:33:03 65.92.93.45:3995 -> xxx.yyy.1.0:1433 SYN ******S* >>Oct 7 20:33:03 65.92.93.45:1740 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 20:33:04 65.92.93.45:4700 -> xxx.yyy.1.10:1433 SYN ******S* >>Oct 7 20:33:01 65.92.93.45:1312 -> xxx.yyy.1.17:1433 SYN ******S* >>Oct 7 20:33:02 65.92.93.45:3087 -> xxx.yyy.1.25:1433 SYN ******S* >>Oct 7 20:33:05 65.92.93.45:2109 -> xxx.yyy.1.26:1433 SYN ******S* >>Oct 7 20:33:03 65.92.93.45:3477 -> xxx.yyy.1.2:1433 SYN ******S* >>Oct 7 20:33:04 65.92.93.45:2570 -> xxx.yyy.1.8:1433 SYN ******S* >>[...] >>Oct 7 22:47:55 65.92.93.45:2666 -> xxx.yyy.255.251:1433 SYN ******S* >>Oct 7 22:47:55 65.92.93.45:4195 -> xxx.yyy.255.254:1433 SYN ******S* >>Oct 7 22:47:56 65.92.93.45:1127 -> xxx.yyy.255.210:1433 SYN ******S* >>Oct 7 22:47:56 65.92.93.45:4561 -> xxx.yyy.255.214:1433 SYN ******S* >>Oct 7 22:47:57 65.92.93.45:4552 -> xxx.yyy.255.222:1433 SYN ******S* >>Oct 7 22:47:58 65.92.93.45:3995 -> xxx.yyy.255.224:1433 SYN ******S* >>Oct 7 22:47:58 65.92.93.45:3638 -> xxx.yyy.255.225:1433 SYN ******S* >>Oct 7 22:47:58 65.92.93.45:4787 -> xxx.yyy.255.231:1433 SYN ******S* >>Oct 7 22:48:01 65.92.93.45:4195 -> xxx.yyy.255.254:1433 SYN ******S* >>33703 >> >>Oct 7 16:21:15 137.120.9.179:2677 -> xxx.yyy.1.4:6543 SYN ******S* >>Oct 7 16:21:15 137.120.9.179:2680 -> xxx.yyy.1.5:6543 SYN ******S* >>Oct 7 16:21:15 137.120.9.179:2704 -> xxx.yyy.1.13:6543 SYN ******S* >>Oct 7 16:21:14 137.120.9.179:2707 -> xxx.yyy.1.14:6543 SYN ******S* >>Oct 7 16:21:12 137.120.9.179:2719 -> xxx.yyy.1.18:6543 SYN ******S* >>Oct 7 16:21:13 137.120.9.179:2722 -> xxx.yyy.1.19:6543 SYN ******S* >>Oct 7 16:21:13 137.120.9.179:2769 -> xxx.yyy.1.35:6543 SYN ******S* >>Oct 7 16:21:13 137.120.9.179:2772 -> xxx.yyy.1.36:6543 SYN ******S* >>[...] >>Oct 7 16:33:02 137.120.9.179:3544 -> xxx.yyy.255.224:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3580 -> xxx.yyy.255.236:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3565 -> xxx.yyy.255.231:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3571 -> xxx.yyy.255.233:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3568 -> xxx.yyy.255.232:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3574 -> xxx.yyy.255.234:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3559 -> xxx.yyy.255.229:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3562 -> xxx.yyy.255.230:6543 SYN ******S* >>Oct 7 16:33:02 137.120.9.179:3589 -> xxx.yyy.255.239:6543 SYN ******S* >>31614 >> >>Oct 7 15:05:36 194.185.86.28:2541 -> xxx.yyy.1.6:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2538 -> xxx.yyy.1.3:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2546 -> xxx.yyy.1.11:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2548 -> xxx.yyy.1.13:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2550 -> xxx.yyy.1.15:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2553 -> xxx.yyy.1.18:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2554 -> xxx.yyy.1.19:80 SYN ******S* >>Oct 7 15:05:36 194.185.86.28:2556 -> xxx.yyy.1.21:80 SYN ******S* >>[...] >>Oct 7 15:14:09 194.185.86.28:3420 -> xxx.yyy.255.238:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3365 -> xxx.yyy.255.184:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3388 -> xxx.yyy.255.206:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3349 -> xxx.yyy.255.168:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3401 -> xxx.yyy.255.219:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3417 -> xxx.yyy.255.235:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3379 -> xxx.yyy.255.197:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3359 -> xxx.yyy.255.178:80 SYN ******S* >>Oct 7 15:14:09 194.185.86.28:3408 -> xxx.yyy.255.226:80 SYN ******S* >>29181 >> >>Oct 7 01:35:07 221.195.16.7:4107 -> xxx.yyy.67.102:1433 SYN ******S* >>Oct 7 01:35:10 221.195.16.7:4108 -> xxx.yyy.67.103:1433 SYN ******S* >>Oct 7 01:35:10 221.195.16.7:4115 -> xxx.yyy.67.105:1433 SYN ******S* >>Oct 7 01:35:10 221.195.16.7:4114 -> xxx.yyy.67.104:1433 SYN ******S* >>Oct 7 01:35:10 221.195.16.7:4116 -> xxx.yyy.67.106:1433 SYN ******S* >>Oct 7 01:35:10 221.195.16.7:4123 -> xxx.yyy.67.107:1433 SYN ******S* >>Oct 7 01:35:08 221.195.16.7:4125 -> xxx.yyy.67.108:1433 SYN ******S* >>Oct 7 01:35:08 221.195.16.7:4134 -> xxx.yyy.67.112:1433 SYN ******S* >>[...] >>Oct 7 03:03:52 221.195.16.7:4428 -> xxx.yyy.158.14:1433 SYN ******S* >>Oct 7 03:03:52 221.195.16.7:4422 -> xxx.yyy.158.13:1433 SYN ******S* >>Oct 7 03:03:52 221.195.16.7:4437 -> xxx.yyy.158.16:1433 SYN ******S* >>Oct 7 03:03:52 221.195.16.7:4432 -> xxx.yyy.158.15:1433 SYN ******S* >>Oct 7 03:03:53 221.195.16.7:4461 -> xxx.yyy.158.19:1433 SYN ******S* >>Oct 7 03:03:53 221.195.16.7:4449 -> xxx.yyy.158.18:1433 SYN ******S* >>Oct 7 03:03:53 221.195.16.7:4480 -> xxx.yyy.158.22:1433 SYN ******S* >>Oct 7 03:03:53 221.195.16.7:4472 -> xxx.yyy.158.21:1433 SYN ******S* >>Oct 7 03:03:53 221.195.16.7:4467 -> xxx.yyy.158.20:1433 SYN ******S* >>28010 >> >>Oct 7 02:27:10 61.142.73.201:31961 -> xxx.yyy.1.4:1433 SYN ******S* >>Oct 7 02:27:13 61.142.73.201:1382 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 02:27:10 61.142.73.201:32136 -> xxx.yyy.1.5:1433 SYN ******S* >>Oct 7 02:27:10 61.142.73.201:28265 -> xxx.yyy.1.8:1433 SYN ******S* >>Oct 7 02:27:10 61.142.73.201:1395 -> xxx.yyy.1.10:1433 SYN ******S* >>Oct 7 02:27:13 61.142.73.201:5990 -> xxx.yyy.1.14:1433 SYN ******S* >>Oct 7 02:27:13 61.142.73.201:1393 -> xxx.yyy.1.9:1433 SYN ******S* >>Oct 7 02:27:13 61.142.73.201:1405 -> xxx.yyy.1.18:1433 SYN ******S* >>[...] >>Oct 7 04:39:43 61.142.73.201:8036 -> xxx.yyy.148.205:1433 SYN ******S* >>Oct 7 04:39:43 61.142.73.201:8146 -> xxx.yyy.148.207:1433 SYN ******S* >>Oct 7 04:39:43 61.142.73.201:5206 -> xxx.yyy.148.196:1433 SYN ******S* >>Oct 7 04:39:43 61.142.73.201:10077 -> xxx.yyy.148.212:1433 SYN ******S* >>Oct 7 04:39:44 61.142.73.201:7843 -> xxx.yyy.148.202:1433 SYN ******S* >>Oct 7 04:39:44 61.142.73.201:6806 -> xxx.yyy.148.147:1433 SYN ******S* >>Oct 7 04:39:44 61.142.73.201:6979 -> xxx.yyy.148.149:1433 SYN ******S* >>Oct 7 04:39:45 61.142.73.201:1715 -> xxx.yyy.148.153:1433 SYN ******S* >>20652 >> >>Oct 7 12:52:35 82.224.192.58:1460 -> xxx.yyy.1.1:1433 SYN ******S* >>Oct 7 12:52:35 82.224.192.58:1467 -> xxx.yyy.1.2:1433 SYN ******S* >>Oct 7 12:52:32 82.224.192.58:1469 -> xxx.yyy.1.3:1433 SYN ******S* >>Oct 7 12:52:32 82.224.192.58:1471 -> xxx.yyy.1.4:1433 SYN ******S* >>Oct 7 12:52:32 82.224.192.58:1477 -> xxx.yyy.1.5:1433 SYN ******S* >>Oct 7 12:52:35 82.224.192.58:1483 -> xxx.yyy.1.7:1433 SYN ******S* >>Oct 7 12:52:33 82.224.192.58:1519 -> xxx.yyy.1.13:1433 SYN ******S* >>Oct 7 12:52:33 82.224.192.58:1539 -> xxx.yyy.1.18:1433 SYN ******S* >>[...] >>Oct 7 14:52:26 82.224.192.58:1440 -> xxx.yyy.134.77:1433 SYN ******S* >>Oct 7 14:52:26 82.224.192.58:1437 -> xxx.yyy.134.76:1433 SYN ******S* >>Oct 7 14:52:26 82.224.192.58:1442 -> xxx.yyy.134.78:1433 SYN ******S* >>Oct 7 14:52:26 82.224.192.58:1443 -> xxx.yyy.134.79:1433 SYN ******S* >>Oct 7 14:52:27 82.224.192.58:1446 -> xxx.yyy.134.82:1433 SYN ******S* >>Oct 7 14:52:27 82.224.192.58:1624 -> xxx.yyy.134.120:1433 SYN ******S* >>Oct 7 14:52:27 82.224.192.58:1626 -> xxx.yyy.134.121:1433 SYN ******S* >>Oct 7 14:52:27 82.224.192.58:1449 -> xxx.yyy.134.83:1433 SYN ******S* >>Oct 7 14:52:28 82.224.192.58:1451 -> xxx.yyy.134.84:1433 SYN ******S* >>19425 >> >>Oct 7 06:56:33 62.143.57.156:3488 -> xxx.yyy.133.234:5554 SYN ******S* >>Oct 7 06:56:34 62.143.57.156:3660 -> xxx.yyy.133.234:1023 SYN ******S* >>Oct 7 06:56:36 62.143.57.156:4055 -> xxx.yyy.133.234:9898 SYN ******S* >>Oct 7 06:56:33 62.143.57.156:3489 -> xxx.yyy.133.235:5554 SYN ******S* >>Oct 7 06:56:34 62.143.57.156:3661 -> xxx.yyy.133.235:1023 SYN ******S* >>Oct 7 06:56:36 62.143.57.156:4056 -> xxx.yyy.133.235:9898 SYN ******S* >>Oct 7 06:56:33 62.143.57.156:3491 -> xxx.yyy.133.236:5554 SYN ******S* >>Oct 7 06:56:34 62.143.57.156:3666 -> xxx.yyy.133.236:1023 SYN ******S* >>[...] >>Oct 7 06:59:47 62.143.57.156:3376 -> xxx.yyy.154.65:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3378 -> xxx.yyy.154.66:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3380 -> xxx.yyy.154.68:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3382 -> xxx.yyy.154.69:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3383 -> xxx.yyy.154.70:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3385 -> xxx.yyy.154.71:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3386 -> xxx.yyy.154.72:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3388 -> xxx.yyy.154.88:9898 SYN ******S* >>Oct 7 06:59:47 62.143.57.156:3389 -> xxx.yyy.154.89:9898 SYN ******S* >>14520 >> >>[...] >>11423 >> >>Oct 7 04:09:35 66.215.53.237:3376 -> xxx.yyy.1.54:1433 SYN ******S* >>Oct 7 04:09:33 66.215.53.237:4202 -> xxx.yyy.1.60:1433 SYN ******S* >>Oct 7 04:09:33 66.215.53.237:4661 -> xxx.yyy.1.62:1433 SYN ******S* >>Oct 7 04:09:33 66.215.53.237:4876 -> xxx.yyy.1.63:1433 SYN ******S* >>Oct 7 04:09:37 66.215.53.237:1725 -> xxx.yyy.1.129:1433 SYN ******S* >>Oct 7 04:09:37 66.215.53.237:2383 -> xxx.yyy.1.131:1433 SYN ******S* >>Oct 7 04:09:37 66.215.53.237:2415 -> xxx.yyy.1.132:1433 SYN ******S* >>Oct 7 04:09:34 66.215.53.237:2520 -> xxx.yyy.1.133:1433 SYN ******S* >>[...] >>Oct 7 04:36:45 66.215.53.237:3799 -> xxx.yyy.255.161:1433 SYN ******S* >>Oct 7 04:36:45 66.215.53.237:4101 -> xxx.yyy.255.165:1433 SYN ******S* >>Oct 7 04:36:46 66.215.53.237:4450 -> xxx.yyy.255.170:1433 SYN ******S* >>Oct 7 04:36:46 66.215.53.237:4175 -> xxx.yyy.255.169:1433 SYN ******S* >>Oct 7 04:36:46 66.215.53.237:4548 -> xxx.yyy.255.174:1433 SYN ******S* >>Oct 7 04:36:46 66.215.53.237:4495 -> xxx.yyy.255.173:1433 SYN ******S* >>Oct 7 04:36:46 66.215.53.237:4568 -> xxx.yyy.255.175:1433 SYN ******S* >>Oct 7 04:36:47 66.215.53.237:3004 -> xxx.yyy.255.226:1433 SYN ******S* >>Oct 7 04:36:47 66.215.53.237:3149 -> xxx.yyy.255.236:1433 SYN ******S* >>10778 >> >>Oct 7 15:06:18 81.202.116.180:3917 -> xxx.yyy.1.131:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4305 -> xxx.yyy.1.138:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4306 -> xxx.yyy.1.139:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4315 -> xxx.yyy.1.148:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4309 -> xxx.yyy.1.142:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4310 -> xxx.yyy.1.143:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4312 -> xxx.yyy.1.145:17300 SYN ******S* >>Oct 7 15:06:20 81.202.116.180:4308 -> xxx.yyy.1.141:17300 SYN ******S* >>[...] >>Oct 7 16:55:16 81.202.116.180:2248 -> xxx.yyy.254.220:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2622 -> xxx.yyy.254.232:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2617 -> xxx.yyy.254.227:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2623 -> xxx.yyy.254.233:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2615 -> xxx.yyy.254.225:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2620 -> xxx.yyy.254.230:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2625 -> xxx.yyy.254.235:17300 SYN ******S* >>Oct 7 16:55:18 81.202.116.180:2628 -> xxx.yyy.254.238:17300 SYN ******S* >>Oct 7 16:55:20 81.202.116.180:3000 -> xxx.yyy.254.248:17300 SYN ******S* >>9768 >> >>Oct 7 00:56:28 221.202.142.91:2743 -> xxx.yyy.235.113:5554 SYN ******S* >>Oct 7 00:56:31 221.202.142.91:1552 -> xxx.yyy.235.113:9898 SYN ******S* >>Oct 7 00:56:28 221.202.142.91:2735 -> xxx.yyy.235.112:5554 SYN ******S* >>Oct 7 00:56:28 221.202.142.91:2776 -> xxx.yyy.235.117:5554 SYN ******S* >>Oct 7 00:56:31 221.202.142.91:1588 -> xxx.yyy.235.117:9898 SYN ******S* >>Oct 7 00:56:28 221.202.142.91:2782 -> xxx.yyy.235.118:5554 SYN ******S* >>Oct 7 00:56:29 221.202.142.91:3707 -> xxx.yyy.235.118:1023 SYN ******S* >>Oct 7 00:56:29 221.202.142.91:3258 -> xxx.yyy.235.122:5554 SYN ******S* >>[...] >>Oct 7 00:58:39 221.202.142.91:3332 -> xxx.yyy.255.122:9898 SYN ******S* >>Oct 7 00:58:39 221.202.142.91:3402 -> xxx.yyy.255.142:9898 SYN ******S* >>Oct 7 00:58:39 221.202.142.91:3436 -> xxx.yyy.255.146:9898 SYN ******S* >>Oct 7 00:58:39 221.202.142.91:3563 -> xxx.yyy.255.130:9898 SYN ******S* >>Oct 7 00:58:39 221.202.142.91:3724 -> xxx.yyy.255.168:9898 SYN ******S* >>Oct 7 00:58:39 221.202.142.91:3772 -> xxx.yyy.255.174:9898 SYN ******S* >>Oct 7 00:58:40 221.202.142.91:4924 -> xxx.yyy.255.212:9898 SYN ******S* >>Oct 7 00:58:40 221.202.142.91:1191 -> xxx.yyy.255.234:9898 SYN ******S* >>9057 >> >>Oct 7 00:00:03 222.80.9.33:3685 -> xxx.yyy.222.20:1433 SYN ******S* >>Oct 7 00:00:05 222.80.9.33:3620 -> xxx.yyy.222.76:1433 SYN ******S* >>Oct 7 00:00:06 222.80.9.33:3862 -> xxx.yyy.222.78:1433 SYN ******S* >>Oct 7 00:00:06 222.80.9.33:3881 -> xxx.yyy.222.80:1433 SYN ******S* >>Oct 7 00:00:06 222.80.9.33:4204 -> xxx.yyy.222.84:1433 SYN ******S* >>Oct 7 00:00:07 222.80.9.33:1971 -> xxx.yyy.222.35:1433 SYN ******S* >>Oct 7 00:00:07 222.80.9.33:1541 -> xxx.yyy.222.64:1433 SYN ******S* >>Oct 7 00:00:07 222.80.9.33:2247 -> xxx.yyy.222.67:1433 SYN ******S* >>[...] >>Oct 7 00:30:19 222.80.9.33:1554 -> xxx.yyy.255.249:1433 SYN ******S* >>Oct 7 00:30:20 222.80.9.33:3697 -> xxx.yyy.255.254:1433 SYN ******S* >>Oct 7 00:30:20 222.80.9.33:2296 -> xxx.yyy.255.250:1433 SYN ******S* >>Oct 7 00:30:21 222.80.9.33:2748 -> xxx.yyy.255.229:1433 SYN ******S* >>Oct 7 00:30:21 222.80.9.33:3338 -> xxx.yyy.255.231:1433 SYN ******S* >>Oct 7 00:30:22 222.80.9.33:3639 -> xxx.yyy.255.233:1433 SYN ******S* >>Oct 7 00:30:22 222.80.9.33:3921 -> xxx.yyy.255.237:1433 SYN ******S* >>Oct 7 00:30:23 222.80.9.33:4206 -> xxx.yyy.255.239:1433 SYN ******S* >>Oct 7 00:30:23 222.80.9.33:4330 -> xxx.yyy.255.241:1433 SYN ******S* >>8995 >> >>-- >>- Ken >>=========================================================================== >>Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services >>University of Northern Iowa Cedar Falls, IA 50614-0121 >>email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 >>_______________________________________________ >>Intrusions mailing list >>[email protected] >>http://www.dshield.org/mailman/listinfo/intrusions >> >> >_______________________________________________ >Intrusions mailing list >[email protected] >http://www.dshield.org/mailman/listinfo/intrusions > > -- - Ken ================================================================= Ken Connelly Systems and Operations Manager, ITS Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 It's much more important to know what you don't know than what you do know! _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions