Speaking of scanning
Joel Esler <[email protected]> Sat, 19 Mar 2005 11:41:48 -0500
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
Speaking of scanning. Got hit yesterday with a Mysql root bruteforce. This guy went at my machine for about 4 hours. I wasn't home to mitigate the attack, he didn't get in, but it went for a LONG time. Something like 4000 alerts on the Snort. Joel Esler BASE Project Lead http://secureideas.sourceforge.net On Mar 17, 2005, at 13:29, M. Shirk wrote: > What will I read now while I drink my morning coffee??? > > :-) > > Shirkdog > http://www.shirkdog.us > > > >> From: "kenneth gf brown" <[email protected]> >> Reply-To: "Intrusions List (GCIA Practicals)" >> <[email protected]> >> To: "'Intrusions List (GCIA Practicals)'" <[email protected]> >> Subject: RE: [Intrusions] [LOGS] Summary of large-scale portscanning >> detects >> Date: Wed, 16 Mar 2005 23:32:49 -0600 >> >> >> here here! >> >> >> kenneth gf brown >> >> > -----Original Message----- >> > From: [email protected] >> > [mailto:[email protected]] On Behalf Of Smith, >> Donald >> > Sent: March 16, 2005 08:09 >> > To: Intrusions List (GCIA Practicals); [email protected] >> > Subject: RE: [Intrusions] [LOGS] Summary of large-scale >> > portscanning detects >> > >> > >> > Ken, while I will admit I didn't read EVERY report I wanted >> > to say thanks for providing them. >> > >> > >> > [email protected] giac >> > >> > ________________________________ >> > >> > From: [email protected] on behalf of >> > [email protected] >> > Sent: Tue 3/15/2005 12:35 PM >> > To: [email protected] >> > Subject: [Intrusions] [LOGS] Summary of large-scale >> > portscanning detects >> > >> > >> > >> > This will be the last of these postings for some unknown >> > interval. As of today, I am moving on to a newer version of >> > my IDS that logs scans differently. Dilbert says, "Change is >> > good. You go first." Well, it seems like it's my turn to >> > go... When I figure out how to easily automate a similar >> > report from the new format, these may return. Until then, it's >> > been nice... - ken >> > >> > The following extracts show the beginning and ending of scan >> > activity was detected on my network. The number following >> > each set is the total number of probes for that source. >> > Timestamps are GMT-0600. >> > >> > Mar 14 11:49:37 195.132.74.109:4591 -> xxx.yyy.1.0:1433 SYN >> > ******S* Mar 14 11:49:37 195.132.74.109:4592 -> >> > xxx.yyy.1.1:1433 SYN ******S* Mar 14 11:49:38 >> > 195.132.74.109:4800 -> xxx.yyy.1.23:1433 SYN ******S* Mar 14 >> > 11:49:38 195.132.74.109:4801 -> xxx.yyy.1.24:1433 SYN >> > ******S* Mar 14 11:49:38 195.132.74.109:4796 -> >> > xxx.yyy.1.22:1433 SYN ******S* Mar 14 11:49:38 >> > 195.132.74.109:4795 -> xxx.yyy.1.21:1433 SYN ******S* Mar 14 >> > 11:49:38 195.132.74.109:4802 -> xxx.yyy.1.25:1433 SYN >> > ******S* Mar 14 11:49:38 195.132.74.109:4836 -> >> > xxx.yyy.1.30:1433 SYN ******S* [...] Mar 14 15:21:36 >> > 195.132.74.109:4012 -> xxx.yyy.255.193:1433 SYN ******S* Mar >> > 14 15:21:36 195.132.74.109:4099 -> xxx.yyy.255.196:1433 SYN >> > ******S* Mar 14 15:21:37 195.132.74.109:4132 -> >> > xxx.yyy.255.204:1433 SYN ******S* Mar 14 15:21:37 >> > 195.132.74.109:4200 -> xxx.yyy.255.207:1433 SYN ******S* Mar >> > 14 15:21:37 195.132.74.109:4391 -> xxx.yyy.255.219:1433 SYN >> > ******S* Mar 14 15:21:38 195.132.74.109:4435 -> >> > xxx.yyy.255.237:1433 SYN ******S* Mar 14 15:21:39 >> > 195.132.74.109:4504 -> xxx.yyy.255.242:1433 SYN ******S* Mar >> > 14 15:21:39 195.132.74.109:4566 -> xxx.yyy.255.253:1433 SYN >> > ******S* 93703 >> > >> > Mar 14 09:13:10 212.143.180.113:1975 -> xxx.yyy.1.0:1433 SYN >> > ******S* Mar 14 09:13:10 212.143.180.113:1977 -> >> > xxx.yyy.1.1:1433 SYN ******S* Mar 14 09:13:10 >> > 212.143.180.113:1981 -> xxx.yyy.1.3:1433 SYN ******S* Mar 14 >> > 09:13:10 212.143.180.113:1983 -> xxx.yyy.1.4:1433 SYN >> > ******S* Mar 14 09:13:10 212.143.180.113:1985 -> >> > xxx.yyy.1.5:1433 SYN ******S* Mar 14 09:13:10 >> > 212.143.180.113:1979 -> xxx.yyy.1.2:1433 SYN ******S* Mar 14 >> > 09:13:10 212.143.180.113:1989 -> xxx.yyy.1.7:1433 SYN >> > ******S* Mar 14 09:13:10 212.143.180.113:1987 -> >> > xxx.yyy.1.6:1433 SYN ******S* [...] Mar 14 13:02:54 >> > 212.143.180.113:1084 -> xxx.yyy.255.234:1433 SYN ******S* Mar >> > 14 13:02:54 212.143.180.113:1078 -> xxx.yyy.255.233:1433 SYN >> > ******S* Mar 14 13:02:55 212.143.180.113:1218 -> >> > xxx.yyy.255.237:1433 SYN ******S* Mar 14 13:02:55 >> > 212.143.180.113:1367 -> xxx.yyy.255.240:1433 SYN ******S* Mar >> > 14 13:02:55 212.143.180.113:1329 -> xxx.yyy.255.239:1433 SYN >> > ******S* Mar 14 13:02:55 212.143.180.113:1320 -> >> > xxx.yyy.255.238:1433 SYN ******S* Mar 14 13:02:55 >> > 212.143.180.113:1427 -> xxx.yyy.255.242:1433 SYN ******S* Mar >> > 14 13:02:55 212.143.180.113:1760 -> xxx.yyy.255.245:1433 SYN >> > ******S* Mar 14 13:02:56 212.143.180.113:2461 -> >> > xxx.yyy.255.251:1433 SYN ******S* 78937 >> > >> > Mar 14 07:59:16 66.33.236.162:3099 -> xxx.yyy.1.1:6101 SYN >> > ******S* Mar 14 07:59:16 66.33.236.162:3100 -> >> > xxx.yyy.1.2:6101 SYN ******S* Mar 14 07:59:13 >> > 66.33.236.162:3101 -> xxx.yyy.1.3:6101 SYN ******S* Mar 14 >> > 07:59:16 66.33.236.162:3102 -> xxx.yyy.1.4:6101 SYN ******S* >> > Mar 14 07:59:16 66.33.236.162:3103 -> xxx.yyy.1.5:6101 SYN >> > ******S* Mar 14 07:59:16 66.33.236.162:3104 -> >> > xxx.yyy.1.6:6101 SYN ******S* Mar 14 07:59:16 >> > 66.33.236.162:3105 -> xxx.yyy.1.7:6101 SYN ******S* Mar 14 >> > 07:59:16 66.33.236.162:3106 -> xxx.yyy.1.8:6101 SYN ******S* >> > [...] Mar 14 08:10:09 66.33.236.162:2041 -> >> > xxx.yyy.255.234:6101 SYN ******S* Mar 14 08:10:09 >> > 66.33.236.162:2042 -> xxx.yyy.255.235:6101 SYN ******S* Mar >> > 14 08:10:09 66.33.236.162:2043 -> xxx.yyy.255.236:6101 SYN >> > ******S* Mar 14 08:10:09 66.33.236.162:2044 -> >> > xxx.yyy.255.237:6101 SYN ******S* Mar 14 08:10:09 >> > 66.33.236.162:2045 -> xxx.yyy.255.238:6101 SYN ******S* Mar >> > 14 08:10:09 66.33.236.162:2046 -> xxx.yyy.255.239:6101 SYN >> > ******S* Mar 14 08:10:09 66.33.236.162:2047 -> >> > xxx.yyy.255.240:6101 SYN ******S* Mar 14 08:10:09 >> > 66.33.236.162:2048 -> xxx.yyy.255.241:6101 SYN ******S* Mar >> > 14 08:10:09 66.33.236.162:2049 -> xxx.yyy.255.242:6101 SYN >> > ******S* 73307 >> > >> > Mar 14 08:33:20 66.34.244.12:2827 -> xxx.yyy.1.1:18905 SYN >> > ******S* Mar 14 08:33:20 66.34.244.12:2830 -> >> > xxx.yyy.1.2:18905 SYN ******S* Mar 14 08:33:20 >> > 66.34.244.12:2833 -> xxx.yyy.1.3:18905 SYN ******S* Mar 14 >> > 08:33:22 66.34.244.12:2836 -> xxx.yyy.1.4:18905 SYN ******S* >> > Mar 14 08:33:22 66.34.244.12:2839 -> xxx.yyy.1.5:18905 SYN >> > ******S* Mar 14 08:33:22 66.34.244.12:2842 -> >> > xxx.yyy.1.6:18905 SYN ******S* Mar 14 08:33:22 >> > 66.34.244.12:2845 -> xxx.yyy.1.7:18905 SYN ******S* Mar 14 >> > 08:33:20 66.34.244.12:2848 -> xxx.yyy.1.8:18905 SYN ******S* >> > [...] Mar 14 08:47:25 66.34.244.12:2180 -> >> > xxx.yyy.255.245:18905 SYN ******S* Mar 14 08:47:25 >> > 66.34.244.12:2174 -> xxx.yyy.255.243:18905 SYN ******S* Mar >> > 14 08:47:25 66.34.244.12:2195 -> xxx.yyy.255.250:18905 SYN >> > ******S* Mar 14 08:47:25 66.34.244.12:2189 -> >> > xxx.yyy.255.248:18905 SYN ******S* Mar 14 08:47:25 >> > 66.34.244.12:2183 -> xxx.yyy.255.246:18905 SYN ******S* Mar >> > 14 08:47:25 66.34.244.12:2204 -> xxx.yyy.255.253:18905 SYN >> > ******S* Mar 14 08:47:25 66.34.244.12:2198 -> >> > xxx.yyy.255.251:18905 SYN ******S* Mar 14 08:47:25 >> > 66.34.244.12:2201 -> xxx.yyy.255.252:18905 SYN ******S* Mar >> > 14 08:47:25 66.34.244.12:2207 -> xxx.yyy.255.254:18905 SYN >> > ******S* 72476 >> > >> > Mar 14 14:00:21 158.130.66.109:3274 -> xxx.yyy.1.1:10203 SYN >> > ******S* Mar 14 14:00:21 158.130.66.109:3276 -> >> > xxx.yyy.1.2:10203 SYN ******S* Mar 14 14:00:23 >> > 158.130.66.109:3280 -> xxx.yyy.1.4:10203 SYN ******S* Mar 14 >> > 14:00:23 158.130.66.109:3282 -> xxx.yyy.1.5:10203 SYN >> > ******S* Mar 14 14:00:23 158.130.66.109:3284 -> >> > xxx.yyy.1.6:10203 SYN ******S* Mar 14 14:00:21 >> > 158.130.66.109:3290 -> xxx.yyy.1.9:10203 SYN ******S* Mar 14 >> > 14:00:23 158.130.66.109:3292 -> xxx.yyy.1.10:10203 SYN >> > ******S* Mar 14 14:00:23 158.130.66.109:3294 -> >> > xxx.yyy.1.11:10203 SYN ******S* [...] Mar 14 14:12:09 >> > 158.130.66.109:2472 -> xxx.yyy.255.250:10203 SYN ******S* Mar >> > 14 14:12:09 158.130.66.109:2464 -> xxx.yyy.255.246:10203 SYN >> > ******S* Mar 14 14:12:09 158.130.66.109:2458 -> >> > xxx.yyy.255.243:10203 SYN ******S* Mar 14 14:12:09 >> > 158.130.66.109:2466 -> xxx.yyy.255.247:10203 SYN ******S* Mar >> > 14 14:12:09 158.130.66.109:2460 -> xxx.yyy.255.244:10203 SYN >> > ******S* Mar 14 14:12:09 158.130.66.109:2468 -> >> > xxx.yyy.255.248:10203 SYN ******S* Mar 14 14:12:09 >> > 158.130.66.109:2478 -> xxx.yyy.255.253:10203 SYN ******S* Mar >> > 14 14:12:09 158.130.66.109:2480 -> xxx.yyy.255.254:10203 SYN >> > ******S* Mar 14 14:12:09 158.130.66.109:2476 -> >> > xxx.yyy.255.252:10203 SYN ******S* 68677 >> > >> > Mar 14 10:52:56 80.144.97.86:4216 -> xxx.yyy.1.1:3306 SYN >> > ******S* Mar 14 10:52:59 80.144.97.86:4217 -> >> > xxx.yyy.1.2:3306 SYN ******S* Mar 14 10:52:59 >> > 80.144.97.86:4218 -> xxx.yyy.1.3:3306 SYN ******S* Mar 14 >> > 10:52:59 80.144.97.86:4219 -> xxx.yyy.1.4:3306 SYN ******S* >> > Mar 14 10:52:59 80.144.97.86:4220 -> xxx.yyy.1.5:3306 SYN >> > ******S* Mar 14 10:52:59 80.144.97.86:4221 -> >> > xxx.yyy.1.6:3306 SYN ******S* Mar 14 10:52:59 >> > 80.144.97.86:4222 -> xxx.yyy.1.7:3306 SYN ******S* Mar 14 >> > 10:52:56 80.144.97.86:4223 -> xxx.yyy.1.8:3306 SYN ******S* >> > [...] Mar 14 11:04:49 80.144.97.86:3883 -> >> > xxx.yyy.255.210:3306 SYN ******S* Mar 14 11:04:49 >> > 80.144.97.86:3884 -> xxx.yyy.255.211:3306 SYN ******S* Mar 14 >> > 11:04:49 80.144.97.86:3885 -> xxx.yyy.255.212:3306 SYN >> > ******S* Mar 14 11:04:49 80.144.97.86:3886 -> >> > xxx.yyy.255.213:3306 SYN ******S* Mar 14 11:04:50 >> > 80.144.97.86:3908 -> xxx.yyy.255.235:3306 SYN ******S* Mar 14 >> > 11:04:50 80.144.97.86:3913 -> xxx.yyy.255.240:3306 SYN >> > ******S* Mar 14 11:04:50 80.144.97.86:3917 -> >> > xxx.yyy.255.244:3306 SYN ******S* Mar 14 11:04:50 >> > 80.144.97.86:3927 -> xxx.yyy.255.254:3306 SYN ******S* 67024 >> > >> > Mar 14 20:36:21 202.164.177.10:3418 -> xxx.yyy.1.7:3306 SYN >> > ******S* Mar 14 20:36:21 202.164.177.10:3413 -> >> > xxx.yyy.1.2:3306 SYN ******S* Mar 14 20:36:21 >> > 202.164.177.10:3414 -> xxx.yyy.1.3:3306 SYN ******S* Mar 14 >> > 20:36:21 202.164.177.10:3415 -> xxx.yyy.1.4:3306 SYN ******S* >> > Mar 14 20:36:21 202.164.177.10:3419 -> xxx.yyy.1.8:3306 SYN >> > ******S* Mar 14 20:36:21 202.164.177.10:3416 -> >> > xxx.yyy.1.5:3306 SYN ******S* Mar 14 20:36:18 >> > 202.164.177.10:3417 -> xxx.yyy.1.6:3306 SYN ******S* Mar 14 >> > 20:36:18 202.164.177.10:3422 -> xxx.yyy.1.11:3306 SYN >> > ******S* [...] Mar 14 20:39:58 202.164.177.10:2436 -> >> > xxx.yyy.255.186:3306 SYN ******S* Mar 14 20:39:58 >> > 202.164.177.10:2449 -> xxx.yyy.255.199:3306 SYN ******S* Mar >> > 14 20:39:58 202.164.177.10:2433 -> xxx.yyy.255.183:3306 SYN >> > ******S* Mar 14 20:39:58 202.164.177.10:2478 -> >> > xxx.yyy.255.228:3306 SYN ******S* Mar 14 20:39:58 >> > 202.164.177.10:2446 -> xxx.yyy.255.196:3306 SYN ******S* Mar >> > 14 20:39:58 202.164.177.10:2442 -> xxx.yyy.255.192:3306 SYN >> > ******S* Mar 14 20:39:58 202.164.177.10:2430 -> >> > xxx.yyy.255.180:3306 SYN ******S* Mar 14 20:39:58 >> > 202.164.177.10:2474 -> xxx.yyy.255.224:3306 SYN ******S* 64080 >> > >> > Mar 14 04:30:40 82.225.171.139:1156 -> xxx.yyy.254.40:139 SYN >> > ******S* Mar 14 04:30:40 82.225.171.139:1157 -> >> > xxx.yyy.244.167:139 SYN ******S* Mar 14 04:30:40 >> > 82.225.171.139:1158 -> xxx.yyy.235.38:139 SYN ******S* Mar 14 >> > 04:30:40 82.225.171.139:1159 -> xxx.yyy.225.165:139 SYN >> > ******S* Mar 14 04:30:40 82.225.171.139:1160 -> >> > xxx.yyy.216.36:139 SYN ******S* Mar 14 04:30:40 >> > 82.225.171.139:1161 -> xxx.yyy.206.163:139 SYN ******S* Mar >> > 14 04:30:40 82.225.171.139:1162 -> xxx.yyy.197.34:139 SYN >> > ******S* Mar 14 04:30:40 82.225.171.139:1163 -> >> > xxx.yyy.187.161:139 SYN ******S* [...] Mar 14 10:11:30 >> > 82.225.171.139:1643 -> xxx.yyy.10.31:139 SYN ******S* Mar 14 >> > 10:11:31 82.225.171.139:1655 -> xxx.yyy.133.172:139 SYN >> > ******S* Mar 14 10:11:33 82.225.171.139:1677 -> >> > xxx.yyy.152.174:139 SYN ******S* Mar 14 10:11:33 >> > 82.225.171.139:1682 -> xxx.yyy.79.183:139 SYN ******S* Mar 14 >> > 10:11:34 82.225.171.139:1689 -> xxx.yyy.219.53:139 SYN >> > ******S* Mar 14 10:11:37 82.225.171.139:1712 -> >> > xxx.yyy.181.49:139 SYN ******S* Mar 14 10:11:37 >> > 82.225.171.139:1713 -> xxx.yyy.105.41:139 SYN ******S* Mar 14 >> > 10:11:41 82.225.171.139:1733 -> xxx.yyy.143.45:139 SYN >> > ******S* Mar 14 10:11:47 82.225.171.139:1739 -> >> > xxx.yyy.67.37:139 SYN ******S* 44013 >> > >> > Mar 14 22:51:08 211.202.1.127:2494 -> xxx.yyy.1.1:4899 SYN >> > ******S* Mar 14 22:51:08 211.202.1.127:2501 -> >> > xxx.yyy.1.3:4899 SYN ******S* Mar 14 22:51:07 >> > 211.202.1.127:2510 -> xxx.yyy.1.4:4899 SYN ******S* Mar 14 >> > 22:51:07 211.202.1.127:2514 -> xxx.yyy.1.5:4899 SYN ******S* >> > Mar 14 22:51:08 211.202.1.127:2499 -> xxx.yyy.1.2:4899 SYN >> > ******S* Mar 14 22:51:07 211.202.1.127:2523 -> >> > xxx.yyy.1.7:4899 SYN ******S* Mar 14 22:51:08 >> > 211.202.1.127:2529 -> xxx.yyy.1.8:4899 SYN ******S* Mar 14 >> > 22:51:08 211.202.1.127:2534 -> xxx.yyy.1.9:4899 SYN ******S* >> > [...] Mar 14 22:56:15 211.202.1.127:1549 -> >> > xxx.yyy.255.192:4899 SYN ******S* Mar 14 22:56:15 >> > 211.202.1.127:1570 -> xxx.yyy.255.203:4899 SYN ******S* Mar >> > 14 22:56:15 211.202.1.127:1393 -> xxx.yyy.255.148:4899 SYN >> > ******S* Mar 14 22:56:15 211.202.1.127:1604 -> >> > xxx.yyy.255.218:4899 SYN ******S* Mar 14 22:56:15 >> > 211.202.1.127:1606 -> xxx.yyy.255.219:4899 SYN ******S* Mar >> > 14 22:56:15 211.202.1.127:1576 -> xxx.yyy.255.206:4899 SYN >> > ******S* Mar 14 22:56:15 211.202.1.127:1578 -> >> > xxx.yyy.255.207:4899 SYN ******S* Mar 14 22:56:15 >> > 211.202.1.127:1598 -> xxx.yyy.255.214:4899 SYN ******S* Mar >> > 14 22:56:15 211.202.1.127:1672 -> xxx.yyy.255.242:4899 SYN >> > ******S* 41742 >> > >> > Mar 14 21:20:22 193.92.33.190:3657 -> xxx.yyy.1.2:1433 SYN >> > ******S* Mar 14 21:20:22 193.92.33.190:3656 -> >> > xxx.yyy.1.0:1433 SYN ******S* Mar 14 21:20:22 >> > 193.92.33.190:3659 -> xxx.yyy.1.4:1433 SYN ******S* Mar 14 >> > 21:20:22 193.92.33.190:3660 -> xxx.yyy.1.5:1433 SYN ******S* >> > Mar 14 21:20:22 193.92.33.190:3662 -> xxx.yyy.1.7:1433 SYN >> > ******S* Mar 14 21:20:22 193.92.33.190:3665 -> >> > xxx.yyy.1.10:1433 SYN ******S* Mar 14 21:20:22 >> > 193.92.33.190:3666 -> xxx.yyy.1.11:1433 SYN ******S* Mar 14 >> > 21:20:22 193.92.33.190:3667 -> xxx.yyy.1.12:1433 SYN ******S* >> > [...] Mar 14 21:29:58 193.92.33.190:3179 -> >> > xxx.yyy.zzz.230:1433 SYN ******S* Mar 14 21:29:58 >> > 193.92.33.190:3181 -> xxx.yyy.zzz.232:1433 SYN ******S* Mar >> > 14 21:29:58 193.92.33.190:3191 -> xxx.yyy.zzz.242:1433 SYN >> > ******S* Mar 14 21:29:58 193.92.33.190:3193 -> >> > xxx.yyy.zzz.244:1433 SYN ******S* Mar 14 21:29:58 >> > 193.92.33.190:3195 -> xxx.yyy.zzz.246:1433 SYN ******S* Mar >> > 14 21:29:58 193.92.33.190:3197 -> xxx.yyy.zzz.248:1433 SYN >> > ******S* Mar 14 21:30:01 193.92.33.190:3199 -> >> > xxx.yyy.zzz.250:1433 SYN ******S* Mar 14 21:30:01 >> > 193.92.33.190:3197 -> xxx.yyy.zzz.248:1433 SYN ******S* Mar >> > 14 21:30:01 193.92.33.190:3202 -> xxx.yyy.zzz.253:1433 SYN >> > ******S* 40077 >> > >> > Mar 14 13:19:58 209.164.23.116:3324 -> xxx.yyy.1.1:10202 SYN >> > ******S* Mar 14 13:19:58 209.164.23.116:3326 -> >> > xxx.yyy.1.3:10202 SYN ******S* Mar 14 13:19:58 >> > 209.164.23.116:3323 -> xxx.yyy.1.0:10202 SYN ******S* Mar 14 >> > 13:19:58 209.164.23.116:3325 -> xxx.yyy.1.2:10202 SYN >> > ******S* Mar 14 13:19:58 209.164.23.116:3327 -> >> > xxx.yyy.1.4:10202 SYN ******S* Mar 14 13:19:58 >> > 209.164.23.116:3278 -> xxx.yyy.1.5:10202 SYN ******S* Mar 14 >> > 13:19:58 209.164.23.116:3279 -> xxx.yyy.1.6:10202 SYN >> > ******S* Mar 14 13:19:58 209.164.23.116:3280 -> >> > xxx.yyy.1.7:10202 SYN ******S* [...] Mar 14 13:21:40 >> > 209.164.23.116:3287 -> xxx.yyy.255.244:10202 SYN ******S* Mar >> > 14 13:21:40 209.164.23.116:3285 -> xxx.yyy.255.242:10202 SYN >> > ******S* Mar 14 13:21:40 209.164.23.116:3289 -> >> > xxx.yyy.255.246:10202 SYN ******S* Mar 14 13:21:40 >> > 209.164.23.116:3293 -> xxx.yyy.255.250:10202 SYN ******S* Mar >> > 14 13:21:40 209.164.23.116:3291 -> xxx.yyy.255.248:10202 SYN >> > ******S* Mar 14 13:21:40 209.164.23.116:3295 -> >> > xxx.yyy.255.252:10202 SYN ******S* Mar 14 13:21:40 >> > 209.164.23.116:3296 -> xxx.yyy.255.253:10202 SYN ******S* Mar >> > 14 13:21:40 209.164.23.116:3294 -> xxx.yyy.255.251:10202 SYN >> > ******S* Mar 14 13:21:40 209.164.23.116:3297 -> >> > xxx.yyy.255.254:10202 SYN ******S* 39231 >> > >> > Mar 14 23:46:01 68.249.113.26:1976 -> xxx.yyy.1.1:4899 SYN >> > ******S* Mar 14 23:46:01 68.249.113.26:1977 -> >> > xxx.yyy.1.2:4899 SYN ******S* Mar 14 23:46:01 >> > 68.249.113.26:1978 -> xxx.yyy.1.3:4899 SYN ******S* Mar 14 >> > 23:46:03 68.249.113.26:1979 -> xxx.yyy.1.4:4899 SYN ******S* >> > Mar 14 23:46:03 68.249.113.26:1980 -> xxx.yyy.1.5:4899 SYN >> > ******S* Mar 14 23:46:03 68.249.113.26:1981 -> >> > xxx.yyy.1.6:4899 SYN ******S* Mar 14 23:46:03 >> > 68.249.113.26:1982 -> xxx.yyy.1.7:4899 SYN ******S* Mar 14 >> > 23:46:01 68.249.113.26:1983 -> xxx.yyy.1.8:4899 SYN ******S* >> > [...] Mar 14 23:59:59 68.249.113.26:1719 -> >> > xxx.yyy.144.150:4899 SYN ******S* Mar 14 23:59:59 >> > 68.249.113.26:1716 -> xxx.yyy.144.147:4899 SYN ******S* Mar >> > 14 23:59:59 68.249.113.26:1700 -> xxx.yyy.144.131:4899 SYN >> > ******S* Mar 14 23:59:59 68.249.113.26:1713 -> >> > xxx.yyy.144.144:4899 SYN ******S* Mar 14 23:59:59 >> > 68.249.113.26:1710 -> xxx.yyy.144.141:4899 SYN ******S* Mar >> > 14 23:59:59 68.249.113.26:1707 -> xxx.yyy.144.138:4899 SYN >> > ******S* Mar 14 23:59:59 68.249.113.26:1720 -> >> > xxx.yyy.144.151:4899 SYN ******S* Mar 14 23:59:59 >> > 68.249.113.26:1704 -> xxx.yyy.144.135:4899 SYN ******S* Mar >> > 14 23:59:59 68.249.113.26:1717 -> xxx.yyy.144.148:4899 SYN >> > ******S* 36943 >> > >> > Mar 14 18:50:12 62.211.183.62:1144 -> xxx.yyy.1.7:7100 SYN >> > ******S* Mar 14 18:50:12 62.211.183.62:1145 -> >> > xxx.yyy.1.8:7100 SYN ******S* Mar 14 18:50:12 >> > 62.211.183.62:1146 -> xxx.yyy.1.9:7100 SYN ******S* Mar 14 >> > 18:50:12 62.211.183.62:1147 -> xxx.yyy.1.10:7100 SYN ******S* >> > Mar 14 18:50:12 62.211.183.62:1148 -> xxx.yyy.1.11:7100 SYN >> > ******S* Mar 14 18:50:12 62.211.183.62:1149 -> >> > xxx.yyy.1.12:7100 SYN ******S* Mar 14 18:50:12 >> > 62.211.183.62:1150 -> xxx.yyy.1.13:7100 SYN ******S* Mar 14 >> > 18:50:12 62.211.183.62:1151 -> xxx.yyy.1.14:7100 SYN ******S* >> > [...] Mar 14 18:55:20 62.211.183.62:1143 -> >> > xxx.yyy.255.236:7100 SYN ******S* Mar 14 18:55:20 >> > 62.211.183.62:1144 -> xxx.yyy.255.237:7100 SYN ******S* Mar >> > 14 18:55:20 62.211.183.62:1145 -> xxx.yyy.255.238:7100 SYN >> > ******S* Mar 14 18:55:20 62.211.183.62:1146 -> >> > xxx.yyy.255.239:7100 SYN ******S* Mar 14 18:55:20 >> > 62.211.183.62:1147 -> xxx.yyy.255.240:7100 SYN ******S* Mar >> > 14 18:55:20 62.211.183.62:1148 -> xxx.yyy.255.241:7100 SYN >> > ******S* Mar 14 18:55:20 62.211.183.62:1149 -> >> > xxx.yyy.255.242:7100 SYN ******S* Mar 14 18:55:20 >> > 62.211.183.62:1160 -> xxx.yyy.255.253:7100 SYN ******S* Mar >> > 14 18:55:20 62.211.183.62:1161 -> xxx.yyy.255.254:7100 SYN >> > ******S* 36231 >> > >> > Mar 14 00:01:41 81.208.28.50:3001 -> xxx.yyy.1.230:6129 SYN >> > ******S* Mar 14 00:01:41 81.208.28.50:3001 -> >> > xxx.yyy.1.99:6129 SYN ******S* Mar 14 00:01:41 >> > 81.208.28.50:3001 -> xxx.yyy.11.28:6129 SYN ******S* Mar 14 >> > 00:01:41 81.208.28.50:3001 -> xxx.yyy.10.153:6129 SYN >> > ******S* Mar 14 00:01:41 81.208.28.50:3001 -> >> > xxx.yyy.12.34:6129 SYN ******S* Mar 14 00:01:41 >> > 81.208.28.50:3001 -> xxx.yyy.13.40:6129 SYN ******S* Mar 14 >> > 00:01:41 81.208.28.50:3001 -> xxx.yyy.13.171:6129 SYN >> > ******S* Mar 14 00:01:41 81.208.28.50:3001 -> >> > xxx.yyy.15.52:6129 SYN ******S* [...] Mar 14 07:35:26 >> > 81.208.28.50:3001 -> xxx.yyy.253.127:1433 SYN ******S* Mar 14 >> > 07:35:26 81.208.28.50:3001 -> xxx.yyy.247.91:1433 SYN >> > ******S* Mar 14 07:35:26 81.208.28.50:3001 -> >> > xxx.yyy.248.97:1433 SYN ******S* Mar 14 07:35:26 >> > 81.208.28.50:3001 -> xxx.yyy.255.139:1433 SYN ******S* Mar 14 >> > 07:35:26 81.208.28.50:3001 -> xxx.yyy.249.234:1433 SYN >> > ******S* Mar 14 07:35:26 81.208.28.50:3001 -> >> > xxx.yyy.251.115:1433 SYN ******S* Mar 14 07:35:26 >> > 81.208.28.50:3001 -> xxx.yyy.252.252:1433 SYN ******S* Mar 14 >> > 07:35:26 81.208.28.50:3001 -> xxx.yyy.254.2:1433 SYN ******S* 28578 >> > >> > Mar 14 12:12:18 81.242.85.160:4032 -> xxx.yyy.1.0:1433 SYN >> > ******S* Mar 14 12:12:21 81.242.85.160:4082 -> >> > xxx.yyy.1.1:1433 SYN ******S* Mar 14 12:12:21 >> > 81.242.85.160:4163 -> xxx.yyy.1.2:1433 SYN ******S* Mar 14 >> > 12:12:19 81.242.85.160:4351 -> xxx.yyy.1.4:1433 SYN ******S* >> > Mar 14 12:12:22 81.242.85.160:4419 -> xxx.yyy.1.5:1433 SYN >> > ******S* Mar 14 12:12:22 81.242.85.160:4454 -> >> > xxx.yyy.1.6:1433 SYN ******S* Mar 14 12:12:22 >> > 81.242.85.160:4509 -> xxx.yyy.1.7:1433 SYN ******S* Mar 14 >> > 12:12:20 81.242.85.160:4569 -> xxx.yyy.1.9:1433 SYN ******S* >> > [...] Mar 14 13:53:43 81.242.85.160:3227 -> >> > xxx.yyy.111.248:1433 SYN ******S* Mar 14 13:53:43 >> > 81.242.85.160:2960 -> xxx.yyy.111.246:1433 SYN ******S* Mar >> > 14 13:53:43 81.242.85.160:3184 -> xxx.yyy.111.247:1433 SYN >> > ******S* Mar 14 13:53:44 81.242.85.160:3247 -> >> > xxx.yyy.111.249:1433 SYN ******S* Mar 14 13:53:44 >> > 81.242.85.160:3606 -> xxx.yyy.111.250:1433 SYN ******S* Mar >> > 14 13:53:44 81.242.85.160:4579 -> xxx.yyy.111.252:1433 SYN >> > ******S* Mar 14 13:53:45 81.242.85.160:4990 -> >> > xxx.yyy.111.253:1433 SYN ******S* Mar 14 13:53:45 >> > 81.242.85.160:1224 -> xxx.yyy.111.254:1433 SYN ******S* Mar >> > 14 13:53:45 81.242.85.160:1395 -> xxx.yyy.111.255:1433 SYN >> > ******S* 25961 >> > >> > [...] >> > 25504 >> > >> > Mar 14 09:29:10 195.205.112.130:3569 -> xxx.yyy.1.1:1433 SYN >> > ******S* Mar 14 09:29:10 195.205.112.130:3573 -> >> > xxx.yyy.1.2:1433 SYN ******S* Mar 14 09:29:10 >> > 195.205.112.130:3576 -> xxx.yyy.1.3:1433 SYN ******S* Mar 14 >> > 09:29:10 195.205.112.130:3580 -> xxx.yyy.1.4:1433 SYN >> > ******S* Mar 14 09:29:10 195.205.112.130:3583 -> >> > xxx.yyy.1.5:1433 SYN ******S* Mar 14 09:29:10 >> > 195.205.112.130:3587 -> xxx.yyy.1.6:1433 SYN ******S* Mar 14 >> > 09:29:10 195.205.112.130:3590 -> xxx.yyy.1.7:1433 SYN >> > ******S* Mar 14 09:29:10 195.205.112.130:3594 -> >> > xxx.yyy.1.8:1433 SYN ******S* [...] Mar 14 11:08:36 >> > 195.205.112.130:3593 -> xxx.yyy.111.210:1433 SYN ******S* Mar >> > 14 11:08:36 195.205.112.130:3768 -> xxx.yyy.111.212:1433 SYN >> > ******S* Mar 14 11:08:36 195.205.112.130:3823 -> >> > xxx.yyy.111.213:1433 SYN ******S* Mar 14 11:08:36 >> > 195.205.112.130:3831 -> xxx.yyy.111.214:1433 SYN ******S* Mar >> > 14 11:08:36 195.205.112.130:1946 -> xxx.yyy.111.196:1433 SYN >> > ******S* Mar 14 11:08:37 195.205.112.130:3968 -> >> > xxx.yyy.111.216:1433 SYN ******S* Mar 14 11:08:37 >> > 195.205.112.130:4000 -> xxx.yyy.111.220:1433 SYN ******S* Mar >> > 14 11:08:37 195.205.112.130:4007 -> xxx.yyy.111.221:1433 SYN >> > ******S* Mar 14 11:08:37 195.205.112.130:4009 -> >> > xxx.yyy.111.223:1433 SYN ******S* 19263 >> > >> > Mar 14 05:33:52 220.169.243.139:3673 -> xxx.yyy.1.16:1433 SYN >> > ******S* Mar 14 05:33:52 220.169.243.139:3732 -> >> > xxx.yyy.1.17:1433 SYN ******S* Mar 14 05:33:49 >> > 220.169.243.139:4402 -> xxx.yyy.1.18:1433 SYN ******S* Mar 14 >> > 05:33:52 220.169.243.139:4260 -> xxx.yyy.1.21:1433 SYN >> > ******S* Mar 14 05:33:52 220.169.243.139:4360 -> >> > xxx.yyy.1.31:1433 SYN ******S* Mar 14 05:33:49 >> > 220.169.243.139:4814 -> xxx.yyy.1.34:1433 SYN ******S* Mar 14 >> > 05:33:52 220.169.243.139:4304 -> xxx.yyy.1.35:1433 SYN >> > ******S* Mar 14 05:33:52 220.169.243.139:3737 -> >> > xxx.yyy.1.36:1433 SYN ******S* [...] Mar 14 06:34:16 >> > 220.169.243.139:4223 -> xxx.yyy.111.221:1433 SYN ******S* Mar >> > 14 06:34:17 220.169.243.139:3665 -> xxx.yyy.111.223:1433 SYN >> > ******S* Mar 14 06:34:17 220.169.243.139:3912 -> >> > xxx.yyy.111.238:1433 SYN ******S* Mar 14 06:34:17 >> > 220.169.243.139:3577 -> xxx.yyy.111.239:1433 SYN ******S* Mar >> > 14 06:34:17 220.169.243.139:4268 -> xxx.yyy.111.240:1433 SYN >> > ******S* Mar 14 06:34:17 220.169.243.139:4959 -> >> > xxx.yyy.111.243:1433 SYN ******S* Mar 14 06:34:17 >> > 220.169.243.139:4392 -> xxx.yyy.111.246:1433 SYN ******S* Mar >> > 14 06:34:18 220.169.243.139:4647 -> xxx.yyy.111.253:1433 SYN >> > ******S* Mar 14 06:34:18 220.169.243.139:3686 -> >> > xxx.yyy.111.252:1433 SYN ******S* 19232 >> > >> > [...] >> > 15987 >> > >> > Mar 14 16:09:27 194.69.214.120:3001 -> xxx.yyy.1.105:6129 SYN >> > ******S* Mar 14 16:09:27 194.69.214.120:3001 -> >> > xxx.yyy.1.236:6129 SYN ******S* Mar 14 16:09:27 >> > 194.69.214.120:3001 -> xxx.yyy.10.159:6129 SYN ******S* Mar >> > 14 16:09:27 194.69.214.120:3001 -> xxx.yyy.14.52:6129 SYN >> > ******S* Mar 14 16:09:27 194.69.214.120:3001 -> >> > xxx.yyy.11.34:6129 SYN ******S* Mar 14 16:09:27 >> > 194.69.214.120:3001 -> xxx.yyy.32.29:6129 SYN ******S* Mar 14 >> > 16:09:27 194.69.214.120:3001 -> xxx.yyy.32.160:6129 SYN >> > ******S* Mar 14 16:09:27 194.69.214.120:3001 -> >> > xxx.yyy.33.35:6129 SYN ******S* [...] Mar 14 23:55:06 >> > 194.69.214.120:3001 -> xxx.yyy.252.37:6129 SYN ******S* Mar >> > 14 23:55:06 194.69.214.120:3001 -> xxx.yyy.252.168:6129 SYN >> > ******S* Mar 14 23:55:06 194.69.214.120:3001 -> >> > xxx.yyy.253.43:6129 SYN ******S* Mar 14 23:55:06 >> > 194.69.214.120:3001 -> xxx.yyy.253.174:6129 SYN ******S* Mar >> > 14 23:55:06 194.69.214.120:3001 -> xxx.yyy.254.49:6129 SYN >> > ******S* Mar 14 23:55:06 194.69.214.120:3001 -> >> > xxx.yyy.254.180:6129 SYN ******S* Mar 14 23:55:06 >> > 194.69.214.120:3001 -> xxx.yyy.255.55:6129 SYN ******S* Mar >> > 14 23:55:06 194.69.214.120:3001 -> xxx.yyy.255.186:6129 SYN >> > ******S* 14711 >> > >> > Mar 14 22:56:04 220.90.161.187:3447 -> xxx.yyy.235.114:5554 >> > SYN ******S* Mar 14 22:56:05 220.90.161.187:4161 -> >> > xxx.yyy.235.114:1023 SYN ******S* Mar 14 22:56:07 >> > 220.90.161.187:1490 -> xxx.yyy.235.114:9898 SYN ******S* Mar >> > 14 22:56:04 220.90.161.187:3445 -> xxx.yyy.235.112:5554 SYN >> > ******S* Mar 14 22:56:05 220.90.161.187:4159 -> >> > xxx.yyy.235.112:1023 SYN ******S* Mar 14 22:56:07 >> > 220.90.161.187:1486 -> xxx.yyy.235.112:9898 SYN ******S* Mar >> > 14 22:56:04 220.90.161.187:3446 -> xxx.yyy.235.113:5554 SYN >> > ******S* Mar 14 22:56:05 220.90.161.187:4160 -> >> > xxx.yyy.235.113:1023 SYN ******S* [...] Mar 14 22:56:51 >> > 220.90.161.187:2861 -> xxx.yyy.255.139:9898 SYN ******S* Mar >> > 14 22:56:51 220.90.161.187:2862 -> xxx.yyy.255.140:9898 SYN >> > ******S* Mar 14 22:56:51 220.90.161.187:2864 -> >> > xxx.yyy.255.142:9898 SYN ******S* Mar 14 22:56:51 >> > 220.90.161.187:2895 -> xxx.yyy.255.145:9898 SYN ******S* Mar >> > 14 22:56:51 220.90.161.187:2893 -> xxx.yyy.255.144:9898 SYN >> > ******S* Mar 14 22:56:51 220.90.161.187:2896 -> >> > xxx.yyy.255.146:9898 SYN ******S* Mar 14 22:56:51 >> > 220.90.161.187:2917 -> xxx.yyy.255.147:9898 SYN ******S* Mar >> > 14 22:56:51 220.90.161.187:2935 -> xxx.yyy.255.150:9898 SYN >> > ******S* 12891 >> > >> > Mar 14 22:56:46 221.146.197.38:3952 -> xxx.yyy.154.100:5554 >> > SYN ******S* Mar 14 22:56:47 221.146.197.38:4797 -> >> > xxx.yyy.154.100:1023 SYN ******S* Mar 14 22:56:49 >> > 221.146.197.38:2176 -> xxx.yyy.154.100:9898 SYN ******S* Mar >> > 14 22:56:46 221.146.197.38:3954 -> xxx.yyy.154.101:5554 SYN >> > ******S* Mar 14 22:56:49 221.146.197.38:2178 -> >> > xxx.yyy.154.101:9898 SYN ******S* Mar 14 22:56:46 >> > 221.146.197.38:3957 -> xxx.yyy.154.102:5554 SYN ******S* Mar >> > 14 22:56:49 221.146.197.38:2190 -> xxx.yyy.154.102:9898 SYN >> > ******S* Mar 14 22:56:46 221.146.197.38:3962 -> >> > xxx.yyy.154.104:5554 SYN ******S* [...] Mar 14 22:57:34 >> > 221.146.197.38:2092 -> xxx.yyy.174.213:9898 SYN ******S* Mar >> > 14 22:57:34 221.146.197.38:2118 -> xxx.yyy.174.215:9898 SYN >> > ******S* Mar 14 22:57:34 221.146.197.38:2117 -> >> > xxx.yyy.174.216:9898 SYN ******S* Mar 14 22:57:34 >> > 221.146.197.38:2120 -> xxx.yyy.174.217:9898 SYN ******S* Mar >> > 14 22:57:34 221.146.197.38:2134 -> xxx.yyy.174.219:9898 SYN >> > ******S* Mar 14 22:57:34 221.146.197.38:2141 -> >> > xxx.yyy.174.220:9898 SYN ******S* Mar 14 22:57:34 >> > 221.146.197.38:2144 -> xxx.yyy.174.221:9898 SYN ******S* Mar >> > 14 22:57:34 221.146.197.38:2165 -> xxx.yyy.174.222:9898 SYN >> > ******S* 11235 >> > >> > Mar 14 22:56:42 220.72.27.159:1045 -> xxx.yyy.195.97:5554 SYN >> > ******S* Mar 14 22:56:43 220.72.27.159:1828 -> >> > xxx.yyy.195.97:1023 SYN ******S* Mar 14 22:56:45 >> > 220.72.27.159:3378 -> xxx.yyy.195.97:9898 SYN ******S* Mar 14 >> > 22:56:42 220.72.27.159:1056 -> xxx.yyy.195.94:5554 SYN >> > ******S* Mar 14 22:56:43 220.72.27.159:1830 -> >> > xxx.yyy.195.94:1023 SYN ******S* Mar 14 22:56:45 >> > 220.72.27.159:3447 -> xxx.yyy.195.94:9898 SYN ******S* Mar 14 >> > 22:56:42 220.72.27.159:1059 -> xxx.yyy.195.93:5554 SYN >> > ******S* Mar 14 22:56:43 220.72.27.159:1900 -> >> > xxx.yyy.195.93:1023 SYN ******S* [...] Mar 14 22:57:29 >> > 220.72.27.159:2441 -> xxx.yyy.215.123:9898 SYN ******S* Mar >> > 14 22:57:29 220.72.27.159:2474 -> xxx.yyy.215.148:9898 SYN >> > ******S* Mar 14 22:57:29 220.72.27.159:2470 -> >> > xxx.yyy.215.145:9898 SYN ******S* Mar 14 22:57:29 >> > 220.72.27.159:2471 -> xxx.yyy.215.146:9898 SYN ******S* Mar >> > 14 22:57:29 220.72.27.159:2484 -> xxx.yyy.215.160:9898 SYN >> > ******S* Mar 14 22:57:29 220.72.27.159:2485 -> >> > xxx.yyy.215.161:9898 SYN ******S* Mar 14 22:57:29 >> > 220.72.27.159:2486 -> xxx.yyy.215.162:9898 SYN ******S* Mar >> > 14 22:57:29 220.72.27.159:2808 -> xxx.yyy.215.189:9898 SYN >> > ******S* Mar 14 22:57:30 220.72.27.159:3142 -> >> > xxx.yyy.195.96:9898 SYN ******S* 10910 >> > >> > [...] >> > 10642 >> > >> > Mar 14 22:56:41 61.207.142.64:2703 -> xxx.yyy.174.228:5554 >> > SYN ******S* Mar 14 22:56:42 61.207.142.64:3169 -> >> > xxx.yyy.174.228:1023 SYN ******S* Mar 14 22:56:44 >> > 61.207.142.64:4473 -> xxx.yyy.174.228:9898 SYN ******S* Mar >> > 14 22:56:41 61.207.142.64:2690 -> xxx.yyy.174.222:5554 SYN >> > ******S* Mar 14 22:56:42 61.207.142.64:3154 -> >> > xxx.yyy.174.222:1023 SYN ******S* Mar 14 22:56:44 >> > 61.207.142.64:4452 -> xxx.yyy.174.222:9898 SYN ******S* Mar >> > 14 22:56:41 61.207.142.64:2712 -> xxx.yyy.174.229:5554 SYN >> > ******S* Mar 14 22:56:42 61.207.142.64:3172 -> >> > xxx.yyy.174.229:1023 SYN ******S* [...] Mar 14 22:57:24 >> > 61.207.142.64:3935 -> xxx.yyy.194.255:9898 SYN ******S* Mar >> > 14 22:57:24 61.207.142.64:4106 -> xxx.yyy.195.41:9898 SYN >> > ******S* Mar 14 22:57:24 61.207.142.64:4104 -> >> > xxx.yyy.195.40:9898 SYN ******S* Mar 14 22:57:24 >> > 61.207.142.64:4114 -> xxx.yyy.195.42:9898 SYN ******S* Mar 14 >> > 22:57:24 61.207.142.64:4135 -> xxx.yyy.195.47:9898 SYN >> > ******S* Mar 14 22:57:24 61.207.142.64:4254 -> >> > xxx.yyy.195.71:9898 SYN ******S* Mar 14 22:57:24 >> > 61.207.142.64:4260 -> xxx.yyy.195.75:9898 SYN ******S* Mar 14 >> > 22:57:24 61.207.142.64:4255 -> xxx.yyy.195.72:9898 SYN >> > ******S* Mar 14 22:57:24 61.207.142.64:4256 -> >> > xxx.yyy.195.73:9898 SYN ******S* 10632 >> > >> > Mar 14 23:57:36 222.82.220.182:64711 -> xxx.yyy.154.103:5554 >> > SYN ******S* Mar 14 23:57:37 222.82.220.182:65283 -> >> > xxx.yyy.154.103:1023 SYN ******S* Mar 14 23:57:36 >> > 222.82.220.182:64709 -> xxx.yyy.154.101:5554 SYN ******S* Mar >> > 14 23:57:37 222.82.220.182:65281 -> xxx.yyy.154.101:1023 SYN >> > ******S* Mar 14 23:57:39 222.82.220.182:1053 -> >> > xxx.yyy.154.101:9898 SYN ******S* Mar 14 23:57:36 >> > 222.82.220.182:64710 -> xxx.yyy.154.102:5554 SYN ******S* Mar >> > 14 23:57:37 222.82.220.182:65282 -> xxx.yyy.154.102:1023 SYN >> > ******S* Mar 14 23:57:39 222.82.220.182:1054 -> >> > xxx.yyy.154.102:9898 SYN ******S* [...] Mar 14 23:59:05 >> > 222.82.220.182:64740 -> xxx.yyy.174.218:1023 SYN ******S* Mar >> > 14 23:59:05 222.82.220.182:64741 -> xxx.yyy.174.219:1023 SYN >> > ******S* Mar 14 23:59:07 222.82.220.182:65016 -> >> > xxx.yyy.174.219:9898 SYN ******S* Mar 14 23:59:05 >> > 222.82.220.182:64743 -> xxx.yyy.174.221:1023 SYN ******S* Mar >> > 14 23:59:07 222.82.220.182:1181 -> xxx.yyy.174.221:9898 SYN >> > ******S* Mar 14 23:59:05 222.82.220.182:64742 -> >> > xxx.yyy.174.220:1023 SYN ******S* Mar 14 23:59:07 >> > 222.82.220.182:1180 -> xxx.yyy.174.220:9898 SYN ******S* Mar >> > 14 23:59:05 222.82.220.182:64744 -> xxx.yyy.174.222:1023 SYN >> > ******S* Mar 14 23:59:07 222.82.220.182:65017 -> >> > xxx.yyy.174.222:9898 SYN ******S* 10299 >> > >> > -- >> > - Ken >> > ============================================================== >> > ============= >> > Ken Connelly (KC152) Systems and Operations Manager, ITS - >> > Network Services >> > University of Northern Iowa Cedar Falls, >> > IA 50614-0121 >> > email: [email protected] phone: (319) 273-5850 fax: >> > (319) 273-7373 >> > _______________________________________________ >> > Intrusions mailing list >> > [email protected] >> > http://www.dshield.org/mailman/listinfo/intrusions >> > >> > >> > >> > _______________________________________________ >> > Intrusions mailing list >> > [email protected] >> > http://www.dshield.org/mailman/listinfo/intrusions >> > >> > >> > __________ NOD32 1.1027 (20050316) Information __________ >> > >> > This message was checked by NOD32 antivirus system. >> > http://www.nod32.com >> > >> > >> >> _______________________________________________ >> Intrusions mailing list >> [email protected] >> http://www.dshield.org/mailman/listinfo/intrusions > > _________________________________________________________________ > Express yourself instantly with MSN Messenger! Download today - it's > FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ > > _______________________________________________ > Intrusions mailing list > [email protected] > http://www.dshield.org/mailman/listinfo/intrusions > _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions