[Intrusions] RE: NetBill ports
lee forrest
leeforrest10000 at hotmail.com
Wed Sep 8 14:03:43 GMT 2004
Hi Ken
Looks like a bot probing Netbill ports trying to make connections ,
I too have received a lot of scans , mostly idiots trying to steal financial
data or aquire the information to do so.
>From: intrusions-request at lists.sans.org
>Reply-To: intrusions at lists.sans.org
>To: intrusions at lists.sans.org
>Subject: Intrusions Digest, Vol 6, Issue 13
>Date: Wed, 8 Sep 2004 13:05:49 GMT
>
>Send Intrusions mailing list submissions to
> intrusions at lists.sans.org
>
>To subscribe or unsubscribe via the World Wide Web, visit
> http://www.dshield.org/mailman/listinfo/intrusions
>or, via email, send a message with subject or body 'help' to
> intrusions-request at lists.sans.org
>
>You can reach the person managing the list at
> intrusions-owner at lists.sans.org
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of Intrusions digest..."
>
>
>Today's Topics:
>
> 1. [LOGS] Summary of large-scale portscanning detects
> (Ken.Connelly at uni.edu)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Tue, 07 Sep 2004 11:29:01 -0500 (CDT)
>From: Ken.Connelly at uni.edu
>Subject: [Intrusions] [LOGS] Summary of large-scale portscanning
> detects
>To: intrusions at lists.sans.org
>Message-ID: <01LEL1K9Q8AC8YAAAE at uni.edu>
>
>The following extracts show the beginning and ending of scan activity
>was detected on my network. The number following each set is the total
>number of probes for that source. Timestamps are GMT-0500.
>
>Sep 6 05:23:18 212.89.8.121:1615 -> xxx.yyy.1.1:80 SYN ******S*
>Sep 6 05:23:18 212.89.8.121:1616 -> xxx.yyy.1.2:80 SYN ******S*
>Sep 6 05:23:18 212.89.8.121:1617 -> xxx.yyy.1.3:80 SYN ******S*
>Sep 6 05:23:21 212.89.8.121:1619 -> xxx.yyy.1.5:80 SYN ******S*
>Sep 6 05:23:21 212.89.8.121:1618 -> xxx.yyy.1.4:80 SYN ******S*
>Sep 6 05:23:21 212.89.8.121:1620 -> xxx.yyy.1.6:80 SYN ******S*
>Sep 6 05:23:21 212.89.8.121:1622 -> xxx.yyy.1.7:80 SYN ******S*
>Sep 6 05:23:21 212.89.8.121:1623 -> xxx.yyy.1.8:80 SYN ******S*
>[...]
>Sep 6 13:11:23 212.89.8.121:4229 -> xxx.yyy.255.247:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4230 -> xxx.yyy.255.248:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4226 -> xxx.yyy.255.244:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4227 -> xxx.yyy.255.245:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4234 -> xxx.yyy.255.252:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4235 -> xxx.yyy.255.253:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4233 -> xxx.yyy.255.251:6129 SYN ******S*
>Sep 6 13:11:23 212.89.8.121:4236 -> xxx.yyy.255.254:6129 SYN ******S*
>133997
>
>Sep 6 13:12:44 213.134.250.140:3132 -> xxx.yyy.1.0:1433 SYN ******S*
>Sep 6 13:12:44 213.134.250.140:3133 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 13:12:41 213.134.250.140:3135 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 13:12:44 213.134.250.140:3134 -> xxx.yyy.1.2:1433 SYN ******S*
>Sep 6 13:12:41 213.134.250.140:3136 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 13:12:44 213.134.250.140:3137 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 13:12:44 213.134.250.140:3138 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 13:12:44 213.134.250.140:3139 -> xxx.yyy.1.7:1433 SYN ******S*
>[...]
>Sep 6 14:17:56 213.134.250.140:3283 -> xxx.yyy.255.242:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3282 -> xxx.yyy.255.241:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3281 -> xxx.yyy.255.240:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3294 -> xxx.yyy.255.253:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3293 -> xxx.yyy.255.252:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3292 -> xxx.yyy.255.251:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3291 -> xxx.yyy.255.250:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3290 -> xxx.yyy.255.249:1433 SYN ******S*
>Sep 6 14:17:56 213.134.250.140:3289 -> xxx.yyy.255.248:1433 SYN ******S*
>107309
>
>Sep 6 14:58:58 24.57.54.235:1630 -> xxx.yyy.1.43:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1631 -> xxx.yyy.1.42:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1632 -> xxx.yyy.1.41:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1638 -> xxx.yyy.1.35:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1637 -> xxx.yyy.1.36:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1634 -> xxx.yyy.1.39:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1643 -> xxx.yyy.1.30:1433 SYN ******S*
>Sep 6 14:58:58 24.57.54.235:1641 -> xxx.yyy.1.32:1433 SYN ******S*
>[...]
>Sep 6 18:47:42 24.57.54.235:1232 -> xxx.yyy.255.233:1433 SYN ******S*
>Sep 6 18:47:42 24.57.54.235:1242 -> xxx.yyy.255.236:1433 SYN ******S*
>Sep 6 18:47:42 24.57.54.235:1240 -> xxx.yyy.255.235:1433 SYN ******S*
>Sep 6 18:47:42 24.57.54.235:1238 -> xxx.yyy.255.234:1433 SYN ******S*
>Sep 6 18:47:43 24.57.54.235:1247 -> xxx.yyy.255.237:1433 SYN ******S*
>Sep 6 18:47:44 24.57.54.235:1305 -> xxx.yyy.255.245:1433 SYN ******S*
>Sep 6 18:47:44 24.57.54.235:1310 -> xxx.yyy.255.246:1433 SYN ******S*
>Sep 6 18:47:45 24.57.54.235:1340 -> xxx.yyy.255.252:1433 SYN ******S*
>95942
>
>Sep 6 03:12:11 216.45.168.89:3496 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 03:12:11 216.45.168.89:3497 -> xxx.yyy.1.2:1433 SYN ******S*
>Sep 6 03:12:11 216.45.168.89:3498 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 03:12:08 216.45.168.89:3499 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 03:12:11 216.45.168.89:3500 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 03:12:11 216.45.168.89:3501 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 03:12:11 216.45.168.89:3502 -> xxx.yyy.1.7:1433 SYN ******S*
>Sep 6 03:12:11 216.45.168.89:3503 -> xxx.yyy.1.8:1433 SYN ******S*
>[...]
>Sep 6 03:23:50 216.45.168.89:2109 -> xxx.yyy.255.244:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2112 -> xxx.yyy.255.247:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2113 -> xxx.yyy.255.248:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2114 -> xxx.yyy.255.249:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2115 -> xxx.yyy.255.250:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2116 -> xxx.yyy.255.251:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2117 -> xxx.yyy.255.252:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2118 -> xxx.yyy.255.253:1433 SYN ******S*
>Sep 6 03:23:50 216.45.168.89:2119 -> xxx.yyy.255.254:1433 SYN ******S*
>69324
>
>Sep 6 18:10:12 220.234.95.108:3591 -> xxx.yyy.1.3:8535 SYN ******S*
>Sep 6 18:10:12 220.234.95.108:3592 -> xxx.yyy.1.4:8535 SYN ******S*
>Sep 6 18:10:13 220.234.95.108:3594 -> xxx.yyy.1.6:8535 SYN ******S*
>Sep 6 18:10:13 220.234.95.108:3595 -> xxx.yyy.1.7:8535 SYN ******S*
>Sep 6 18:10:13 220.234.95.108:3598 -> xxx.yyy.1.10:8535 SYN ******S*
>Sep 6 18:10:11 220.234.95.108:3599 -> xxx.yyy.1.11:8535 SYN ******S*
>Sep 6 18:10:11 220.234.95.108:3588 -> xxx.yyy.1.0:8535 SYN ******S*
>Sep 6 18:10:13 220.234.95.108:3601 -> xxx.yyy.1.13:8535 SYN ******S*
>[...]
>Sep 6 20:17:47 220.234.95.108:3088 -> xxx.yyy.255.236:8535 SYN ******S*
>Sep 6 20:17:47 220.234.95.108:3092 -> xxx.yyy.255.240:8535 SYN ******S*
>Sep 6 20:17:47 220.234.95.108:3094 -> xxx.yyy.255.242:8535 SYN ******S*
>Sep 6 20:17:47 220.234.95.108:3093 -> xxx.yyy.255.241:8535 SYN ******S*
>Sep 6 20:17:47 220.234.95.108:3098 -> xxx.yyy.255.246:8535 SYN ******S*
>Sep 6 20:17:48 220.234.95.108:3103 -> xxx.yyy.255.251:8535 SYN ******S*
>Sep 6 20:17:48 220.234.95.108:3102 -> xxx.yyy.255.250:8535 SYN ******S*
>Sep 6 20:17:48 220.234.95.108:3105 -> xxx.yyy.255.252:8535 SYN ******S*
>66357
>
>Sep 6 08:00:42 130.228.96.156:2890 -> xxx.yyy.1.1:62976 SYN ******S*
>Sep 6 08:00:43 130.228.96.156:2892 -> xxx.yyy.1.2:62976 SYN ******S*
>Sep 6 08:00:41 130.228.96.156:2894 -> xxx.yyy.1.3:62976 SYN ******S*
>Sep 6 08:00:44 130.228.96.156:2896 -> xxx.yyy.1.4:62976 SYN ******S*
>Sep 6 08:00:41 130.228.96.156:2901 -> xxx.yyy.1.6:62976 SYN ******S*
>Sep 6 08:00:41 130.228.96.156:2902 -> xxx.yyy.1.7:62976 SYN ******S*
>Sep 6 08:00:41 130.228.96.156:2905 -> xxx.yyy.1.8:62976 SYN ******S*
>Sep 6 08:00:44 130.228.96.156:2907 -> xxx.yyy.1.9:62976 SYN ******S*
>[...]
>Sep 6 08:12:31 130.228.96.156:3548 -> xxx.yyy.255.242:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3546 -> xxx.yyy.255.241:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3556 -> xxx.yyy.255.246:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3568 -> xxx.yyy.255.252:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3572 -> xxx.yyy.255.254:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3566 -> xxx.yyy.255.251:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3562 -> xxx.yyy.255.249:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3564 -> xxx.yyy.255.250:62976 SYN ******S*
>Sep 6 08:12:31 130.228.96.156:3570 -> xxx.yyy.255.253:62976 SYN ******S*
>63073
>
>Sep 6 00:54:26 151.100.2.10:3028 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3029 -> xxx.yyy.1.2:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3030 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3031 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3032 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3033 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3037 -> xxx.yyy.1.7:1433 SYN ******S*
>Sep 6 00:54:26 151.100.2.10:3038 -> xxx.yyy.1.8:1433 SYN ******S*
>[...]
>Sep 6 01:14:25 151.100.2.10:4913 -> xxx.yyy.255.253:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4786 -> xxx.yyy.255.233:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4845 -> xxx.yyy.255.244:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4798 -> xxx.yyy.255.236:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4795 -> xxx.yyy.255.235:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4802 -> xxx.yyy.255.239:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4910 -> xxx.yyy.255.252:1433 SYN ******S*
>Sep 6 01:14:25 151.100.2.10:4891 -> xxx.yyy.255.249:1433 SYN ******S*
>52948
>
>Sep 6 09:30:52 222.134.202.42:1047 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 09:30:52 222.134.202.42:1069 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 09:30:52 222.134.202.42:1077 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 09:30:52 222.134.202.42:1085 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 09:30:53 222.134.202.42:1106 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 09:30:50 222.134.202.42:1109 -> xxx.yyy.1.7:1433 SYN ******S*
>Sep 6 09:30:50 222.134.202.42:1116 -> xxx.yyy.1.8:1433 SYN ******S*
>Sep 6 09:30:50 222.134.202.42:1132 -> xxx.yyy.1.11:1433 SYN ******S*
>[...]
>Sep 6 11:43:14 222.134.202.42:1818 -> xxx.yyy.148.201:1433 SYN ******S*
>Sep 6 11:43:14 222.134.202.42:1829 -> xxx.yyy.148.205:1433 SYN ******S*
>Sep 6 11:43:14 222.134.202.42:1842 -> xxx.yyy.148.210:1433 SYN ******S*
>Sep 6 11:43:14 222.134.202.42:1831 -> xxx.yyy.148.207:1433 SYN ******S*
>Sep 6 11:43:14 222.134.202.42:1849 -> xxx.yyy.148.213:1433 SYN ******S*
>Sep 6 11:43:14 222.134.202.42:1854 -> xxx.yyy.148.214:1433 SYN ******S*
>Sep 6 11:43:14 222.134.202.42:2003 -> xxx.yyy.148.217:1433 SYN ******S*
>Sep 6 11:43:15 222.134.202.42:1468 -> xxx.yyy.148.118:1433 SYN ******S*
>40985
>
>Sep 6 23:46:52 134.2.125.210:3414 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 23:46:55 134.2.125.210:3417 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 23:46:55 134.2.125.210:3418 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 23:46:55 134.2.125.210:3419 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 23:46:55 134.2.125.210:3420 -> xxx.yyy.1.7:1433 SYN ******S*
>Sep 6 23:46:55 134.2.125.210:3422 -> xxx.yyy.1.9:1433 SYN ******S*
>Sep 6 23:46:52 134.2.125.210:3423 -> xxx.yyy.1.10:1433 SYN ******S*
>Sep 6 23:46:52 134.2.125.210:3424 -> xxx.yyy.1.11:1433 SYN ******S*
>[...]
>Sep 6 23:58:33 134.2.125.210:2020 -> xxx.yyy.255.242:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2022 -> xxx.yyy.255.244:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2021 -> xxx.yyy.255.243:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2023 -> xxx.yyy.255.245:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2025 -> xxx.yyy.255.247:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2026 -> xxx.yyy.255.248:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2027 -> xxx.yyy.255.249:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2029 -> xxx.yyy.255.251:1433 SYN ******S*
>Sep 6 23:58:33 134.2.125.210:2028 -> xxx.yyy.255.250:1433 SYN ******S*
>39867
>
>Sep 6 13:38:08 151.205.10.194:2454 -> xxx.yyy.10.0:1433 SYN ******S*
>Sep 6 13:38:08 151.205.10.194:2460 -> xxx.yyy.10.3:1433 SYN ******S*
>Sep 6 13:38:08 151.205.10.194:2461 -> xxx.yyy.10.4:1433 SYN ******S*
>Sep 6 13:38:09 151.205.10.194:2463 -> xxx.yyy.10.5:1433 SYN ******S*
>Sep 6 13:38:09 151.205.10.194:2481 -> xxx.yyy.10.6:1433 SYN ******S*
>Sep 6 13:38:08 151.205.10.194:2458 -> xxx.yyy.10.2:1433 SYN ******S*
>Sep 6 13:38:08 151.205.10.194:2456 -> xxx.yyy.10.1:1433 SYN ******S*
>Sep 6 13:38:13 151.205.10.194:2553 -> xxx.yyy.10.7:1433 SYN ******S*
>[...]
>Sep 6 15:31:17 151.205.10.194:2683 -> xxx.yyy.135.61:1433 SYN ******S*
>Sep 6 15:31:17 151.205.10.194:2667 -> xxx.yyy.135.45:1433 SYN ******S*
>Sep 6 15:31:17 151.205.10.194:2684 -> xxx.yyy.135.62:1433 SYN ******S*
>Sep 6 15:31:18 151.205.10.194:2686 -> xxx.yyy.135.64:1433 SYN ******S*
>Sep 6 15:31:18 151.205.10.194:2687 -> xxx.yyy.135.65:1433 SYN ******S*
>Sep 6 15:31:18 151.205.10.194:2670 -> xxx.yyy.135.48:1433 SYN ******S*
>Sep 6 15:31:18 151.205.10.194:2671 -> xxx.yyy.135.49:1433 SYN ******S*
>Sep 6 15:31:18 151.205.10.194:2688 -> xxx.yyy.135.66:1433 SYN ******S*
>Sep 6 15:31:18 151.205.10.194:2639 -> xxx.yyy.135.17:1433 SYN ******S*
>32460
>
>Sep 6 00:17:11 24.214.214.61:4629 -> xxx.yyy.1.0:1433 SYN ******S*
>Sep 6 00:17:11 24.214.214.61:4630 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 00:17:11 24.214.214.61:4631 -> xxx.yyy.1.2:1433 SYN ******S*
>Sep 6 00:17:12 24.214.214.61:4637 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 00:17:12 24.214.214.61:4638 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 00:17:12 24.214.214.61:4642 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 00:17:12 24.214.214.61:4643 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 00:17:12 24.214.214.61:4645 -> xxx.yyy.1.7:1433 SYN ******S*
>[...]
>Sep 6 11:27:26 24.214.214.61:3246 -> xxx.yyy.95.247:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3240 -> xxx.yyy.95.245:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3234 -> xxx.yyy.95.244:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3280 -> xxx.yyy.95.255:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3276 -> xxx.yyy.95.254:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3270 -> xxx.yyy.95.253:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3268 -> xxx.yyy.95.252:1433 SYN ******S*
>Sep 6 11:27:27 24.214.214.61:3264 -> xxx.yyy.95.251:1433 SYN ******S*
>26417
>
>Sep 6 11:30:27 80.180.211.71:3679 -> xxx.yyy.1.0:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3680 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3682 -> xxx.yyy.1.2:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3683 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3684 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3685 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3686 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 11:30:30 80.180.211.71:3687 -> xxx.yyy.1.7:1433 SYN ******S*
>[...]
>Sep 6 13:10:06 80.180.211.71:3268 -> xxx.yyy.111.228:1433 SYN ******S*
>Sep 6 13:10:06 80.180.211.71:3287 -> xxx.yyy.111.229:1433 SYN ******S*
>Sep 6 13:10:06 80.180.211.71:3297 -> xxx.yyy.111.231:1433 SYN ******S*
>Sep 6 13:10:06 80.180.211.71:3295 -> xxx.yyy.111.230:1433 SYN ******S*
>Sep 6 13:10:06 80.180.211.71:3311 -> xxx.yyy.111.233:1433 SYN ******S*
>Sep 6 13:10:06 80.180.211.71:3306 -> xxx.yyy.111.232:1433 SYN ******S*
>Sep 6 13:10:06 80.180.211.71:3323 -> xxx.yyy.111.234:1433 SYN ******S*
>Sep 6 13:10:07 80.180.211.71:3328 -> xxx.yyy.111.235:1433 SYN ******S*
>Sep 6 13:10:07 80.180.211.71:3330 -> xxx.yyy.111.236:1433 SYN ******S*
>26274
>
>[...]
>21759
>
>Sep 6 14:26:33 193.198.140.198:1898 -> xxx.yyy.78.68:1433 SYN ******S*
>Sep 6 14:26:30 193.198.140.198:1902 -> xxx.yyy.78.69:1433 SYN ******S*
>Sep 6 14:26:30 193.198.140.198:1910 -> xxx.yyy.78.71:1433 SYN ******S*
>Sep 6 14:26:33 193.198.140.198:1914 -> xxx.yyy.78.72:1433 SYN ******S*
>Sep 6 14:26:30 193.198.140.198:1941 -> xxx.yyy.78.78:1433 SYN ******S*
>Sep 6 14:26:30 193.198.140.198:1949 -> xxx.yyy.78.80:1433 SYN ******S*
>Sep 6 14:26:30 193.198.140.198:1957 -> xxx.yyy.78.82:1433 SYN ******S*
>Sep 6 14:26:33 193.198.140.198:1961 -> xxx.yyy.78.83:1433 SYN ******S*
>[...]
>Sep 6 15:12:24 193.198.140.198:1340 -> xxx.yyy.129.108:1433 SYN ******S*
>Sep 6 15:12:24 193.198.140.198:1337 -> xxx.yyy.129.107:1433 SYN ******S*
>Sep 6 15:12:24 193.198.140.198:1334 -> xxx.yyy.129.106:1433 SYN ******S*
>Sep 6 15:12:25 193.198.140.198:1490 -> xxx.yyy.129.112:1433 SYN ******S*
>Sep 6 15:12:26 193.198.140.198:1519 -> xxx.yyy.129.113:1433 SYN ******S*
>Sep 6 15:12:27 193.198.140.198:1544 -> xxx.yyy.129.114:1433 SYN ******S*
>Sep 6 15:12:27 193.198.140.198:1546 -> xxx.yyy.129.115:1433 SYN ******S*
>Sep 6 15:12:27 193.198.140.198:1547 -> xxx.yyy.129.116:1433 SYN ******S*
>Sep 6 15:12:27 193.198.140.198:1549 -> xxx.yyy.129.117:1433 SYN ******S*
>13804
>
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.1:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.2:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.3:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.4:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.5:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.6:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.8:111 SYN ******S*
>Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.7:111 SYN ******S*
>[...]
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.246:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.247:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.248:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.249:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.250:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.251:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.252:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.253:111 SYN ******S*
>Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.254:111 SYN ******S*
>11116
>
>Sep 6 23:54:31 60.35.87.165:3351 -> xxx.yyy.71.162:5554 SYN ******S*
>Sep 6 23:54:31 60.35.87.165:3353 -> xxx.yyy.71.164:5554 SYN ******S*
>Sep 6 23:54:34 60.35.87.165:4032 -> xxx.yyy.71.164:9898 SYN ******S*
>Sep 6 23:54:31 60.35.87.165:3354 -> xxx.yyy.71.165:5554 SYN ******S*
>Sep 6 23:54:31 60.35.87.165:3349 -> xxx.yyy.71.160:5554 SYN ******S*
>Sep 6 23:54:32 60.35.87.165:3576 -> xxx.yyy.71.160:1023 SYN ******S*
>Sep 6 23:54:34 60.35.87.165:4028 -> xxx.yyy.71.160:9898 SYN ******S*
>Sep 6 23:54:31 60.35.87.165:3352 -> xxx.yyy.71.163:5554 SYN ******S*
>[...]
>Sep 6 23:56:03 60.35.87.165:3053 -> xxx.yyy.92.9:9898 SYN ******S*
>Sep 6 23:56:03 60.35.87.165:3088 -> xxx.yyy.92.18:9898 SYN ******S*
>Sep 6 23:56:03 60.35.87.165:3090 -> xxx.yyy.92.20:9898 SYN ******S*
>Sep 6 23:56:03 60.35.87.165:3082 -> xxx.yyy.92.12:9898 SYN ******S*
>Sep 6 23:56:03 60.35.87.165:3083 -> xxx.yyy.92.13:9898 SYN ******S*
>Sep 6 23:56:03 60.35.87.165:3087 -> xxx.yyy.92.17:9898 SYN ******S*
>Sep 6 23:56:04 60.35.87.165:3092 -> xxx.yyy.92.21:9898 SYN ******S*
>Sep 6 23:56:04 60.35.87.165:3093 -> xxx.yyy.92.22:9898 SYN ******S*
>Sep 6 23:56:04 60.35.87.165:3094 -> xxx.yyy.92.23:9898 SYN ******S*
>8399
>
>Sep 6 00:00:12 65.54.188.52:62536 -> xxx.yyy.241.20:80 SYN ******S*
>Sep 6 00:00:12 65.54.188.52:62367 -> xxx.yyy.241.255:80 SYN ******S*
>Sep 6 00:00:12 65.54.188.52:62535 -> xxx.yyy.241.179:80 SYN ******S*
>Sep 6 00:00:12 65.54.188.52:62582 -> xxx.yyy.1.60:80 SYN ******S*
>Sep 6 00:00:12 65.54.188.52:62632 -> xxx.yyy.1.13:80 SYN ******S*
>Sep 6 00:00:12 65.54.188.52:62724 -> xxx.yyy.210.5:80 SYN ******S*
>Sep 6 00:00:13 65.54.188.52:63162 -> xxx.yyy.241.29:80 SYN ******S*
>Sep 6 00:00:14 65.54.188.52:63561 -> xxx.yyy.234.52:80 SYN ******S*
>[...]
>Sep 6 23:50:06 65.54.188.52:16210 -> xxx.yyy.249.31:80 SYN ******S*
>Sep 6 23:50:09 65.54.188.52:16241 -> xxx.yyy.227.252:80 SYN ******S*
>Sep 6 23:50:06 65.54.188.52:16318 -> xxx.yyy.225.122:204 SYN ******S*
>Sep 6 23:50:07 65.54.188.52:16478 -> xxx.yyy.1.13:80 SYN ******S*
>Sep 6 23:50:09 65.54.188.52:16667 -> xxx.yyy.241.179:80 SYN ******S*
>Sep 6 23:50:15 65.54.188.52:16241 -> xxx.yyy.227.252:80 SYN ******S*
>Sep 6 23:50:15 65.54.188.52:16210 -> xxx.yyy.249.31:80 SYN ******S*
>Sep 6 23:50:16 65.54.188.52:16318 -> xxx.yyy.225.122:204 SYN ******S*
>7952
>
>Sep 6 23:53:36 221.190.110.133:2285 -> xxx.yyy.133.245:5554 SYN ******S*
>Sep 6 23:53:36 221.190.110.133:2268 -> xxx.yyy.133.239:5554 SYN ******S*
>Sep 6 23:53:37 221.190.110.133:2979 -> xxx.yyy.133.239:1023 SYN ******S*
>Sep 6 23:53:39 221.190.110.133:1238 -> xxx.yyy.133.239:9898 SYN ******S*
>Sep 6 23:53:36 221.190.110.133:2302 -> xxx.yyy.133.254:5554 SYN ******S*
>Sep 6 23:53:37 221.190.110.133:3007 -> xxx.yyy.133.254:1023 SYN ******S*
>Sep 6 23:53:36 221.190.110.133:2297 -> xxx.yyy.133.250:5554 SYN ******S*
>Sep 6 23:53:36 221.190.110.133:2298 -> xxx.yyy.133.249:5554 SYN ******S*
>[...]
>Sep 6 23:54:28 221.190.110.133:2941 -> xxx.yyy.141.101:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2934 -> xxx.yyy.141.118:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2938 -> xxx.yyy.141.105:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2967 -> xxx.yyy.141.106:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2968 -> xxx.yyy.141.120:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2995 -> xxx.yyy.141.121:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2999 -> xxx.yyy.141.123:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:3000 -> xxx.yyy.141.124:9898 SYN ******S*
>Sep 6 23:54:28 221.190.110.133:2994 -> xxx.yyy.141.119:9898 SYN ******S*
>7790
>
>Sep 6 13:46:50 193.198.130.211:2306 -> xxx.yyy.1.0:1433 SYN ******S*
>Sep 6 13:46:50 193.198.130.211:2307 -> xxx.yyy.1.1:1433 SYN ******S*
>Sep 6 13:46:50 193.198.130.211:2308 -> xxx.yyy.1.2:1433 SYN ******S*
>Sep 6 13:46:50 193.198.130.211:2309 -> xxx.yyy.1.3:1433 SYN ******S*
>Sep 6 13:46:50 193.198.130.211:2310 -> xxx.yyy.1.4:1433 SYN ******S*
>Sep 6 13:46:47 193.198.130.211:2313 -> xxx.yyy.1.5:1433 SYN ******S*
>Sep 6 13:46:50 193.198.130.211:2314 -> xxx.yyy.1.6:1433 SYN ******S*
>Sep 6 13:46:50 193.198.130.211:2315 -> xxx.yyy.1.7:1433 SYN ******S*
>[...]
>Sep 6 14:16:36 193.198.130.211:4421 -> xxx.yyy.33.245:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4428 -> xxx.yyy.33.250:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4430 -> xxx.yyy.33.251:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4427 -> xxx.yyy.33.249:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4431 -> xxx.yyy.33.252:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4434 -> xxx.yyy.33.253:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4436 -> xxx.yyy.33.255:1433 SYN ******S*
>Sep 6 14:16:37 193.198.130.211:4435 -> xxx.yyy.33.254:1433 SYN ******S*
>7695
>
>Sep 6 00:55:56 61.149.218.75:2850 -> xxx.yyy.133.14:5554 SYN ******S*
>Sep 6 00:55:57 61.149.218.75:3478 -> xxx.yyy.133.14:1023 SYN ******S*
>Sep 6 00:55:59 61.149.218.75:4768 -> xxx.yyy.133.14:9898 SYN ******S*
>Sep 6 00:55:56 61.149.218.75:2851 -> xxx.yyy.133.15:5554 SYN ******S*
>Sep 6 00:55:57 61.149.218.75:3480 -> xxx.yyy.133.15:1023 SYN ******S*
>Sep 6 00:55:59 61.149.218.75:4784 -> xxx.yyy.133.15:9898 SYN ******S*
>Sep 6 00:55:56 61.149.218.75:2857 -> xxx.yyy.133.23:5554 SYN ******S*
>Sep 6 00:55:57 61.149.218.75:3489 -> xxx.yyy.133.23:1023 SYN ******S*
>[...]
>Sep 6 00:56:39 61.149.218.75:2284 -> xxx.yyy.153.37:9898 SYN ******S*
>Sep 6 00:56:39 61.149.218.75:2350 -> xxx.yyy.153.96:9898 SYN ******S*
>Sep 6 00:56:39 61.149.218.75:2715 -> xxx.yyy.141.102:5554 SYN ******S*
>Sep 6 00:56:40 61.149.218.75:3160 -> xxx.yyy.138.30:1023 SYN ******S*
>Sep 6 00:56:42 61.149.218.75:4198 -> xxx.yyy.138.30:9898 SYN ******S*
>Sep 6 00:56:40 61.149.218.75:3216 -> xxx.yyy.141.102:1023 SYN ******S*
>Sep 6 00:56:42 61.149.218.75:4284 -> xxx.yyy.141.102:9898 SYN ******S*
>Sep 6 00:56:42 61.149.218.75:1169 -> xxx.yyy.146.30:5554 SYN ******S*
>Sep 6 00:56:43 61.149.218.75:1668 -> xxx.yyy.146.30:1023 SYN ******S*
>7648
>
>Sep 6 23:51:06 221.152.196.75:1400 -> xxx.yyy.71.204:5554 SYN ******S*
>Sep 6 23:51:06 221.152.196.75:1412 -> xxx.yyy.71.196:5554 SYN ******S*
>Sep 6 23:51:07 221.152.196.75:2230 -> xxx.yyy.71.196:1023 SYN ******S*
>Sep 6 23:51:06 221.152.196.75:1404 -> xxx.yyy.71.201:5554 SYN ******S*
>Sep 6 23:51:06 221.152.196.75:1406 -> xxx.yyy.71.199:5554 SYN ******S*
>Sep 6 23:51:06 221.152.196.75:1413 -> xxx.yyy.71.195:5554 SYN ******S*
>Sep 6 23:51:07 221.152.196.75:2231 -> xxx.yyy.71.195:1023 SYN ******S*
>Sep 6 23:51:06 221.152.196.75:1439 -> xxx.yyy.71.175:5554 SYN ******S*
>[...]
>Sep 6 23:51:46 221.152.196.75:2927 -> xxx.yyy.92.7:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2934 -> xxx.yyy.92.13:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2935 -> xxx.yyy.92.14:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2942 -> xxx.yyy.92.21:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2939 -> xxx.yyy.92.18:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2936 -> xxx.yyy.92.15:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2940 -> xxx.yyy.92.19:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2954 -> xxx.yyy.92.25:9898 SYN ******S*
>Sep 6 23:51:46 221.152.196.75:2953 -> xxx.yyy.92.24:9898 SYN ******S*
>6593
>
>Sep 6 23:55:39 221.155.112.136:2528 -> xxx.yyy.194.147:5554 SYN ******S*
>Sep 6 23:55:42 221.155.112.136:4767 -> xxx.yyy.194.147:9898 SYN ******S*
>Sep 6 23:55:39 221.155.112.136:2530 -> xxx.yyy.194.149:5554 SYN ******S*
>Sep 6 23:55:40 221.155.112.136:3193 -> xxx.yyy.194.149:1023 SYN ******S*
>Sep 6 23:55:39 221.155.112.136:2532 -> xxx.yyy.194.148:5554 SYN ******S*
>Sep 6 23:55:42 221.155.112.136:4700 -> xxx.yyy.194.148:9898 SYN ******S*
>Sep 6 23:55:39 221.155.112.136:2531 -> xxx.yyy.194.124:5554 SYN ******S*
>Sep 6 23:55:39 221.155.112.136:2533 -> xxx.yyy.194.126:5554 SYN ******S*
>[...]
>Sep 6 23:56:34 221.155.112.136:1642 -> xxx.yyy.214.171:9898 SYN ******S*
>Sep 6 23:56:34 221.155.112.136:1671 -> xxx.yyy.214.215:9898 SYN ******S*
>Sep 6 23:56:34 221.155.112.136:1673 -> xxx.yyy.214.222:9898 SYN ******S*
>Sep 6 23:56:34 221.155.112.136:1674 -> xxx.yyy.214.223:9898 SYN ******S*
>Sep 6 23:56:34 221.155.112.136:1678 -> xxx.yyy.214.227:9898 SYN ******S*
>Sep 6 23:56:34 221.155.112.136:1694 -> xxx.yyy.214.236:9898 SYN ******S*
>Sep 6 23:56:34 221.155.112.136:1724 -> xxx.yyy.194.135:9898 SYN ******S*
>Sep 6 23:56:35 221.155.112.136:1834 -> xxx.yyy.194.146:9898 SYN ******S*
>Sep 6 23:56:35 221.155.112.136:1841 -> xxx.yyy.194.137:9898 SYN ******S*
>6466
>
>Sep 6 00:56:14 220.163.192.71:3107 -> xxx.yyy.214.250:5554 SYN ******S*
>Sep 6 00:56:14 220.163.192.71:3110 -> xxx.yyy.214.253:5554 SYN ******S*
>Sep 6 00:56:14 220.163.192.71:3111 -> xxx.yyy.214.254:5554 SYN ******S*
>Sep 6 00:56:15 220.163.192.71:3744 -> xxx.yyy.214.254:1023 SYN ******S*
>Sep 6 00:56:14 220.163.192.71:3118 -> xxx.yyy.215.4:5554 SYN ******S*
>Sep 6 00:56:14 220.163.192.71:3124 -> xxx.yyy.215.9:5554 SYN ******S*
>Sep 6 00:56:17 220.163.192.71:1385 -> xxx.yyy.215.9:9898 SYN ******S*
>Sep 6 00:56:14 220.163.192.71:3126 -> xxx.yyy.215.11:5554 SYN ******S*
>[...]
>Sep 6 00:56:56 220.163.192.71:2575 -> xxx.yyy.235.26:9898 SYN ******S*
>Sep 6 00:56:56 220.163.192.71:2632 -> xxx.yyy.235.35:9898 SYN ******S*
>Sep 6 00:56:56 220.163.192.71:2789 -> xxx.yyy.235.49:9898 SYN ******S*
>Sep 6 00:56:56 220.163.192.71:2786 -> xxx.yyy.235.48:9898 SYN ******S*
>Sep 6 00:56:56 220.163.192.71:2851 -> xxx.yyy.235.62:9898 SYN ******S*
>Sep 6 00:56:56 220.163.192.71:2751 -> xxx.yyy.235.41:9898 SYN ******S*
>Sep 6 00:56:57 220.163.192.71:2833 -> xxx.yyy.235.55:9898 SYN ******S*
>Sep 6 00:56:57 220.163.192.71:2866 -> xxx.yyy.235.64:9898 SYN ******S*
>Sep 6 00:56:57 220.163.192.71:2917 -> xxx.yyy.235.79:9898 SYN ******S*
>6028
>
>Sep 6 00:56:09 218.66.26.128:3065 -> xxx.yyy.174.2:5554 SYN ******S*
>Sep 6 00:56:12 218.66.26.128:4100 -> xxx.yyy.174.2:9898 SYN ******S*
>Sep 6 00:56:09 218.66.26.128:3097 -> xxx.yyy.174.3:5554 SYN ******S*
>Sep 6 00:56:10 218.66.26.128:3438 -> xxx.yyy.174.3:1023 SYN ******S*
>Sep 6 00:56:09 218.66.26.128:3111 -> xxx.yyy.174.4:5554 SYN ******S*
>Sep 6 00:56:09 218.66.26.128:3260 -> xxx.yyy.174.7:5554 SYN ******S*
>Sep 6 00:56:09 218.66.26.128:3295 -> xxx.yyy.174.8:5554 SYN ******S*
>Sep 6 00:56:12 218.66.26.128:4181 -> xxx.yyy.174.8:9898 SYN ******S*
>[...]
>Sep 6 01:03:03 218.66.26.128:4709 -> xxx.yyy.182.199:9898 SYN ******S*
>Sep 6 01:03:03 218.66.26.128:4695 -> xxx.yyy.182.192:9898 SYN ******S*
>Sep 6 01:03:03 218.66.26.128:4711 -> xxx.yyy.182.198:9898 SYN ******S*
>Sep 6 01:03:03 218.66.26.128:4714 -> xxx.yyy.182.197:9898 SYN ******S*
>Sep 6 01:03:04 218.66.26.128:1045 -> xxx.yyy.182.209:9898 SYN ******S*
>Sep 6 01:03:04 218.66.26.128:1044 -> xxx.yyy.182.210:9898 SYN ******S*
>Sep 6 01:03:04 218.66.26.128:1056 -> xxx.yyy.182.202:9898 SYN ******S*
>Sep 6 01:03:04 218.66.26.128:1051 -> xxx.yyy.182.205:9898 SYN ******S*
>Sep 6 01:03:04 218.66.26.128:1058 -> xxx.yyy.182.200:9898 SYN ******S*
>6003
>
>Sep 6 23:59:29 220.123.249.15:4025 -> xxx.yyy.71.160:5554 SYN ******S*
>Sep 6 23:59:32 220.123.249.15:2265 -> xxx.yyy.71.160:9898 SYN ******S*
>Sep 6 23:59:29 220.123.249.15:4036 -> xxx.yyy.71.163:5554 SYN ******S*
>Sep 6 23:59:30 220.123.249.15:1072 -> xxx.yyy.71.163:1023 SYN ******S*
>Sep 6 23:59:32 220.123.249.15:2276 -> xxx.yyy.71.163:9898 SYN ******S*
>Sep 6 23:59:29 220.123.249.15:4028 -> xxx.yyy.71.162:5554 SYN ******S*
>Sep 6 23:59:30 220.123.249.15:1065 -> xxx.yyy.71.162:1023 SYN ******S*
>Sep 6 23:59:32 220.123.249.15:2268 -> xxx.yyy.71.162:9898 SYN ******S*
>[...]
>Sep 7 00:00:00 220.123.249.15:2709 -> xxx.yyy.86.139:1023 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2718 -> xxx.yyy.86.141:1023 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2716 -> xxx.yyy.87.55:5554 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2962 -> xxx.yyy.86.249:1023 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2961 -> xxx.yyy.87.78:5554 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2963 -> xxx.yyy.86.250:1023 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2966 -> xxx.yyy.86.252:1023 SYN ******S*
>Sep 7 00:00:00 220.123.249.15:2999 -> xxx.yyy.85.175:9898 SYN ******S*
>Sep 7 00:00:01 220.123.249.15:3034 -> xxx.yyy.87.12:1023 SYN ******S*
>5962
>
>Sep 6 23:57:05 221.150.214.210:2208 -> xxx.yyy.72.129:5554 SYN ******S*
>Sep 6 23:57:05 221.150.214.210:2205 -> xxx.yyy.72.128:5554 SYN ******S*
>Sep 6 23:57:05 221.150.214.210:2214 -> xxx.yyy.72.132:5554 SYN ******S*
>Sep 6 23:57:06 221.150.214.210:2802 -> xxx.yyy.72.132:1023 SYN ******S*
>Sep 6 23:57:08 221.150.214.210:4985 -> xxx.yyy.72.132:9898 SYN ******S*
>Sep 6 23:57:05 221.150.214.210:2213 -> xxx.yyy.72.131:5554 SYN ******S*
>Sep 6 23:57:05 221.150.214.210:2281 -> xxx.yyy.72.139:5554 SYN ******S*
>Sep 6 23:57:06 221.150.214.210:2903 -> xxx.yyy.72.139:1023 SYN ******S*
>[...]
>Sep 6 23:58:03 221.150.214.210:1892 -> xxx.yyy.92.224:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:1926 -> xxx.yyy.92.226:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:1970 -> xxx.yyy.92.240:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:1964 -> xxx.yyy.92.236:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:1989 -> xxx.yyy.92.241:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:1986 -> xxx.yyy.92.242:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:2002 -> xxx.yyy.92.246:9898 SYN ******S*
>Sep 6 23:58:03 221.150.214.210:2009 -> xxx.yyy.92.245:9898 SYN ******S*
>5479
>
>--
>- Ken
>===========================================================================
>Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
>University of Northern Iowa Cedar Falls, IA 50614-0121
>email: Ken.Connelly at uni.edu phone: (319) 273-5850 fax: (319) 273-7373
>
>
>------------------------------
>
>_______________________________________________
>Intrusions mailing list
>Intrusions at lists.sans.org
>http://www.dshield.org/mailman/listinfo/intrusions
>
>
>End of Intrusions Digest, Vol 6, Issue 13
>*****************************************
_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today!
http://www.msn.co.uk/messenger
More information about the Intrusions
mailing list