Trojan ports are popular today

Anderson Johnston andy at umbc.edu
Thu Nov 1 19:14:22 GMT 2001


I'm forwarding part of the daily scan summary for yesterday.  At least,
I'm assuming it's a scan and not a "wake-up" call with spoofed addresses.

===================================================================================
                            Scanners by Number of Target IP Addresses
			    -----------------------------------------
Scanner IP		# Targets 		Ports 			Type
-------------------	--------------		-----------		-----------
24.25.206.180  		95      		12345 27374		SYN
24.95.217.34   		57      		12345      		SYN
24.128.109.1   		36      		12345 27374		SYN
24.141.168.131 		22      		12345      		SYN
24.141.188.248 		41      		12345      		SYN
61.59.178.130  		68      		12345      		SYN
61.75.201.89   		35      		12345      		SYN
61.79.21.24    		41      		12345      		SYN
61.79.232.204  		75      		12345      		SYN
61.84.10.44    		22      		12345      		SYN
61.84.72.138   		42      		12345      		SYN
63.67.241.45   		38      		12345      		SYN
63.81.229.73   		48      		2830 3226  		SYN UDP
 						12345
63.201.92.202  		24      		12345      		SYN
63.205.11.89   		238     		12345      		SYN
64.91.17.57    		118     		12345 27374		SYN
65.0.45.99     		240     		12345      		SYN
65.129.48.79   		1       		0          		SYNFIN
66.75.129.216  		35      		12345      		SYN
208.58.87.116  		31      		12345      		SYN




More information about the unisog mailing list