I'm showing that somewhere, someone is very interested
in scanning for ftp servers on my network, but they're
doing this in a very slow fashion, and it appears to
be coming from random hosts (they'll hit one host
every couple hours, this has been going on for weeks).
I'm not at all sure how to identify which one is the
badguy, or even if there is a badguy. Assuming that
most of these hosts are spoofed, and that their ttl's,
tcp sequences, ip id's, and such are all randomized
within normal parameters, is there any way to
determine whats going on?
I've included output of the dump file, but if you can
think of anything to look for, don't hesitate to let
me know. The xxx.xxx.xxx refers to the first three
octets of our class-c block. They're hitting host
IP's that most of the time don't even correlate to a
machine.
Thanks in advance,
Joe.
No. Time Source
Destination Protocol Info
1 2001-10-10 01:03:15.1922 195.68.96.19
xxx.xxx.xxx.232 TCP 4801 > ftp [SYN]
Seq=437486962 Ack=0 Win=8192 Len=0
2 2001-10-10 01:03:18.1923 195.68.96.19
xxx.xxx.xxx.232 TCP 4801 > ftp [SYN]
Seq=437486962 Ack=0 Win=8192 Len=0
3 2001-10-10 01:14:10.0683 195.65.149.116
xxx.xxx.xxx.179 TCP 1984 > ftp [SYN]
Seq=1991662751 Ack=0 Win=16384 Len=0
4 2001-10-10 01:28:11.4206 195.65.149.116
xxx.xxx.xxx.175 TCP 4667 > ftp [SYN]
Seq=2459891555 Ack=0 Win=16384 Len=0
5 2001-10-10 01:28:14.5907 195.65.149.116
xxx.xxx.xxx.175 TCP 4667 > ftp [SYN]
Seq=2459891555 Ack=0 Win=16384 Len=0
6 2001-10-10 05:01:14.9780 212.161.5.10
xxx.xxx.xxx.246 TCP 2463 > ftp [SYN]
Seq=2578883475 Ack=0 Win=8192 Len=0
7 2001-10-10 05:01:18.2581 212.161.5.10
xxx.xxx.xxx.246 TCP 2463 > ftp [SYN]
Seq=2578883475 Ack=0 Win=8192 Len=0
8 2001-10-10 06:32:32.9078 195.65.149.116
xxx.xxx.xxx.237 TCP 4693 > ftp [SYN]
Seq=78970318 Ack=0 Win=16384 Len=0
9 2001-10-10 06:32:36.1779 195.65.149.116
xxx.xxx.xxx.237 TCP 4693 > ftp [SYN]
Seq=78970318 Ack=0 Win=16384 Len=0
10 2001-10-10 06:36:47.9143 195.65.149.116
xxx.xxx.xxx.242 TCP 4998 > ftp [SYN]
Seq=419965536 Ack=0 Win=16384 Len=0
11 2001-10-10 06:36:51.1444 195.65.149.116
xxx.xxx.xxx.242 TCP 4998 > ftp [SYN]
Seq=419965536 Ack=0 Win=16384 Len=0
12 2001-10-10 06:54:16.4511 195.68.96.19
xxx.xxx.xxx.228 TCP 4457 > ftp [SYN]
Seq=855803979 Ack=0 Win=8192 Len=0
13 2001-10-10 06:54:19.4312 195.68.96.19
xxx.xxx.xxx.228 TCP 4457 > ftp [SYN]
Seq=855803979 Ack=0 Win=8192 Len=0
14 2001-10-10 08:54:49.4261 195.65.149.116
xxx.xxx.xxx.127 TCP 2952 > ftp [SYN]
Seq=3496295062 Ack=0 Win=16384 Len=0
15 2001-10-10 08:54:52.6462 195.65.149.116
xxx.xxx.xxx.127 TCP 2952 > ftp [SYN]
Seq=3496295062 Ack=0 Win=16384 Len=0
16 2001-10-10 12:46:10.8995 195.65.149.116
xxx.xxx.xxx.84 TCP 1913 > ftp [SYN]
Seq=3261454445 Ack=0 Win=16384 Len=0
17 2001-10-10 12:46:14.1796 195.65.149.116
xxx.xxx.xxx.84 TCP 1913 > ftp [SYN]
Seq=3261454445 Ack=0 Win=16384 Len=0
18 2001-10-10 13:49:49.8175 200.39.107.145
xxx.xxx.xxx.60 TCP 2993 > ftp [SYN]
Seq=3178143203 Ack=0 Win=16384 Len=0
19 2001-10-10 13:49:49.8175 200.39.107.145
xxx.xxx.xxx.60 TCP 2993 > ftp [SYN]
Seq=3178143203 Ack=0 Win=16384 Len=0
20 2001-10-10 14:09:43.3461 200.10.69.11
xxx.xxx.xxx.14 TCP 4476 > ftp [SYN]
Seq=24376419 Ack=0 Win=8192 Len=0
21 2001-10-10 14:30:35.1790 200.223.26.170
xxx.xxx.xxx.209 TCP 4459 > ftp [SYN]
Seq=141716950 Ack=0 Win=8192 Len=0
22 2001-10-10 14:32:37.3623 200.60.123.163
xxx.xxx.xxx.180 TCP 61163 > ftp [SYN]
Seq=3006541 Ack=0 Win=8192 Len=0
23 2001-10-10 14:32:40.2924 200.60.123.163
xxx.xxx.xxx.180 TCP 61163 > ftp [SYN]
Seq=3006541 Ack=0 Win=8192 Len=0
24 2001-10-10 14:41:36.5785 63.90.40.11
xxx.xxx.xxx.51 TCP 2643 > ftp [SYN]
Seq=449857522 Ack=0 Win=8192 Len=0
25 2001-10-10 14:41:39.8086 63.90.40.11
xxx.xxx.xxx.51 TCP 2643 > ftp [SYN]
Seq=449857522 Ack=0 Win=8192 Len=0
26 2001-10-10 14:45:40.4559 200.60.123.163
xxx.xxx.xxx.93 TCP 61015 > ftp [SYN]
Seq=3240402 Ack=0 Win=8192 Len=0
27 2001-10-10 15:12:15.7344 200.202.16.246
xxx.xxx.xxx.64 TCP 1370 > ftp [SYN]
Seq=3156468731 Ack=0 Win=16384 Len=0
28 2001-10-10 15:12:18.7645 200.202.16.246
xxx.xxx.xxx.64 TCP 1370 > ftp [SYN]
Seq=3156468731 Ack=0 Win=16384 Len=0
29 2001-10-10 15:53:58.1886 195.68.96.19
xxx.xxx.xxx.222 TCP 3248 > ftp [SYN]
Seq=1506878187 Ack=0 Win=8192 Len=0
30 2001-10-10 16:21:10.2134 200.196.78.98
xxx.xxx.xxx.200 TCP 2831 > ftp [SYN]
Seq=36575512 Ack=0 Win=8192 Len=0
31 2001-10-10 16:41:52.2804 63.90.40.11
xxx.xxx.xxx.120 TCP 4654 > ftp [SYN]
Seq=551213589 Ack=0 Win=8192 Len=0
32 2001-10-10 17:22:43.9926 193.61.122.203
xxx.xxx.xxx.208 TCP 4777 > ftp [SYN]
Seq=3700931340 Ack=0 Win=60352 Len=0
33 2001-10-10 17:22:46.9727 193.61.122.203
xxx.xxx.xxx.208 TCP 4777 > ftp [SYN]
Seq=3700931340 Ack=0 Win=60352 Len=0
34 2001-10-10 17:50:29.9480 195.74.119.181
xxx.xxx.xxx.42 TCP 1307 > ftp [SYN]
Seq=191140840 Ack=0 Win=16384 Len=0
35 2001-10-10 17:50:32.9080 195.74.119.181
xxx.xxx.xxx.42 TCP 1307 > ftp [SYN]
Seq=191140840 Ack=0 Win=16384 Len=0
36 2001-10-10 18:34:34.3223 195.5.220.18
xxx.xxx.xxx.25 TCP 4682 > ftp [SYN]
Seq=93082111 Ack=0 Win=16384 Len=0
37 2001-10-10 18:34:37.2923 195.5.220.18
xxx.xxx.xxx.25 TCP 4682 > ftp [SYN]
Seq=93082111 Ack=0 Win=16384 Len=0
38 2001-10-10 18:40:21.9418 195.199.83.253
xxx.xxx.xxx.25 TCP 4411 > ftp [SYN]
Seq=850924731 Ack=0 Win=8192 Len=0
39 2001-10-10 18:40:24.9019 195.199.83.253
xxx.xxx.xxx.25 TCP 4411 > ftp [SYN]
Seq=850924731 Ack=0 Win=8192 Len=0
40 2001-10-10 18:59:41.4848 63.149.146.241
xxx.xxx.xxx.30 TCP 3052 > ftp [SYN]
Seq=481141039 Ack=0 Win=8192 Len=0
41 2001-10-10 19:00:47.2568 64.7.209.148
xxx.xxx.xxx.138 TCP 2608 > ftp [SYN]
Seq=1902014232 Ack=0 Win=16384 Len=0
42 2001-10-10 19:44:01.8167 200.185.37.76
xxx.xxx.xxx.212 TCP 1998 > ftp [SYN]
Seq=2295518508 Ack=0 Win=16384 Len=0
43 2001-10-10 19:44:04.7468 200.185.37.76
xxx.xxx.xxx.212 TCP 1998 > ftp [SYN]
Seq=2295518508 Ack=0 Win=16384 Len=0
44 2001-10-10 20:16:55.1976 64.42.193.137
xxx.xxx.xxx.9 TCP 2515 > ftp [SYN]
Seq=2467964642 Ack=0 Win=16384 Len=0
45 2001-10-10 20:28:41.9690 63.90.40.11
xxx.xxx.xxx.181 TCP 1414 > ftp [SYN]
Seq=650992320 Ack=0 Win=8192 Len=0
46 2001-10-10 20:47:41.3763 63.122.183.3
xxx.xxx.xxx.160 TCP 1883 > ftp [SYN]
Seq=521602904 Ack=0 Win=8192 Len=0
47 2001-10-10 20:47:44.5864 63.122.183.3
xxx.xxx.xxx.160 TCP 1883 > ftp [SYN]
Seq=521602904 Ack=0 Win=8192 Len=0
48 2001-10-10 22:28:01.5360 212.161.5.10
xxx.xxx.xxx.238 TCP 2567 > ftp [SYN]
Seq=2974548414 Ack=0 Win=8192 Len=0
49 2001-10-10 22:32:20.9541 199.190.129.3
xxx.xxx.xxx.68 TCP rmtcfg > ftp [SYN]
Seq=1429191 Ack=0 Win=8192 Len=0
50 2001-10-10 22:32:23.9042 199.190.129.3
xxx.xxx.xxx.68 TCP rmtcfg > ftp [SYN]
Seq=1429191 Ack=0 Win=8192 Len=0
51 2001-10-10 22:35:02.6796 195.223.61.3
xxx.xxx.xxx.164 TCP 3732 > ftp [SYN]
Seq=647197784 Ack=0 Win=8192 Len=0
52 2001-10-10 23:47:48.9043 64.92.132.10
xxx.xxx.xxx.216 TCP 1904 > ftp [SYN]
Seq=8187544 Ack=0 Win=8192 Len=0
53 2001-10-10 23:47:52.1244 64.92.132.10
xxx.xxx.xxx.216 TCP 1904 > ftp [SYN]
Seq=8187544 Ack=0 Win=8192 Len=0
54 2001-10-11 00:13:25.8082 195.65.149.116
xxx.xxx.xxx.132 TCP 2120 > ftp [SYN]
Seq=353365062 Ack=0 Win=16384 Len=0
55 2001-10-11 00:13:29.0083 195.65.149.116
xxx.xxx.xxx.132 TCP 2120 > ftp [SYN]
Seq=353365062 Ack=0 Win=16384 Len=0
56 2001-10-11 01:40:12.3968 63.203.152.242
xxx.xxx.xxx.99 TCP 3231 > ftp [SYN]
Seq=1802419993 Ack=0 Win=16384 Len=0
57 2001-10-11 02:25:42.1943 195.5.220.18
xxx.xxx.xxx.81 TCP 2632 > ftp [SYN]
Seq=2065296775 Ack=0 Win=16384 Len=0
58 2001-10-11 02:26:42.3361 195.5.220.18
xxx.xxx.xxx.81 TCP 2632 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=0
59 2001-10-11 05:01:14.2455 212.161.5.10
xxx.xxx.xxx.246 TCP 1684 > ftp [SYN]
Seq=3114771639 Ack=0 Win=8192 Len=0
60 2001-10-11 06:07:11.9999 63.122.183.3
xxx.xxx.xxx.115 TCP 1875 > ftp [SYN]
Seq=1328901219 Ack=0 Win=8192 Len=0
61 2001-10-11 06:07:15.2000 63.122.183.3
xxx.xxx.xxx.115 TCP 1875 > ftp [SYN]
Seq=1328901219 Ack=0 Win=8192 Len=0
62 2001-10-11 06:19:34.4119 195.199.83.253
xxx.xxx.xxx.124 TCP 3791 > ftp [SYN]
Seq=948374382 Ack=0 Win=8192 Len=0
63 2001-10-11 06:24:42.9113 200.177.124.18
xxx.xxx.xxx.171 TCP 1394 > ftp [SYN]
Seq=895697609 Ack=0 Win=16384 Len=0
64 2001-10-11 06:24:45.8714 200.177.124.18
xxx.xxx.xxx.171 TCP 1394 > ftp [SYN]
Seq=895697609 Ack=0 Win=16384 Len=0
65 2001-10-11 07:54:56.3936 63.162.34.112
xxx.xxx.xxx.38 TCP 1856 > ftp [SYN]
Seq=203522633 Ack=0 Win=8192 Len=0
66 2001-10-11 07:54:59.5937 63.162.34.112
xxx.xxx.xxx.38 TCP 1856 > ftp [SYN]
Seq=203522633 Ack=0 Win=8192 Len=0
67 2001-10-11 08:14:06.9976 63.122.183.3
xxx.xxx.xxx.86 TCP 1795 > ftp [SYN]
Seq=1340753580 Ack=0 Win=8192 Len=0
68 2001-10-11 08:14:10.1777 63.122.183.3
xxx.xxx.xxx.86 TCP 1795 > ftp [SYN]
Seq=1340753580 Ack=0 Win=8192 Len=0
69 2001-10-11 08:18:05.5154 200.185.37.76
xxx.xxx.xxx.115 TCP 1935 > ftp [SYN]
Seq=3639042139 Ack=0 Win=16384 Len=0
70 2001-10-11 08:18:08.4254 200.185.37.76
xxx.xxx.xxx.115 TCP 1935 > ftp [SYN]
Seq=3639042139 Ack=0 Win=16384 Len=0
71 2001-10-11 08:20:24.5699 64.66.223.131
xxx.xxx.xxx.108 TCP 3712 > ftp [SYN]
Seq=2669463810 Ack=0 Win=8192 Len=0
72 2001-10-11 08:20:27.7700 64.66.223.131
xxx.xxx.xxx.108 TCP 3712 > ftp [SYN]
Seq=2669463810 Ack=0 Win=8192 Len=0
73 2001-10-11 08:27:58.2543 64.66.223.131
xxx.xxx.xxx.108 TCP 3712 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
74 2001-10-11 09:50:12.1720 195.65.149.116
xxx.xxx.xxx.5 TCP 3852 > ftp [SYN]
Seq=3801408234 Ack=0 Win=16384 Len=0
75 2001-10-11 09:50:15.4421 195.65.149.116
xxx.xxx.xxx.5 TCP 3852 > ftp [SYN]
Seq=3801408234 Ack=0 Win=16384 Len=0
76 2001-10-11 11:36:16.8944 199.190.129.3
xxx.xxx.xxx.42 TCP 4550 > ftp [SYN]
Seq=4873849 Ack=0 Win=8192 Len=0
77 2001-10-11 13:12:37.3795 63.122.183.3
xxx.xxx.xxx.64 TCP 1605 > ftp [SYN]
Seq=1407549290 Ack=0 Win=8192 Len=0
78 2001-10-11 13:12:40.6596 63.122.183.3
xxx.xxx.xxx.64 TCP 1605 > ftp [SYN]
Seq=1407549290 Ack=0 Win=8192 Len=0
79 2001-10-11 13:34:49.3346 195.199.83.253
xxx.xxx.xxx.140 TCP 3386 > ftp [SYN]
Seq=7384916 Ack=0 Win=8192 Len=0
80 2001-10-11 13:34:52.2947 195.199.83.253
xxx.xxx.xxx.140 TCP 3386 > ftp [SYN]
Seq=7384916 Ack=0 Win=8192 Len=0
81 2001-10-11 13:59:16.1081 200.195.196.98
xxx.xxx.xxx.205 TCP 61571 > ftp [SYN]
Seq=150251916 Ack=0 Win=16384 Len=0
82 2001-10-11 13:59:19.0282 200.195.196.98
xxx.xxx.xxx.205 TCP 61571 > ftp [SYN]
Seq=150251916 Ack=0 Win=16384 Len=0
83 2001-10-11 14:19:41.4008 213.255.58.240
xxx.xxx.xxx.45 TCP 2272 > ftp [SYN]
Seq=120843055 Ack=0 Win=8192 Len=0
84 2001-10-11 14:19:44.3708 213.255.58.240
xxx.xxx.xxx.45 TCP 2272 > ftp [SYN]
Seq=120843055 Ack=0 Win=8192 Len=0
85 2001-10-11 16:52:54.1585 195.170.25.4
xxx.xxx.xxx.94 TCP 3702 > ftp [SYN]
Seq=810097659 Ack=0 Win=8192 Len=0
86 2001-10-11 18:01:26.6102 200.225.172.250
xxx.xxx.xxx.139 TCP 1281 > ftp [SYN]
Seq=135468183 Ack=0 Win=8192 Len=0
87 2001-10-11 18:07:51.5579 200.196.78.98
xxx.xxx.xxx.198 TCP 3037 > ftp [SYN]
Seq=868348924 Ack=0 Win=8192 Len=0
88 2001-10-11 18:07:54.5179 200.196.78.98
xxx.xxx.xxx.198 TCP 3037 > ftp [SYN]
Seq=868348924 Ack=0 Win=8192 Len=0
89 2001-10-11 18:31:52.7795 212.161.5.10
xxx.xxx.xxx.122 TCP 3234 > ftp [SYN]
Seq=3443767514 Ack=0 Win=8192 Len=0
90 2001-10-11 18:31:55.9996 212.161.5.10
xxx.xxx.xxx.122 TCP 3234 > ftp [SYN]
Seq=3443767514 Ack=0 Win=8192 Len=0
91 2001-10-11 19:19:25.2072 200.60.123.163
xxx.xxx.xxx.116 TCP 64112 > ftp [SYN]
Seq=3742067 Ack=0 Win=8192 Len=0
92 2001-10-11 19:19:28.1973 200.60.123.163
xxx.xxx.xxx.116 TCP 64112 > ftp [SYN]
Seq=3742067 Ack=0 Win=8192 Len=0
93 2001-10-11 19:49:51.2455 64.212.166.78
xxx.xxx.xxx.3 TCP 2428 > ftp [SYN]
Seq=2025104236 Ack=0 Win=16384 Len=0
94 2001-10-11 20:11:45.9740 63.122.183.3
xxx.xxx.xxx.132 TCP 3493 > ftp [SYN]
Seq=1490324793 Ack=0 Win=8192 Len=0
95 2001-10-11 20:11:49.2340 63.122.183.3
xxx.xxx.xxx.132 TCP 3493 > ftp [SYN]
Seq=1490324793 Ack=0 Win=8192 Len=0
96 2001-10-11 20:57:28.4563 200.60.123.163
xxx.xxx.xxx.62 TCP 64324 > ftp [SYN]
Seq=4635301 Ack=0 Win=8192 Len=0
97 2001-10-11 20:57:31.4463 200.60.123.163
xxx.xxx.xxx.62 TCP 64324 > ftp [SYN]
Seq=4635301 Ack=0 Win=8192 Len=0
98 2001-10-11 21:40:30.9197 63.122.183.3
xxx.xxx.xxx.65 TCP 1951 > ftp [SYN]
Seq=1501994851 Ack=0 Win=8192 Len=0
99 2001-10-11 21:40:34.1598 63.122.183.3
xxx.xxx.xxx.65 TCP 1951 > ftp [SYN]
Seq=1501994851 Ack=0 Win=8192 Len=0
100 2001-10-11 21:58:43.6325 200.60.123.163
xxx.xxx.xxx.140 TCP 64643 > ftp [SYN]
Seq=5196801 Ack=0 Win=8192 Len=0
101 2001-10-11 21:58:46.6226 200.60.123.163
xxx.xxx.xxx.140 TCP 64643 > ftp [SYN]
Seq=5196801 Ack=0 Win=8192 Len=0
102 2001-10-11 22:34:18.6351 200.196.78.98
xxx.xxx.xxx.65 TCP 2598 > ftp [SYN]
Seq=1030987344 Ack=0 Win=8192 Len=0
103 2001-10-11 22:34:21.5452 200.196.78.98
xxx.xxx.xxx.65 TCP 2598 > ftp [SYN]
Seq=1030987344 Ack=0 Win=8192 Len=0
104 2001-10-11 22:46:30.2548 195.199.83.253
xxx.xxx.xxx.100 TCP 3531 > ftp [SYN]
Seq=74655670 Ack=0 Win=8192 Len=0
105 2001-10-11 22:54:05.8869 63.122.183.3
xxx.xxx.xxx.170 TCP 2500 > ftp [SYN]
Seq=1511387106 Ack=0 Win=8192 Len=0
106 2001-10-11 22:54:09.1170 63.122.183.3
xxx.xxx.xxx.170 TCP 2500 > ftp [SYN]
Seq=1511387106 Ack=0 Win=8192 Len=0
107 2001-10-12 00:13:29.3474 195.65.149.116
xxx.xxx.xxx.132 TCP 2761 > ftp [SYN]
Seq=2433513360 Ack=0 Win=16384 Len=0
108 2001-10-12 00:37:40.7338 63.122.183.3
xxx.xxx.xxx.132 TCP 2253 > ftp [SYN]
Seq=1525427211 Ack=0 Win=8192 Len=0
109 2001-10-12 00:37:44.0239 63.122.183.3
xxx.xxx.xxx.132 TCP 2253 > ftp [SYN]
Seq=1525427211 Ack=0 Win=8192 Len=0
110 2001-10-12 00:56:33.7823 200.177.124.18
xxx.xxx.xxx.4 TCP 2644 > ftp [SYN]
Seq=1684778595 Ack=0 Win=16384 Len=0
111 2001-10-12 01:42:15.8412 63.122.183.3
xxx.xxx.xxx.185 TCP 4542 > ftp [SYN]
Seq=1533800761 Ack=0 Win=8192 Len=0
112 2001-10-12 01:42:19.1012 63.122.183.3
xxx.xxx.xxx.185 TCP 4542 > ftp [SYN]
Seq=1533800761 Ack=0 Win=8192 Len=0
113 2001-10-12 01:52:54.4872 200.196.78.98
xxx.xxx.xxx.224 TCP 1485 > ftp [SYN]
Seq=1202690588 Ack=0 Win=8192 Len=0
114 2001-10-12 01:52:57.4073 200.196.78.98
xxx.xxx.xxx.224 TCP 1485 > ftp [SYN]
Seq=1202690588 Ack=0 Win=8192 Len=0
115 2001-10-12 03:20:24.1689 195.243.114.250
xxx.xxx.xxx.227 TCP 2445 > ftp [SYN]
Seq=3376446998 Ack=0 Win=8192 Len=0
116 2001-10-12 04:23:49.9444 63.203.152.242
xxx.xxx.xxx.215 TCP 4270 > ftp [SYN]
Seq=4037707153 Ack=0 Win=16384 Len=0
117 2001-10-12 04:23:52.9345 63.203.152.242
xxx.xxx.xxx.215 TCP 4270 > ftp [SYN]
Seq=4037707153 Ack=0 Win=16384 Len=0
118 2001-10-12 06:01:28.0014 200.177.124.18
xxx.xxx.xxx.51 TCP 3515 > ftp [SYN]
Seq=938357355 Ack=0 Win=16384 Len=0
119 2001-10-12 06:07:10.4100 63.122.183.3
xxx.xxx.xxx.115 TCP 3268 > ftp [SYN]
Seq=1565183503 Ack=0 Win=8192 Len=0
120 2001-10-12 06:07:13.6301 63.122.183.3
xxx.xxx.xxx.115 TCP 3268 > ftp [SYN]
Seq=1565183503 Ack=0 Win=8192 Len=0
121 2001-10-12 07:54:55.1922 63.162.34.112
xxx.xxx.xxx.38 TCP 3412 > ftp [SYN]
Seq=428920121 Ack=0 Win=8192 Len=0
122 2001-10-12 07:54:58.4523 63.162.34.112
xxx.xxx.xxx.38 TCP 3412 > ftp [SYN]
Seq=428920121 Ack=0 Win=8192 Len=0
123 2001-10-12 08:14:05.4211 63.122.183.3
xxx.xxx.xxx.86 TCP 3812 > ftp [SYN]
Seq=1573166649 Ack=0 Win=8192 Len=0
124 2001-10-12 08:14:08.6112 63.122.183.3
xxx.xxx.xxx.86 TCP 3812 > ftp [SYN]
Seq=1573166649 Ack=0 Win=8192 Len=0
125 2001-10-12 08:20:26.1606 64.66.223.131
xxx.xxx.xxx.108 TCP 4659 > ftp [SYN]
Seq=964590055 Ack=0 Win=8192 Len=0
126 2001-10-12 08:20:29.3607 64.66.223.131
xxx.xxx.xxx.108 TCP 4659 > ftp [SYN]
Seq=964590055 Ack=0 Win=8192 Len=0
127 2001-10-12 08:21:26.5521 63.231.34.210
xxx.xxx.xxx.86 TCP 3787 > ftp [SYN]
Seq=906508387 Ack=0 Win=16384 Len=0
128 2001-10-12 08:21:29.5522 63.231.34.210
xxx.xxx.xxx.86 TCP 3787 > ftp [SYN]
Seq=906508387 Ack=0 Win=16384 Len=0
129 2001-10-12 08:27:59.5520 64.66.223.131
xxx.xxx.xxx.108 TCP 4659 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
130 2001-10-12 08:28:06.7822 200.225.172.250
xxx.xxx.xxx.70 TCP 3340 > ftp [SYN]
Seq=564153251 Ack=0 Win=8192 Len=0
131 2001-10-12 08:50:47.9268 195.243.114.250
xxx.xxx.xxx.36 TCP 3209 > ftp [SYN]
Seq=3499536296 Ack=0 Win=8192 Len=0
132 2001-10-12 13:12:25.7075 195.223.61.3
xxx.xxx.xxx.64 TCP 2677 > ftp [SYN]
Seq=37184944 Ack=0 Win=8192 Len=0
133 2001-10-12 13:12:34.8577 63.122.183.3
xxx.xxx.xxx.64 TCP 2577 > ftp [SYN]
Seq=1610620804 Ack=0 Win=8192 Len=0
134 2001-10-12 13:12:38.1177 63.122.183.3
xxx.xxx.xxx.64 TCP 2577 > ftp [SYN]
Seq=1610620804 Ack=0 Win=8192 Len=0
135 2001-10-12 15:45:48.2660 195.5.220.18
xxx.xxx.xxx.214 TCP 4589 > ftp [SYN]
Seq=1859250038 Ack=0 Win=16384 Len=0
136 2001-10-12 15:46:48.4678 195.5.220.18
xxx.xxx.xxx.214 TCP 4589 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=0
137 2001-10-12 16:42:25.9232 64.2.43.125
xxx.xxx.xxx.40 TCP 2407 > ftp [SYN]
Seq=3956599438 Ack=0 Win=16384 Len=0
138 2001-10-12 16:42:48.3238 63.127.40.76
xxx.xxx.xxx.120 TCP 4364 > ftp [SYN]
Seq=179268 Ack=0 Win=8192 Len=0
139 2001-10-12 16:42:51.5839 63.127.40.76
xxx.xxx.xxx.120 TCP 4364 > ftp [SYN]
Seq=179268 Ack=0 Win=8192 Len=0
140 2001-10-12 17:13:01.2933 199.190.129.3
xxx.xxx.xxx.139 TCP 1121 > ftp [SYN]
Seq=1183765 Ack=0 Win=8192 Len=0
141 2001-10-12 17:13:04.1934 199.190.129.3
xxx.xxx.xxx.139 TCP 1121 > ftp [SYN]
Seq=1183765 Ack=0 Win=8192 Len=0
142 2001-10-12 17:21:43.4494 63.231.156.16
xxx.xxx.xxx.38 TCP 28078 > ftp [SYN]
Seq=1785864510 Ack=0 Win=16384 Len=0
143 2001-10-12 17:21:46.4095 63.231.156.16
xxx.xxx.xxx.38 TCP 28078 > ftp [SYN]
Seq=1785864510 Ack=0 Win=16384 Len=0
144 2001-10-12 18:55:37.9981 200.28.31.248
xxx.xxx.xxx.22 TCP 24958 > ftp [SYN]
Seq=1053283 Ack=0 Win=8192 Len=0
145 2001-10-12 18:55:40.9582 200.28.31.248
xxx.xxx.xxx.22 TCP 24958 > ftp [SYN]
Seq=1053283 Ack=0 Win=8192 Len=0
146 2001-10-12 19:53:08.9650 193.170.245.58
xxx.xxx.xxx.191 TCP 4516 > ftp [SYN]
Seq=4230667272 Ack=0 Win=16384 Len=0
147 2001-10-12 19:53:11.9251 193.170.245.58
xxx.xxx.xxx.191 TCP 4516 > ftp [SYN]
Seq=4230667272 Ack=0 Win=16384 Len=0
148 2001-10-12 20:32:00.4505 195.141.175.2
xxx.xxx.xxx.29 TCP 20550 > ftp [SYN]
Seq=442484052 Ack=0 Win=512 Len=0
149 2001-10-12 21:08:06.7226 195.5.220.18
xxx.xxx.xxx.178 TCP 3181 > ftp [SYN]
Seq=2888344674 Ack=0 Win=16384 Len=0
150 2001-10-12 21:09:07.6640 195.5.220.18
xxx.xxx.xxx.178 TCP 3181 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=0
151 2001-10-12 21:23:51.4249 195.5.220.18
xxx.xxx.xxx.110 TCP 4608 > ftp [SYN]
Seq=2583932853 Ack=0 Win=16384 Len=0
152 2001-10-12 21:23:54.3950 195.5.220.18
xxx.xxx.xxx.110 TCP 4608 > ftp [SYN]
Seq=2583932853 Ack=0 Win=16384 Len=0
153 2001-10-12 21:24:51.6764 195.5.220.18
xxx.xxx.xxx.110 TCP 4608 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=0
154 2001-10-12 21:39:34.8190 193.170.245.58
xxx.xxx.xxx.219 TCP 4965 > ftp [SYN]
Seq=1907524685 Ack=0 Win=16384 Len=0
155 2001-10-12 21:50:28.1264 199.190.129.3
xxx.xxx.xxx.192 TCP 1497 > ftp [SYN]
Seq=2508184 Ack=0 Win=8192 Len=0
156 2001-10-12 22:13:50.0426 193.252.254.26
xxx.xxx.xxx.118 TCP radius > ftp [SYN]
Seq=337656689 Ack=0 Win=8192 Len=0
157 2001-10-12 23:10:00.2189 195.13.94.130
xxx.xxx.xxx.148 TCP 39488 > ftp [SYN]
Seq=1454849383 Ack=0 Win=16384 Len=0
158 2001-10-12 23:11:11.7908 200.60.123.163
xxx.xxx.xxx.49 TCP 64570 > ftp [SYN]
Seq=18248425 Ack=0 Win=8192 Len=0
159 2001-10-12 23:11:14.7409 200.60.123.163
xxx.xxx.xxx.49 TCP 64570 > ftp [SYN]
Seq=18248425 Ack=0 Win=8192 Len=0
160 2001-10-12 23:19:20.4345 63.231.156.16
xxx.xxx.xxx.197 TCP 30981 > ftp [SYN]
Seq=2483605930 Ack=0 Win=16384 Len=0
161 2001-10-12 23:57:46.5973 200.60.123.163
xxx.xxx.xxx.50 TCP 63894 > ftp [SYN]
Seq=18671667 Ack=0 Win=8192 Len=0
162 2001-10-12 23:57:49.5674 200.60.123.163
xxx.xxx.xxx.50 TCP 63894 > ftp [SYN]
Seq=18671667 Ack=0 Win=8192 Len=0
163 2001-10-13 02:03:19.8111 63.231.156.16
xxx.xxx.xxx.95 TCP 27669 > ftp [SYN]
Seq=1735744137 Ack=0 Win=16384 Len=0
164 2001-10-13 02:53:41.3253 200.60.123.163
xxx.xxx.xxx.174 TCP 63672 > ftp [SYN]
Seq=20258237 Ack=0 Win=8192 Len=0
165 2001-10-13 02:53:44.2354 200.60.123.163
xxx.xxx.xxx.174 TCP 63672 > ftp [SYN]
Seq=20258237 Ack=0 Win=8192 Len=0
166 2001-10-13 02:55:09.9674 160.129.23.58
xxx.xxx.xxx.162 TCP 2603 > ftp [SYN]
Seq=329394907 Ack=0 Win=8192 Len=0
167 2001-10-13 02:55:12.8474 160.129.23.58
xxx.xxx.xxx.162 TCP 2603 > ftp [SYN]
Seq=329394907 Ack=0 Win=8192 Len=0
168 2001-10-13 03:15:22.6557 213.255.47.82
xxx.xxx.xxx.55 TCP 2358 > ftp [SYN]
Seq=771948560 Ack=0 Win=8192 Len=0
169 2001-10-13 03:15:25.3258 213.255.47.82
xxx.xxx.xxx.55 TCP 2358 > ftp [SYN]
Seq=771948560 Ack=0 Win=8192 Len=0
170 2001-10-13 04:42:45.3678 200.60.123.163
xxx.xxx.xxx.228 TCP 64540 > ftp [SYN]
Seq=21251706 Ack=0 Win=8192 Len=0
171 2001-10-13 04:42:48.3479 200.60.123.163
xxx.xxx.xxx.228 TCP 64540 > ftp [SYN]
Seq=21251706 Ack=0 Win=8192 Len=0
172 2001-10-13 05:03:18.9689 213.255.50.110
xxx.xxx.xxx.186 TCP 3335 > ftp [SYN]
Seq=264409517 Ack=0 Win=8192 Len=0
173 2001-10-13 05:44:23.2624 195.141.175.2
xxx.xxx.xxx.98 TCP 30251 > ftp [SYN]
Seq=1333134167 Ack=0 Win=512 Len=0
174 2001-10-13 05:44:26.2625 195.141.175.2
xxx.xxx.xxx.98 TCP 30251 > ftp [SYN]
Seq=1333134167 Ack=0 Win=7300 Len=0
175 2001-10-13 06:01:41.8657 64.220.145.162
xxx.xxx.xxx.71 TCP 4150 > ftp [SYN]
Seq=168582316 Ack=0 Win=16384 Len=0
176 2001-10-13 06:07:04.9834 213.255.50.110
xxx.xxx.xxx.247 TCP 1683 > ftp [SYN]
Seq=281729906 Ack=0 Win=8192 Len=0
177 2001-10-13 06:07:07.9935 213.255.50.110
xxx.xxx.xxx.247 TCP 1683 > ftp [SYN]
Seq=281729906 Ack=0 Win=8192 Len=0
178 2001-10-13 07:01:27.8705 193.170.245.58
xxx.xxx.xxx.34 TCP 3489 > ftp [SYN]
Seq=3430934268 Ack=0 Win=16384 Len=0
179 2001-10-13 07:05:18.9154 63.122.183.3
xxx.xxx.xxx.183 TCP 3226 > ftp [SYN]
Seq=2416897573 Ack=0 Win=8192 Len=0
180 2001-10-13 07:05:22.1655 63.122.183.3
xxx.xxx.xxx.183 TCP 3226 > ftp [SYN]
Seq=2416897573 Ack=0 Win=8192 Len=0
181 2001-10-13 07:08:36.2697 64.212.166.78
xxx.xxx.xxx.62 TCP 2917 > ftp [SYN]
Seq=1244676639 Ack=0 Win=16384 Len=0
182 2001-10-13 07:08:39.2697 64.212.166.78
xxx.xxx.xxx.62 TCP 2917 > ftp [SYN]
Seq=1244676639 Ack=0 Win=16384 Len=0
183 2001-10-13 07:12:33.2048 200.60.123.163
xxx.xxx.xxx.91 TCP 61427 > ftp [SYN]
Seq=22609743 Ack=0 Win=8192 Len=0
184 2001-10-13 07:12:36.2049 200.60.123.163
xxx.xxx.xxx.91 TCP 61427 > ftp [SYN]
Seq=22609743 Ack=0 Win=8192 Len=0
185 2001-10-13 08:05:18.8400 63.122.183.3
xxx.xxx.xxx.38 TCP 4823 > ftp [SYN]
Seq=2500412980 Ack=0 Win=8192 Len=0
186 2001-10-13 08:05:22.0601 63.122.183.3
xxx.xxx.xxx.38 TCP 4823 > ftp [SYN]
Seq=2500412980 Ack=0 Win=8192 Len=0
187 2001-10-13 08:05:38.0305 199.190.129.3
xxx.xxx.xxx.63 TCP 1605 > ftp [SYN]
Seq=5808488 Ack=0 Win=8192 Len=0
188 2001-10-13 08:20:27.3624 64.66.223.131
xxx.xxx.xxx.108 TCP 1739 > ftp [SYN]
Seq=2031623291 Ack=0 Win=8192 Len=0
189 2001-10-13 08:20:30.6025 64.66.223.131
xxx.xxx.xxx.108 TCP 1739 > ftp [SYN]
Seq=2031623291 Ack=0 Win=8192 Len=0
190 2001-10-13 08:28:01.7036 64.66.223.131
xxx.xxx.xxx.108 TCP 1739 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
191 2001-10-13 09:47:15.2916 193.199.48.20
xxx.xxx.xxx.7 TCP 1334 > ftp [SYN]
Seq=842419936 Ack=0 Win=8192 Len=0
192 2001-10-13 09:51:23.3578 63.200.73.60
xxx.xxx.xxx.168 TCP 3267 > ftp [SYN]
Seq=1106720104 Ack=0 Win=8192 Len=0
193 2001-10-13 10:44:39.0074 63.122.183.3
xxx.xxx.xxx.238 TCP 2902 > ftp [SYN]
Seq=2688301553 Ack=0 Win=8192 Len=0
194 2001-10-13 10:44:42.1375 63.122.183.3
xxx.xxx.xxx.238 TCP 2902 > ftp [SYN]
Seq=2688301553 Ack=0 Win=8192 Len=0
195 2001-10-13 11:21:19.6923 63.231.156.16
xxx.xxx.xxx.75 TCP 21163 > ftp [SYN]
Seq=77870291 Ack=0 Win=16384 Len=0
196 2001-10-13 11:21:22.6523 63.231.156.16
xxx.xxx.xxx.75 TCP 21163 > ftp [SYN]
Seq=77870291 Ack=0 Win=16384 Len=0
197 2001-10-13 11:45:15.2781 200.60.123.163
xxx.xxx.xxx.178 TCP 61898 > ftp [SYN]
Seq=25105374 Ack=0 Win=8192 Len=0
198 2001-10-13 11:45:18.1381 200.60.123.163
xxx.xxx.xxx.178 TCP 61898 > ftp [SYN]
Seq=25105374 Ack=0 Win=8192 Len=0
199 2001-10-13 12:24:35.3869 64.212.166.78
xxx.xxx.xxx.252 TCP 4146 > ftp [SYN]
Seq=952166998 Ack=0 Win=16384 Len=0
200 2001-10-13 12:32:33.8989 193.95.161.209
xxx.xxx.xxx.84 TCP 7022 > ftp [SYN]
Seq=398492389 Ack=0 Win=8192 Len=0
201 2001-10-13 12:39:52.7998 64.212.166.78
xxx.xxx.xxx.89 TCP 3526 > ftp [SYN]
Seq=1746701041 Ack=0 Win=16384 Len=0
202 2001-10-13 12:40:04.9001 193.95.161.209
xxx.xxx.xxx.84 TCP 7022 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
203 2001-10-13 13:12:22.5885 195.223.61.3
xxx.xxx.xxx.64 TCP 2354 > ftp [SYN]
Seq=606148749 Ack=0 Win=8192 Len=0
204 2001-10-13 13:12:25.7685 195.223.61.3
xxx.xxx.xxx.64 TCP 2354 > ftp [SYN]
Seq=606148749 Ack=0 Win=8192 Len=0
205 2001-10-13 13:18:13.5072 63.122.183.3
xxx.xxx.xxx.185 TCP 2818 > ftp [SYN]
Seq=2870480172 Ack=0 Win=8192 Len=0
206 2001-10-13 13:18:16.6973 63.122.183.3
xxx.xxx.xxx.185 TCP 2818 > ftp [SYN]
Seq=2870480172 Ack=0 Win=8192 Len=0
207 2001-10-13 14:06:13.8191 200.185.37.76
xxx.xxx.xxx.203 TCP 2224 > ftp [SYN]
Seq=3950817949 Ack=0 Win=16384 Len=0
208 2001-10-13 14:06:16.7891 200.185.37.76
xxx.xxx.xxx.203 TCP 2224 > ftp [SYN]
Seq=3950817949 Ack=0 Win=16384 Len=0
209 2001-10-13 17:24:52.8765 63.231.156.16
xxx.xxx.xxx.20 TCP 10024 > ftp [SYN]
Seq=1208149621 Ack=0 Win=16384 Len=0
210 2001-10-13 20:01:13.9405 200.28.31.248
xxx.xxx.xxx.61 TCP 17273 > ftp [SYN]
Seq=4440264 Ack=0 Win=8192 Len=0
211 2001-10-13 20:01:16.8706 200.28.31.248
xxx.xxx.xxx.61 TCP 17273 > ftp [SYN]
Seq=4440264 Ack=0 Win=8192 Len=0
212 2001-10-13 20:34:05.6197 160.129.23.58
xxx.xxx.xxx.32 TCP 4696 > ftp [SYN]
Seq=851008155 Ack=0 Win=8192 Len=0
213 2001-10-13 22:12:56.9177 195.139.26.195
xxx.xxx.xxx.68 TCP 55580 > ftp [SYN]
Seq=123853281 Ack=0 Win=8192 Len=0
214 2001-10-13 22:12:59.9178 195.139.26.195
xxx.xxx.xxx.68 TCP 55580 > ftp [SYN]
Seq=123853281 Ack=0 Win=8192 Len=0
215 2001-10-13 22:51:01.1647 213.255.50.110
xxx.xxx.xxx.50 TCP 4442 > ftp [SYN]
Seq=575031839 Ack=0 Win=8192 Len=0
216 2001-10-14 01:39:05.2763 63.231.156.16
xxx.xxx.xxx.24 TCP 24905 > ftp [SYN]
Seq=3426352428 Ack=0 Win=16384 Len=0
217 2001-10-14 02:24:46.4847 200.185.37.76
xxx.xxx.xxx.222 TCP 2316 > ftp [SYN]
Seq=3368609382 Ack=0 Win=16384 Len=0
218 2001-10-14 02:24:49.4248 200.185.37.76
xxx.xxx.xxx.222 TCP 2316 > ftp [SYN]
Seq=3368609382 Ack=0 Win=16384 Len=0
219 2001-10-14 02:41:14.8094 63.231.156.16
xxx.xxx.xxx.117 TCP 24305 > ftp [SYN]
Seq=3737378144 Ack=0 Win=16384 Len=0
220 2001-10-14 02:41:17.5294 63.231.156.16
xxx.xxx.xxx.117 TCP 24305 > ftp [SYN]
Seq=3737378144 Ack=0 Win=16384 Len=0
221 2001-10-14 02:56:51.1527 63.231.156.16
xxx.xxx.xxx.134 TCP 18795 > ftp [SYN]
Seq=595888258 Ack=0 Win=16384 Len=0
222 2001-10-14 02:56:54.1128 63.231.156.16
xxx.xxx.xxx.134 TCP 18795 > ftp [SYN]
Seq=595888258 Ack=0 Win=16384 Len=0
223 2001-10-14 03:20:25.5180 195.243.114.250
xxx.xxx.xxx.227 TCP 3566 > ftp [SYN]
Seq=153572570 Ack=0 Win=8192 Len=0
224 2001-10-14 04:50:12.6924 64.70.17.133
xxx.xxx.xxx.35 TCP 1725 > http [SYN]
Seq=1582689742 Ack=0 Win=16384 Len=0
225 2001-10-14 04:50:15.6425 64.70.17.133
xxx.xxx.xxx.35 TCP 1725 > http [SYN]
Seq=1582689742 Ack=0 Win=16384 Len=0
226 2001-10-14 05:44:23.3236 195.141.175.2
xxx.xxx.xxx.98 TCP 27061 > ftp [SYN]
Seq=1322885138 Ack=0 Win=512 Len=0
227 2001-10-14 05:44:26.3136 195.141.175.2
xxx.xxx.xxx.98 TCP 27061 > ftp [SYN]
Seq=1322885138 Ack=0 Win=7300 Len=0
228 2001-10-14 07:05:17.3447 63.122.183.3
xxx.xxx.xxx.183 TCP 1384 > ftp [SYN]
Seq=7172553 Ack=0 Win=8192 Len=0
229 2001-10-14 07:05:20.6147 63.122.183.3
xxx.xxx.xxx.183 TCP 1384 > ftp [SYN]
Seq=7172553 Ack=0 Win=8192 Len=0
230 2001-10-14 07:23:36.4421 200.223.26.170
xxx.xxx.xxx.48 TCP 2844 > ftp [SYN]
Seq=642453787 Ack=0 Win=8192 Len=0
231 2001-10-14 07:35:35.5000 63.231.156.16
xxx.xxx.xxx.89 TCP 25587 > ftp [SYN]
Seq=4036473842 Ack=0 Win=16384 Len=0
232 2001-10-14 07:35:38.4001 63.231.156.16
xxx.xxx.xxx.89 TCP 25587 > ftp [SYN]
Seq=4036473842 Ack=0 Win=16384 Len=0
233 2001-10-14 08:05:17.2745 63.122.183.3
xxx.xxx.xxx.38 TCP 1956 > ftp [SYN]
Seq=73521471 Ack=0 Win=8192 Len=0
234 2001-10-14 08:05:20.5146 63.122.183.3
xxx.xxx.xxx.38 TCP 1956 > ftp [SYN]
Seq=73521471 Ack=0 Win=8192 Len=0
235 2001-10-14 08:20:28.5072 64.66.223.131
xxx.xxx.xxx.108 TCP 2637 > ftp [SYN]
Seq=2791152778 Ack=0 Win=8192 Len=0
236 2001-10-14 08:20:31.7673 64.66.223.131
xxx.xxx.xxx.108 TCP 2637 > ftp [SYN]
Seq=2791152778 Ack=0 Win=8192 Len=0
237 2001-10-14 08:28:03.7786 64.66.223.131
xxx.xxx.xxx.108 TCP 2637 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
238 2001-10-14 10:44:37.3130 63.122.183.3
xxx.xxx.xxx.238 TCP 3485 > ftp [SYN]
Seq=317973361 Ack=0 Win=8192 Len=0
239 2001-10-14 10:44:40.5831 63.122.183.3
xxx.xxx.xxx.238 TCP 3485 > ftp [SYN]
Seq=317973361 Ack=0 Win=8192 Len=0
240 2001-10-14 11:23:00.5405 199.190.129.3
xxx.xxx.xxx.117 TCP 2740 > ftp [SYN]
Seq=7778975 Ack=0 Win=8192 Len=0
241 2001-10-14 11:23:03.5006 199.190.129.3
xxx.xxx.xxx.117 TCP 2740 > ftp [SYN]
Seq=7778975 Ack=0 Win=8192 Len=0
242 2001-10-14 12:32:32.6746 193.95.161.209
xxx.xxx.xxx.84 TCP 6594 > ftp [SYN]
Seq=321048591 Ack=0 Win=8192 Len=0
243 2001-10-14 12:40:04.6059 193.95.161.209
xxx.xxx.xxx.84 TCP 6594 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
244 2001-10-14 12:46:18.9052 200.223.26.170
xxx.xxx.xxx.213 TCP 3425 > ftp [SYN]
Seq=742006996 Ack=0 Win=8192 Len=0
245 2001-10-14 12:46:18.9152 200.223.26.170
xxx.xxx.xxx.213 TCP 3427 > ftp [SYN]
Seq=742007003 Ack=0 Win=8192 Len=0
246 2001-10-14 13:18:11.9229 63.122.183.3
xxx.xxx.xxx.185 TCP 2361 > ftp [SYN]
Seq=473778558 Ack=0 Win=8192 Len=0
247 2001-10-14 13:18:15.1530 63.122.183.3
xxx.xxx.xxx.185 TCP 2361 > ftp [SYN]
Seq=473778558 Ack=0 Win=8192 Len=0
248 2001-10-14 13:30:56.4420 63.200.73.60
xxx.xxx.xxx.81 TCP 1769 > ftp [SYN]
Seq=2367159159 Ack=0 Win=8192 Len=0
249 2001-10-14 13:30:59.4121 63.200.73.60
xxx.xxx.xxx.81 TCP 1769 > ftp [SYN]
Seq=2367159159 Ack=0 Win=8192 Len=0
250 2001-10-14 20:11:31.6217 195.223.61.3
xxx.xxx.xxx.132 TCP 4812 > ftp [SYN]
Seq=1179916726 Ack=0 Win=8192 Len=0
251 2001-10-14 20:11:34.8918 195.223.61.3
xxx.xxx.xxx.132 TCP 4812 > ftp [SYN]
Seq=1179916726 Ack=0 Win=8192 Len=0
252 2001-10-14 20:12:24.4230 200.185.37.76
xxx.xxx.xxx.104 TCP 4350 > ftp [SYN]
Seq=487351257 Ack=0 Win=16384 Len=0
253 2001-10-14 20:12:27.4031 200.185.37.76
xxx.xxx.xxx.104 TCP 4350 > ftp [SYN]
Seq=487351257 Ack=0 Win=16384 Len=0
254 2001-10-14 21:40:16.7746 195.223.61.3
xxx.xxx.xxx.65 TCP 3946 > ftp [SYN]
Seq=1206957168 Ack=0 Win=8192 Len=0
255 2001-10-14 21:40:20.0247 195.223.61.3
xxx.xxx.xxx.65 TCP 3946 > ftp [SYN]
Seq=1206957168 Ack=0 Win=8192 Len=0
256 2001-10-15 00:45:46.7923 200.185.37.76
xxx.xxx.xxx.226 TCP 4708 > ftp [SYN]
Seq=67449638 Ack=0 Win=16384 Len=0
257 2001-10-15 00:45:49.7724 200.185.37.76
xxx.xxx.xxx.226 TCP 4708 > ftp [SYN]
Seq=67449638 Ack=0 Win=16384 Len=0
258 2001-10-15 02:10:27.4591 200.207.162.34
xxx.xxx.xxx.230 TCP 3813 > ftp [SYN]
Seq=3839966265 Ack=0 Win=16384 Len=0
259 2001-10-15 02:10:30.3991 200.207.162.34
xxx.xxx.xxx.230 TCP 3813 > ftp [SYN]
Seq=3839966265 Ack=0 Win=16384 Len=0
260 2001-10-15 02:52:36.7422 199.190.129.3
xxx.xxx.xxx.207 TCP 4553 > ftp [SYN]
Seq=12356942 Ack=0 Win=8192 Len=0
261 2001-10-15 03:20:24.6338 195.243.114.250
xxx.xxx.xxx.227 TCP 2329 > ftp [SYN]
Seq=597863124 Ack=0 Win=8192 Len=0
262 2001-10-15 06:00:17.2131 64.212.166.78
xxx.xxx.xxx.179 TCP 2229 > ftp [SYN]
Seq=3440495736 Ack=0 Win=16384 Len=0
263 2001-10-15 06:00:20.1432 64.212.166.78
xxx.xxx.xxx.179 TCP 2229 > ftp [SYN]
Seq=3440495736 Ack=0 Win=16384 Len=0
264 2001-10-15 07:05:15.7804 63.122.183.3
xxx.xxx.xxx.183 TCP 1840 > ftp [SYN]
Seq=1756829133 Ack=0 Win=8192 Len=0
265 2001-10-15 07:05:19.0505 63.122.183.3
xxx.xxx.xxx.183 TCP 1840 > ftp [SYN]
Seq=1756829133 Ack=0 Win=8192 Len=0
266 2001-10-15 08:05:15.7202 63.122.183.3
xxx.xxx.xxx.38 TCP 1062 > ftp [SYN]
Seq=1836741413 Ack=0 Win=8192 Len=0
267 2001-10-15 08:05:18.9603 63.122.183.3
xxx.xxx.xxx.38 TCP 1062 > ftp [SYN]
Seq=1836741413 Ack=0 Win=8192 Len=0
268 2001-10-15 08:20:30.0130 64.66.223.131
xxx.xxx.xxx.108 TCP 4195 > ftp [SYN]
Seq=3662882687 Ack=0 Win=8192 Len=0
269 2001-10-15 08:20:33.2631 64.66.223.131
xxx.xxx.xxx.108 TCP 4195 > ftp [SYN]
Seq=3662882687 Ack=0 Win=8192 Len=0
270 2001-10-15 08:28:05.2244 64.66.223.131
xxx.xxx.xxx.108 TCP 4195 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
271 2001-10-15 08:50:49.9085 195.243.114.250
xxx.xxx.xxx.36 TCP 3211 > ftp [SYN]
Seq=730219409 Ack=0 Win=8192 Len=0
272 2001-10-15 12:32:34.1441 193.95.161.209
xxx.xxx.xxx.84 TCP 4866 > ftp [SYN]
Seq=1906205400 Ack=0 Win=8192 Len=0
273 2001-10-15 12:32:55.9847 195.223.61.3
xxx.xxx.xxx.84 TCP 4852 > ftp [SYN]
Seq=33616166 Ack=0 Win=8192 Len=0
274 2001-10-15 12:40:06.7975 193.95.161.209
xxx.xxx.xxx.84 TCP 4866 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
275 2001-10-15 13:47:06.9956 200.60.123.163
xxx.xxx.xxx.188 TCP 63299 > ftp [SYN]
Seq=1256224 Ack=0 Win=8192 Len=0
276 2001-10-15 14:32:41.7851 213.255.47.82
xxx.xxx.xxx.106 TCP 1570 > ftp [SYN]
Seq=1063936274 Ack=0 Win=8192 Len=0
277 2001-10-15 14:58:49.6393 193.196.137.56
xxx.xxx.xxx.243 TCP 2186 > ftp [SYN]
Seq=26438565 Ack=0 Win=8192 Len=0
278 2001-10-15 14:58:52.6093 193.196.137.56
xxx.xxx.xxx.243 TCP 2186 > ftp [SYN]
Seq=26438565 Ack=0 Win=8192 Len=0
279 2001-10-15 15:16:14.4195 195.226.40.243
xxx.xxx.xxx.74 TCP 1351 > ftp [SYN]
Seq=1025935 Ack=0 Win=8192 Len=0
280 2001-10-15 15:26:09.1417 200.60.123.163
xxx.xxx.xxx.175 TCP 64568 > ftp [SYN]
Seq=2157808 Ack=0 Win=8192 Len=0
281 2001-10-15 15:26:12.1317 200.60.123.163
xxx.xxx.xxx.175 TCP 64568 > ftp [SYN]
Seq=2157808 Ack=0 Win=8192 Len=0
282 2001-10-15 16:16:54.1421 199.203.120.75
xxx.xxx.xxx.84 TCP 3411 > ftp [SYN]
Seq=7466243 Ack=0 Win=8192 Len=0
283 2001-10-15 17:21:16.1169 64.70.17.133
xxx.xxx.xxx.172 TCP 2812 > ftp [SYN]
Seq=1554672108 Ack=0 Win=16384 Len=0
284 2001-10-15 17:38:26.9430 200.28.31.248
xxx.xxx.xxx.239 TCP 12490 > ftp [SYN]
Seq=12560430 Ack=0 Win=8192 Len=0
285 2001-10-15 17:38:29.8630 200.28.31.248
xxx.xxx.xxx.239 TCP 12490 > ftp [SYN]
Seq=12560430 Ack=0 Win=8192 Len=0
286 2001-10-15 18:00:53.7161 63.237.140.215
xxx.xxx.xxx.220 TCP 4326 > ftp [SYN]
Seq=395813368 Ack=0 Win=8192 Len=0
287 2001-10-15 18:21:33.3167 213.255.47.82
xxx.xxx.xxx.219 TCP 1463 > ftp [SYN]
Seq=1195158518 Ack=0 Win=8192 Len=0
288 2001-10-15 18:21:36.1168 213.255.47.82
xxx.xxx.xxx.219 TCP 1463 > ftp [SYN]
Seq=1195158518 Ack=0 Win=8192 Len=0
289 2001-10-15 18:43:46.6996 199.203.188.5
xxx.xxx.xxx.64 TCP 3938 > ftp [SYN]
Seq=598230857 Ack=0 Win=16384 Len=0
290 2001-10-15 19:35:31.8062 63.237.140.215
xxx.xxx.xxx.40 TCP 4374 > ftp [SYN]
Seq=423816679 Ack=0 Win=8192 Len=0
291 2001-10-15 19:35:35.0663 63.237.140.215
xxx.xxx.xxx.40 TCP 4374 > ftp [SYN]
Seq=423816679 Ack=0 Win=8192 Len=0
292 2001-10-15 19:39:35.0222 200.60.123.163
xxx.xxx.xxx.36 TCP 61429 > ftp [SYN]
Seq=4458756 Ack=0 Win=8192 Len=0
293 2001-10-15 19:39:37.9423 200.60.123.163
xxx.xxx.xxx.36 TCP 61429 > ftp [SYN]
Seq=4458756 Ack=0 Win=8192 Len=0
294 2001-10-15 20:06:51.9027 63.218.57.242
xxx.xxx.xxx.9 TCP 4277 > ftp [SYN]
Seq=395738164 Ack=0 Win=16384 Len=0
295 2001-10-15 20:06:55.1127 63.218.57.242
xxx.xxx.xxx.9 TCP 4277 > ftp [SYN]
Seq=395738164 Ack=0 Win=16384 Len=0
296 2001-10-15 20:35:05.2645 200.184.27.226
xxx.xxx.xxx.158 TCP 3392 > ftp [SYN]
Seq=3851991527 Ack=0 Win=16384 Len=0
297 2001-10-15 20:35:08.1746 200.184.27.226
xxx.xxx.xxx.158 TCP 3392 > ftp [SYN]
Seq=3851991527 Ack=0 Win=16384 Len=0
298 2001-10-15 21:48:52.7039 195.13.94.130
xxx.xxx.xxx.104 TCP 45320 > ftp [SYN]
Seq=2444084441 Ack=0 Win=16384 Len=0
299 2001-10-15 22:29:22.4239 63.218.57.242
xxx.xxx.xxx.2 TCP 3195 > ftp [SYN]
Seq=556296320 Ack=0 Win=16384 Len=0
300 2001-10-15 22:29:25.6940 63.218.57.242
xxx.xxx.xxx.2 TCP 3195 > ftp [SYN]
Seq=556296320 Ack=0 Win=16384 Len=0
301 2001-10-15 23:52:21.1978 193.252.194.141
xxx.xxx.xxx.124 TCP 64667 > ftp [SYN]
Seq=2721115566 Ack=0 Win=8192 Len=0
302 2001-10-15 23:57:29.8853 195.188.250.3
xxx.xxx.xxx.180 TCP 1323 > ftp [SYN]
Seq=2320737794 Ack=0 Win=16384 Len=0
303 2001-10-15 23:57:32.8254 195.188.250.3
xxx.xxx.xxx.180 TCP 1323 > ftp [SYN]
Seq=2320737794 Ack=0 Win=16384 Len=0
304 2001-10-16 00:07:06.3692 199.203.120.75
xxx.xxx.xxx.173 TCP 3192 > ftp [SYN]
Seq=8248829 Ack=0 Win=8192 Len=0
305 2001-10-16 04:00:51.0972 200.225.172.5
xxx.xxx.xxx.220 TCP 1150 > ftp [SYN]
Seq=1437368 Ack=0 Win=8192 Len=0
306 2001-10-16 04:00:54.0973 200.225.172.5
xxx.xxx.xxx.220 TCP 1150 > ftp [SYN]
Seq=1437368 Ack=0 Win=8192 Len=0
307 2001-10-16 06:54:06.8730 64.92.132.10
xxx.xxx.xxx.5 TCP 3523 > ftp [SYN]
Seq=8633625 Ack=0 Win=8192 Len=0
308 2001-10-16 07:30:36.0826 217.85.115.254
xxx.xxx.xxx.1 TCP 1639 > ftp [SYN]
Seq=1426353272 Ack=0 Win=16384 Len=0
309 2001-10-16 07:30:36.0926 217.85.115.254
xxx.xxx.xxx.3 TCP 1641 > ftp [SYN]
Seq=1426449390 Ack=0 Win=16384 Len=0
310 2001-10-16 07:30:36.1026 217.85.115.254
xxx.xxx.xxx.5 TCP 1643 > ftp [SYN]
Seq=1426558779 Ack=0 Win=16384 Len=0
311 2001-10-16 07:30:36.1226 217.85.115.254
xxx.xxx.xxx.10 TCP 1648 > ftp [SYN]
Seq=1426786984 Ack=0 Win=16384 Len=0
312 2001-10-16 07:30:36.1326 217.85.115.254
xxx.xxx.xxx.11 TCP kermit > ftp [SYN]
Seq=1426848715 Ack=0 Win=16384 Len=0
313 2001-10-16 07:30:36.1426 217.85.115.254
xxx.xxx.xxx.12 TCP 1650 > ftp [SYN]
Seq=1426882487 Ack=0 Win=16384 Len=0
314 2001-10-16 07:30:36.1526 217.85.115.254
xxx.xxx.xxx.14 TCP 1652 > ftp [SYN]
Seq=1426994873 Ack=0 Win=16384 Len=0
315 2001-10-16 07:30:36.2826 217.85.115.254
xxx.xxx.xxx.24 TCP 1662 > ftp [SYN]
Seq=1427482700 Ack=0 Win=16384 Len=0
316 2001-10-16 07:30:36.2926 217.85.115.254
xxx.xxx.xxx.25 TCP 1663 > ftp [SYN]
Seq=1427523965 Ack=0 Win=16384 Len=0
317 2001-10-16 07:30:36.3026 217.85.115.254
xxx.xxx.xxx.28 TCP 1666 > ftp [SYN]
Seq=1427662985 Ack=0 Win=16384 Len=0
318 2001-10-16 07:30:36.3026 217.85.115.254
xxx.xxx.xxx.29 TCP 1667 > ftp [SYN]
Seq=1427713465 Ack=0 Win=16384 Len=0
319 2001-10-16 07:30:36.3126 217.85.115.254
xxx.xxx.xxx.30 TCP 1668 > ftp [SYN]
Seq=1427750655 Ack=0 Win=16384 Len=0
320 2001-10-16 07:30:36.3226 217.85.115.254
xxx.xxx.xxx.31 TCP 1669 > ftp [SYN]
Seq=1427789395 Ack=0 Win=16384 Len=0
321 2001-10-16 07:30:36.5726 217.85.115.254
xxx.xxx.xxx.100 TCP 1738 > ftp [SYN]
Seq=1431310867 Ack=0 Win=16384 Len=0
322 2001-10-16 07:30:37.0326 217.85.115.254
xxx.xxx.xxx.220 TCP 1858 > ftp [SYN]
Seq=1437118836 Ack=0 Win=16384 Len=0
323 2001-10-16 07:30:37.0426 217.85.115.254
xxx.xxx.xxx.223 TCP 1861 > ftp [SYN]
Seq=1437261512 Ack=0 Win=16384 Len=0
324 2001-10-16 07:30:37.1326 217.85.115.254
xxx.xxx.xxx.246 TCP 1884 > ftp [SYN]
Seq=1438446232 Ack=0 Win=16384 Len=0
325 2001-10-16 07:30:37.1326 217.85.115.254
xxx.xxx.xxx.247 TCP 1885 > ftp [SYN]
Seq=1438486840 Ack=0 Win=16384 Len=0
326 2001-10-16 07:30:37.1426 217.85.115.254
xxx.xxx.xxx.249 TCP 1887 > ftp [SYN]
Seq=1438601334 Ack=0 Win=16384 Len=0
327 2001-10-16 07:30:37.1426 217.85.115.254
xxx.xxx.xxx.250 TCP 1888 > ftp [SYN]
Seq=1438681923 Ack=0 Win=16384 Len=0
328 2001-10-16 07:30:37.1626 217.85.115.254
xxx.xxx.xxx.254 TCP 1892 > ftp [SYN]
Seq=1438868593 Ack=0 Win=16384 Len=0
329 2001-10-16 07:30:38.9027 217.85.115.254
xxx.xxx.xxx.1 TCP 1639 > ftp [SYN]
Seq=1426353272 Ack=0 Win=16384 Len=0
330 2001-10-16 07:30:38.9127 217.85.115.254
xxx.xxx.xxx.3 TCP 1641 > ftp [SYN]
Seq=1426449390 Ack=0 Win=16384 Len=0
331 2001-10-16 07:30:38.9227 217.85.115.254
xxx.xxx.xxx.5 TCP 1643 > ftp [SYN]
Seq=1426558779 Ack=0 Win=16384 Len=0
332 2001-10-16 07:30:38.9427 217.85.115.254
xxx.xxx.xxx.10 TCP 1648 > ftp [SYN]
Seq=1426786984 Ack=0 Win=16384 Len=0
333 2001-10-16 07:30:38.9527 217.85.115.254
xxx.xxx.xxx.11 TCP kermit > ftp [SYN]
Seq=1426848715 Ack=0 Win=16384 Len=0
334 2001-10-16 07:30:38.9627 217.85.115.254
xxx.xxx.xxx.12 TCP 1650 > ftp [SYN]
Seq=1426882487 Ack=0 Win=16384 Len=0
335 2001-10-16 07:30:38.9727 217.85.115.254
xxx.xxx.xxx.14 TCP 1652 > ftp [SYN]
Seq=1426994873 Ack=0 Win=16384 Len=0
336 2001-10-16 07:30:39.1727 217.85.115.254
xxx.xxx.xxx.18 TCP 1656 > ftp [SYN]
Seq=1427220998 Ack=0 Win=16384 Len=0
337 2001-10-16 07:30:39.2027 217.85.115.254
xxx.xxx.xxx.24 TCP 1662 > ftp [SYN]
Seq=1427482700 Ack=0 Win=16384 Len=0
338 2001-10-16 07:30:39.2127 217.85.115.254
xxx.xxx.xxx.25 TCP 1663 > ftp [SYN]
Seq=1427523965 Ack=0 Win=16384 Len=0
339 2001-10-16 07:30:39.2227 217.85.115.254
xxx.xxx.xxx.27 TCP 1665 > ftp [SYN]
Seq=1427607962 Ack=0 Win=16384 Len=0
340 2001-10-16 07:30:39.2227 217.85.115.254
xxx.xxx.xxx.28 TCP 1666 > ftp [SYN]
Seq=1427662985 Ack=0 Win=16384 Len=0
341 2001-10-16 07:30:39.2327 217.85.115.254
xxx.xxx.xxx.29 TCP 1667 > ftp [SYN]
Seq=1427713465 Ack=0 Win=16384 Len=0
342 2001-10-16 07:30:39.2427 217.85.115.254
xxx.xxx.xxx.30 TCP 1668 > ftp [SYN]
Seq=1427750655 Ack=0 Win=16384 Len=0
343 2001-10-16 07:30:39.2427 217.85.115.254
xxx.xxx.xxx.31 TCP 1669 > ftp [SYN]
Seq=1427789395 Ack=0 Win=16384 Len=0
344 2001-10-16 07:30:40.0628 217.85.115.254
xxx.xxx.xxx.245 TCP 1883 > ftp [SYN]
Seq=1438396545 Ack=0 Win=16384 Len=0
345 2001-10-16 07:30:40.0628 xxx.xxx.xxx.245
217.85.115.254 TCP ftp > 1883 [RST,
ACK] Seq=0 Ack=1438396546 Win=0 Len=0
346 2001-10-16 07:30:40.0828 217.85.115.254
xxx.xxx.xxx.254 TCP 1892 > ftp [SYN]
Seq=1438868593 Ack=0 Win=16384 Len=0
347 2001-10-16 07:30:40.7528 217.85.115.254
xxx.xxx.xxx.245 TCP 1883 > ftp [SYN]
Seq=1438396545 Ack=0 Win=16384 Len=0
348 2001-10-16 07:30:40.7528 xxx.xxx.xxx.245
217.85.115.254 TCP ftp > 1883 [RST,
ACK] Seq=0 Ack=1438396546 Win=0 Len=0
349 2001-10-16 09:32:27.2301 64.145.249.3
xxx.xxx.xxx.221 TCP 2850 > ftp [SYN]
Seq=616073001 Ack=0 Win=8192 Len=0
350 2001-10-16 16:06:15.4813 64.92.132.10
xxx.xxx.xxx.101 TCP 3035 > ftp [SYN]
Seq=2367394 Ack=0 Win=8192 Len=0
351 2001-10-16 16:11:59.7496 64.173.172.235
xxx.xxx.xxx.206 TCP 3714 > ftp [SYN]
Seq=240990023 Ack=0 Win=8192 Len=0
352 2001-10-16 16:27:38.2776 200.60.123.163
xxx.xxx.xxx.176 TCP 62417 > ftp [SYN]
Seq=15541781 Ack=0 Win=8192 Len=0
353 2001-10-16 16:29:19.4395 158.252.140.108
xxx.xxx.xxx.2 TCP 4919 > x11 [SYN]
Seq=0 Ack=1 Win=5840 Len=0
354 2001-10-16 16:29:19.4595 158.252.140.108
xxx.xxx.xxx.2 TCP 4919 > ftp [SYN]
Seq=0 Ack=1 Win=5840 Len=0
355 2001-10-16 16:55:01.9612 64.212.166.78
xxx.xxx.xxx.126 TCP 1356 > ftp [SYN]
Seq=1502507394 Ack=0 Win=16384 Len=0
356 2001-10-16 17:11:32.9649 195.161.50.197
xxx.xxx.xxx.221 TCP 1069 > ftp [SYN]
Seq=2067737961 Ack=0 Win=16384 Len=0
357 2001-10-16 17:21:15.3799 64.70.17.133
xxx.xxx.xxx.172 TCP 2120 > ftp [SYN]
Seq=3824497999 Ack=0 Win=16384 Len=0
358 2001-10-16 17:21:18.3300 64.70.17.133
xxx.xxx.xxx.172 TCP 2120 > ftp [SYN]
Seq=3824497999 Ack=0 Win=16384 Len=0
359 2001-10-16 18:08:15.8401 200.28.31.248
xxx.xxx.xxx.218 TCP 13581 > ftp [SYN]
Seq=15471837 Ack=0 Win=8192 Len=0
360 2001-10-16 19:17:15.1878 200.60.123.163
xxx.xxx.xxx.161 TCP 64999 > ftp [SYN]
Seq=17077051 Ack=0 Win=8192 Len=0
361 2001-10-16 19:17:18.1578 200.60.123.163
xxx.xxx.xxx.161 TCP 64999 > ftp [SYN]
Seq=17077051 Ack=0 Win=8192 Len=0
362 2001-10-16 19:22:14.3668 200.10.106.15
xxx.xxx.xxx.99 TCP 1089 > ftp [SYN]
Seq=82457642 Ack=0 Win=8192 Len=0
363 2001-10-16 20:06:55.8287 63.218.57.242
xxx.xxx.xxx.9 TCP 4216 > ftp [SYN]
Seq=3814728760 Ack=0 Win=16384 Len=0
364 2001-10-16 21:25:51.3911 200.60.123.163
xxx.xxx.xxx.165 TCP 61361 > ftp [SYN]
Seq=18239097 Ack=0 Win=8192 Len=0
365 2001-10-16 21:25:54.3112 200.60.123.163
xxx.xxx.xxx.165 TCP 61361 > ftp [SYN]
Seq=18239097 Ack=0 Win=8192 Len=0
366 2001-10-16 22:29:26.0287 63.218.57.242
xxx.xxx.xxx.2 TCP 4734 > ftp [SYN]
Seq=3585470311 Ack=0 Win=16384 Len=0
367 2001-10-16 22:36:23.2088 195.223.61.3
xxx.xxx.xxx.215 TCP 2553 > ftp [SYN]
Seq=249282595 Ack=0 Win=8192 Len=0
368 2001-10-17 01:33:12.5698 195.223.61.3
xxx.xxx.xxx.72 TCP 1459 > ftp [SYN]
Seq=346971165 Ack=0 Win=8192 Len=0
369 2001-10-17 02:23:45.0197 64.212.166.78
xxx.xxx.xxx.26 TCP 1051 > ftp [SYN]
Seq=490403963 Ack=0 Win=16384 Len=0
370 2001-10-17 03:20:25.9730 195.243.114.250
xxx.xxx.xxx.227 TCP 4835 > ftp [SYN]
Seq=1719017470 Ack=0 Win=8192 Len=0
371 2001-10-17 04:14:28.8986 195.161.50.197
xxx.xxx.xxx.155 TCP 1630 > ftp [SYN]
Seq=3127754076 Ack=0 Win=16384 Len=0
372 2001-10-17 08:20:34.3714 64.66.223.131
xxx.xxx.xxx.108 TCP 2874 > ftp [SYN]
Seq=2161874755 Ack=0 Win=8192 Len=0
373 2001-10-17 08:28:06.4521 64.66.223.131
xxx.xxx.xxx.108 TCP 2874 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
374 2001-10-17 08:50:51.4470 195.243.114.250
xxx.xxx.xxx.36 TCP 2195 > ftp [SYN]
Seq=1844591125 Ack=0 Win=8192 Len=0
375 2001-10-17 13:08:37.4212 195.223.61.3
xxx.xxx.xxx.55 TCP 1266 > ftp [SYN]
Seq=24344961 Ack=0 Win=8192 Len=0
376 2001-10-17 14:45:05.7028 213.255.47.82
xxx.xxx.xxx.28 TCP 1940 > ftp [SYN]
Seq=2861292415 Ack=0 Win=8192 Len=0
377 2001-10-17 14:45:08.7129 213.255.47.82
xxx.xxx.xxx.28 TCP 1940 > ftp [SYN]
Seq=2861292415 Ack=0 Win=8192 Len=0
378 2001-10-17 15:07:07.0939 64.212.166.78
xxx.xxx.xxx.13 TCP 3972 > ftp [SYN]
Seq=3788206367 Ack=0 Win=16384 Len=0
379 2001-10-17 15:07:10.0039 64.212.166.78
xxx.xxx.xxx.13 TCP 3972 > ftp [SYN]
Seq=3788206367 Ack=0 Win=16384 Len=0
380 2001-10-17 15:20:05.1786 195.161.50.197
xxx.xxx.xxx.230 TCP 3625 > ftp [SYN]
Seq=261025106 Ack=0 Win=16384 Len=0
381 2001-10-17 15:20:08.1887 195.161.50.197
xxx.xxx.xxx.230 TCP 3625 > ftp [SYN]
Seq=261025106 Ack=0 Win=16384 Len=0
382 2001-10-17 17:21:21.2089 64.70.17.133
xxx.xxx.xxx.172 TCP 3375 > ftp [SYN]
Seq=2538878951 Ack=0 Win=16384 Len=0
383 2001-10-17 18:39:03.9474 195.161.50.197
xxx.xxx.xxx.156 TCP 1115 > ftp [SYN]
Seq=3955799329 Ack=0 Win=16384 Len=0
384 2001-10-17 18:39:06.9275 195.161.50.197
xxx.xxx.xxx.156 TCP 1115 > ftp [SYN]
Seq=3955799329 Ack=0 Win=16384 Len=0
385 2001-10-17 19:58:37.1925 200.184.27.226
xxx.xxx.xxx.52 TCP 4353 > ftp [SYN]
Seq=3456787112 Ack=0 Win=16384 Len=0
386 2001-10-17 20:01:12.9064 63.162.34.112
xxx.xxx.xxx.132 TCP 1369 > ftp [SYN]
Seq=1507887407 Ack=0 Win=8192 Len=0
387 2001-10-17 20:01:16.1465 63.162.34.112
xxx.xxx.xxx.132 TCP 1369 > ftp [SYN]
Seq=1507887407 Ack=0 Win=8192 Len=0
388 2001-10-17 20:06:53.4155 63.218.57.242
xxx.xxx.xxx.9 TCP 3891 > ftp [SYN]
Seq=31855494 Ack=0 Win=16384 Len=0
389 2001-10-17 20:06:56.6656 63.218.57.242
xxx.xxx.xxx.9 TCP 3891 > ftp [SYN]
Seq=31855494 Ack=0 Win=16384 Len=0
390 2001-10-17 20:21:51.6702 200.185.37.76
xxx.xxx.xxx.184 TCP 1406 > ftp [SYN]
Seq=2776958502 Ack=0 Win=16384 Len=0
391 2001-10-17 20:21:54.6503 200.185.37.76
xxx.xxx.xxx.184 TCP 1406 > ftp [SYN]
Seq=2776958502 Ack=0 Win=16384 Len=0
392 2001-10-17 20:43:21.7400 193.196.137.56
xxx.xxx.xxx.174 TCP 1613 > ftp [SYN]
Seq=929085304 Ack=0 Win=8192 Len=0
393 2001-10-17 20:45:21.9640 63.200.73.60
xxx.xxx.xxx.34 TCP 2278 > ftp [SYN]
Seq=3061430527 Ack=0 Win=8192 Len=0
394 2001-10-17 21:42:05.5735 63.200.73.60
xxx.xxx.xxx.130 TCP 3338 > ftp [SYN]
Seq=1257109306 Ack=0 Win=8192 Len=0
395 2001-10-17 22:29:24.0096 63.218.57.242
xxx.xxx.xxx.2 TCP 4648 > ftp [SYN]
Seq=408354940 Ack=0 Win=16384 Len=0
396 2001-10-17 22:29:27.2396 63.218.57.242
xxx.xxx.xxx.2 TCP 4648 > ftp [SYN]
Seq=408354940 Ack=0 Win=16384 Len=0
397 2001-10-17 23:41:23.2815 64.173.172.235
xxx.xxx.xxx.199 TCP 2234 > ftp [SYN]
Seq=173278704 Ack=0 Win=8192 Len=0
398 2001-10-17 23:41:26.4616 64.173.172.235
xxx.xxx.xxx.199 TCP 2234 > ftp [SYN]
Seq=173278704 Ack=0 Win=8192 Len=0
399 2001-10-17 23:46:17.3797 193.196.137.56
xxx.xxx.xxx.230 TCP 1875 > ftp [SYN]
Seq=1054761436 Ack=0 Win=8192 Len=0
400 2001-10-17 23:46:20.3598 193.196.137.56
xxx.xxx.xxx.230 TCP 1875 > ftp [SYN]
Seq=1054761436 Ack=0 Win=8192 Len=0
401 2001-10-17 23:49:42.8542 195.188.250.3
xxx.xxx.xxx.76 TCP 2891 > ftp [SYN]
Seq=1543060755 Ack=0 Win=16384 Len=0
402 2001-10-18 00:01:10.3995 193.95.161.209
xxx.xxx.xxx.44 TCP 5224 > ftp [SYN]
Seq=3765815456 Ack=0 Win=8192 Len=0
403 2001-10-18 00:08:42.3695 193.95.161.209
xxx.xxx.xxx.44 TCP 5224 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
404 2001-10-18 00:53:44.6767 64.173.172.235
xxx.xxx.xxx.147 TCP 4927 > ftp [SYN]
Seq=191158605 Ack=0 Win=8192 Len=0
405 2001-10-18 02:07:15.6224 200.185.37.76
xxx.xxx.xxx.46 TCP 1145 > ftp [SYN]
Seq=1404415107 Ack=0 Win=16384 Len=0
406 2001-10-18 02:07:18.5725 200.185.37.76
xxx.xxx.xxx.46 TCP 1145 > ftp [SYN]
Seq=1404415107 Ack=0 Win=16384 Len=0
407 2001-10-18 02:32:46.1474 64.220.145.162
xxx.xxx.xxx.17 TCP 4654 > ftp [SYN]
Seq=1756119607 Ack=0 Win=16384 Len=0
408 2001-10-18 03:09:48.7496 64.70.17.133
xxx.xxx.xxx.140 TCP 3718 > ftp [SYN]
Seq=3632503281 Ack=0 Win=16384 Len=0
409 2001-10-18 04:58:26.0063 200.28.31.248
xxx.xxx.xxx.211 TCP 40340 > ftp [SYN]
Seq=18077124 Ack=0 Win=8192 Len=0
410 2001-10-18 04:58:28.9164 200.28.31.248
xxx.xxx.xxx.211 TCP 40340 > ftp [SYN]
Seq=18077124 Ack=0 Win=8192 Len=0
411 2001-10-18 05:26:30.0146 64.212.166.78
xxx.xxx.xxx.207 TCP 4744 > ftp [SYN]
Seq=4156367574 Ack=0 Win=16384 Len=0
412 2001-10-18 06:40:57.6897 64.212.166.78
xxx.xxx.xxx.30 TCP trnsprntproxy >
ftp [SYN] Seq=3797183957 Ack=0 Win=16384 Len=0
413 2001-10-18 08:20:34.3405 64.66.223.131
xxx.xxx.xxx.108 TCP 2190 > ftp [SYN]
Seq=1492614435 Ack=0 Win=8192 Len=0
414 2001-10-18 08:20:37.5706 64.66.223.131
xxx.xxx.xxx.108 TCP 2190 > ftp [SYN]
Seq=1492614435 Ack=0 Win=8192 Len=0
415 2001-10-18 08:28:09.4832 64.66.223.131
xxx.xxx.xxx.108 TCP 2190 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
416 2001-10-18 14:40:36.2595 200.28.31.248
xxx.xxx.xxx.218 TCP 30936 > ftp [SYN]
Seq=18611206 Ack=0 Win=8192 Len=0
417 2001-10-18 14:40:39.2396 200.28.31.248
xxx.xxx.xxx.218 TCP 30936 > ftp [SYN]
Seq=18611206 Ack=0 Win=8192 Len=0
418 2001-10-18 15:32:48.9226 64.70.17.133
xxx.xxx.xxx.99 TCP 1171 > ftp [SYN]
Seq=652479039 Ack=0 Win=16384 Len=0
419 2001-10-18 15:32:51.8927 64.70.17.133
xxx.xxx.xxx.99 TCP 1171 > ftp [SYN]
Seq=652479039 Ack=0 Win=16384 Len=0
420 2001-10-18 17:21:20.0179 64.70.17.133
xxx.xxx.xxx.172 TCP 4871 > ftp [SYN]
Seq=344110105 Ack=0 Win=16384 Len=0
421 2001-10-18 17:21:23.0080 64.70.17.133
xxx.xxx.xxx.172 TCP 4871 > ftp [SYN]
Seq=344110105 Ack=0 Win=16384 Len=0
422 2001-10-18 18:25:35.4138 200.185.37.76
xxx.xxx.xxx.113 TCP 1155 > ftp [SYN]
Seq=1469275296 Ack=0 Win=16384 Len=0
423 2001-10-18 18:25:38.3339 200.185.37.76
xxx.xxx.xxx.113 TCP 1155 > ftp [SYN]
Seq=1469275296 Ack=0 Win=16384 Len=0
424 2001-10-18 19:20:05.9391 64.70.17.133
xxx.xxx.xxx.97 TCP 3720 > ftp [SYN]
Seq=430869435 Ack=0 Win=16384 Len=0
425 2001-10-18 19:36:22.6138 193.95.161.209
xxx.xxx.xxx.57 TCP 5824 > ftp [SYN]
Seq=2819280878 Ack=0 Win=8192 Len=0
426 2001-10-18 19:36:25.7939 193.95.161.209
xxx.xxx.xxx.57 TCP 5824 > ftp [SYN]
Seq=2819280878 Ack=0 Win=8192 Len=0
427 2001-10-18 19:43:57.4858 193.95.161.209
xxx.xxx.xxx.57 TCP 5824 > ftp [RST,
ACK] Seq=0 Ack=0 Win=0 Len=3
428 2001-10-18 20:01:12.3351 63.162.34.112
xxx.xxx.xxx.132 TCP 4476 > ftp [SYN]
Seq=1686050648 Ack=0 Win=8192 Len=0
429 2001-10-18 20:01:28.5656 193.196.137.56
xxx.xxx.xxx.219 TCP 4815 > ftp [SYN]
Seq=1533147720 Ack=0 Win=8192 Len=0
430 2001-10-18 20:01:31.5257 193.196.137.56
xxx.xxx.xxx.219 TCP 4815 > ftp [SYN]
Seq=1533147720 Ack=0 Win=8192 Len=0
431 2001-10-18 20:06:56.0958 63.218.57.242
xxx.xxx.xxx.9 TCP 4763 > ftp [SYN]
Seq=1642086290 Ack=0 Win=16384 Len=0
432 2001-10-18 20:55:14.1274 64.70.17.133
xxx.xxx.xxx.208 TCP 3268 > ftp [SYN]
Seq=65668045 Ack=0 Win=16384 Len=0
433 2001-10-18 21:05:35.3613 195.13.94.130
xxx.xxx.xxx.174 TCP 56846 > ftp [SYN]
Seq=2815508915 Ack=0 Win=16384 Len=0
434 2001-10-18 21:05:38.5614 195.13.94.130
xxx.xxx.xxx.174 TCP 56846 > ftp [SYN]
Seq=2815508915 Ack=0 Win=16384 Len=0
435 2001-10-18 22:29:25.2542 63.218.57.242
xxx.xxx.xxx.2 TCP 4447 > ftp [SYN]
Seq=1509274865 Ack=0 Win=16384 Len=0
__________________________________________________
Do You Yahoo!?
Make a great connection at Yahoo! Personals.
http://personals.yahoo.com
----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Oct 22 2001 - 09:49:02 PDT