Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.security > #118

What is it?

From "Убить спамера" <dev@null.id>
Newsgroups comp.os.linux.security
Subject What is it?
Date 2012-04-18 06:05 +0000
Organization 9432
Message-ID <jmllk2$355$1@speranza.aioe.org> (permalink)

Show all headers | View raw

Why they scan strange DPTs?

SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.96 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=52515 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.81 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=48176 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.134 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=55333 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.96 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=52515 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.81 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=48176 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.73 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=51294 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.134 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=55333 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.96 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=52515 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.14.96 DST=x.x.x.x LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=TCP SPT=80 DPT=52515 WINDOW=5792 RES=0x00 ACK SYN URGP=0 
SRC=65.49.68.176 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=42882 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.176 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=42882 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.176 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=42882 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.176 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=42882 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.170 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=37631 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.159 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=55127 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.170 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=37631 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.159 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=55127 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.156 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=58409 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.178 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=32999 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.176 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=42882 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.156 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=58409 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.178 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=32999 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.170 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=37631 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.159 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=55127 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.156 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=58409 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.178 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=32999 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.170 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=37631 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.159 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=55127 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.156 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=58409 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.178 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=32999 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.167 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=46204 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.167 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=46204 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.170 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=37631 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.159 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=55127 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.178 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=32999 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.156 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=58409 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.167 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=46204 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.167 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=46204 WINDOW=0 RES=0x00 ACK RST URGP=0 
SRC=65.49.68.167 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=0 DF PROTO=TCP SPT=80 DPT=46204 WINDOW=0 RES=0x00 ACK RST URGP=0 

-- 
Origin: У каждого философа две философии: одна обращена вовне, другая - для 
себя. - Д. Толанд

Back to comp.os.linux.security | Previous | Next — Next in thread | Find similar

Thread

What is it? "õÂÉÔØ ÓÐÁÍÅÒÁ" <dev@null.id> - 2012-04-18 06:05 +0000
  Re: What is it? Chris Davies <chris-usenet@roaima.co.uk> - 2012-04-19 08:58 +0100
    Re: What is it? "õÂÉÔØ ÓÐÁÍÅÒÁ" <dev@null.id> - 2012-04-20 09:39 +0000
      Re: What is it? Chris Davies <chris-usenet@roaima.co.uk> - 2012-04-20 16:52 +0100

csiph-web