(using a link on this one so thread isn't cluttered with screenshots)
nogleg.com/88.82.70.156.jpgI watched for about 3 minutes and the only one hitting port 21320 was that one netherlands IP, 80.82.70.156. If he/she stumbled across over 1000 honeypots w/ that crap, must have went through hundreds of thousands of websites. Oh, and Venezuela got carpet bombed
https://isc.sans.edu/port.html?port=21320i've been surprised that Russia is usually far down the list... my earlier screenshot was abnormal, w/ Russia at #1. Russians too srs to mess with random phishing.
ed: i just turned it on again... and actually saw a coordinated botnet attack!
nogleg.com/stlouis.jpg omg, mexico getting involved
nogleg.com/mexico.jpg ... ah, much more entertaining when an actual attack is taking place
nogleg.com/kodered.jpg