[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Aug 20 08:03:25 200.93.80.166:22002 -> xxx.yyy.1.0:3127 SYN ******S* Aug 20 08:03:25 200.93.80.166:22002 -> xxx.yyy.1.0:1080 SYN ******S* Aug 20 08:03:25 200.93.80.166:22002 -> xxx.yyy.1.0:10080 SYN ******S* Aug 20 08:03:25 200.93.80.166:22002 -> xxx.yyy.1.0:3128 SYN ******S* Aug 20 08:03:25 200.93.80.166:22002 -> xxx.yyy.1.1:3127 SYN ******S* Aug 20 08:03:25 200.93.80.166:22002 -> xxx.yyy.1.1:1080 SYN ******S* Aug 20 08:03:26 200.93.80.166:22002 -> xxx.yyy.1.1:10080 SYN ******S* Aug 20 08:03:26 200.93.80.166:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] Aug 20 15:26:05 200.93.80.166:22002 -> xxx.yyy.255.253:3128 SYN ******S* Aug 20 15:26:05 200.93.80.166:22002 -> xxx.yyy.255.254:3127 SYN ******S* Aug 20 15:26:05 200.93.80.166:22002 -> xxx.yyy.255.254:1080 SYN ******S* Aug 20 15:26:05 200.93.80.166:22002 -> xxx.yyy.255.254:10080 SYN ******S* Aug 20 15:26:05 200.93.80.166:22002 -> xxx.yyy.255.254:3128 SYN ******S* Aug 20 15:26:05 200.93.80.166:22002 -> xxx.yyy.255.255:3127 SYN ******S* Aug 20 15:26:06 200.93.80.166:22002 -> xxx.yyy.255.255:1080 SYN ******S* Aug 20 15:26:06 200.93.80.166:22002 -> xxx.yyy.255.255:10080 SYN ******S* Aug 20 15:26:06 200.93.80.166:22002 -> xxx.yyy.255.255:3128 SYN ******S* 161236 Aug 20 04:40:58 212.244.37.68:3609 -> xxx.yyy.1.2:4899 SYN ******S* Aug 20 04:40:58 212.244.37.68:3610 -> xxx.yyy.1.1:4899 SYN ******S* Aug 20 04:40:58 212.244.37.68:3611 -> xxx.yyy.1.3:4899 SYN ******S* Aug 20 04:41:00 212.244.37.68:3612 -> xxx.yyy.1.4:4899 SYN ******S* Aug 20 04:41:00 212.244.37.68:3613 -> xxx.yyy.1.5:4899 SYN ******S* Aug 20 04:41:00 212.244.37.68:3614 -> xxx.yyy.1.6:4899 SYN ******S* Aug 20 04:41:00 212.244.37.68:3615 -> xxx.yyy.1.7:4899 SYN ******S* Aug 20 04:41:00 212.244.37.68:3616 -> xxx.yyy.1.8:4899 SYN ******S* [...] Aug 20 05:23:25 212.244.37.68:1493 -> xxx.yyy.255.246:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1494 -> xxx.yyy.255.247:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1495 -> xxx.yyy.255.248:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1496 -> xxx.yyy.255.249:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1499 -> xxx.yyy.255.251:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1498 -> xxx.yyy.255.252:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1500 -> xxx.yyy.255.253:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1497 -> xxx.yyy.255.250:4899 SYN ******S* Aug 20 05:23:25 212.244.37.68:1501 -> xxx.yyy.255.254:4899 SYN ******S* 118702 Aug 20 16:27:07 217.110.24.146:4263 -> xxx.yyy.1.1:4899 SYN ******S* Aug 20 16:27:07 217.110.24.146:4266 -> xxx.yyy.1.2:4899 SYN ******S* Aug 20 16:27:07 217.110.24.146:4269 -> xxx.yyy.1.3:4899 SYN ******S* Aug 20 16:27:10 217.110.24.146:4272 -> xxx.yyy.1.4:4899 SYN ******S* Aug 20 16:27:10 217.110.24.146:4274 -> xxx.yyy.1.5:4899 SYN ******S* Aug 20 16:27:10 217.110.24.146:4279 -> xxx.yyy.1.6:4899 SYN ******S* Aug 20 16:27:10 217.110.24.146:4282 -> xxx.yyy.1.7:4899 SYN ******S* Aug 20 16:27:10 217.110.24.146:4285 -> xxx.yyy.1.8:4899 SYN ******S* [...] Aug 20 20:03:38 217.110.24.146:3385 -> xxx.yyy.255.245:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3396 -> xxx.yyy.255.253:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3393 -> xxx.yyy.255.248:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3395 -> xxx.yyy.255.249:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3401 -> xxx.yyy.255.252:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3397 -> xxx.yyy.255.250:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3398 -> xxx.yyy.255.251:4899 SYN ******S* Aug 20 20:03:39 217.110.24.146:3402 -> xxx.yyy.255.254:4899 SYN ******S* 114202 Aug 20 18:10:33 82.216.251.135:4086 -> xxx.yyy.1.1:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4088 -> xxx.yyy.1.2:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4084 -> xxx.yyy.1.0:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4097 -> xxx.yyy.1.3:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4099 -> xxx.yyy.1.4:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4102 -> xxx.yyy.1.5:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4104 -> xxx.yyy.1.6:1433 SYN ******S* Aug 20 18:10:33 82.216.251.135:4107 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 20 21:59:28 82.216.251.135:3540 -> xxx.yyy.255.243:1433 SYN ******S* Aug 20 21:59:29 82.216.251.135:3544 -> xxx.yyy.255.244:1433 SYN ******S* Aug 20 21:59:29 82.216.251.135:3569 -> xxx.yyy.255.245:1433 SYN ******S* Aug 20 21:59:29 82.216.251.135:3631 -> xxx.yyy.255.246:1433 SYN ******S* Aug 20 21:59:30 82.216.251.135:3670 -> xxx.yyy.255.247:1433 SYN ******S* Aug 20 21:59:30 82.216.251.135:3685 -> xxx.yyy.255.248:1433 SYN ******S* Aug 20 21:59:32 82.216.251.135:3702 -> xxx.yyy.255.253:1433 SYN ******S* Aug 20 21:59:32 82.216.251.135:3703 -> xxx.yyy.255.254:1433 SYN ******S* 95468 Aug 20 00:36:44 62.23.57.93:2924 -> xxx.yyy.1.1:1433 SYN ******S* Aug 20 00:36:44 62.23.57.93:2925 -> xxx.yyy.1.2:1433 SYN ******S* Aug 20 00:36:44 62.23.57.93:2926 -> xxx.yyy.1.3:1433 SYN ******S* Aug 20 00:36:44 62.23.57.93:2927 -> xxx.yyy.1.4:1433 SYN ******S* Aug 20 00:36:44 62.23.57.93:2928 -> xxx.yyy.1.5:1433 SYN ******S* Aug 20 00:36:44 62.23.57.93:2929 -> xxx.yyy.1.6:1433 SYN ******S* Aug 20 00:36:44 62.23.57.93:2930 -> xxx.yyy.1.7:1433 SYN ******S* Aug 20 00:36:41 62.23.57.93:2931 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 20 00:47:49 62.23.57.93:4878 -> xxx.yyy.255.248:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4874 -> xxx.yyy.255.244:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4875 -> xxx.yyy.255.245:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4879 -> xxx.yyy.255.249:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4871 -> xxx.yyy.255.241:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4884 -> xxx.yyy.255.254:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4881 -> xxx.yyy.255.251:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4882 -> xxx.yyy.255.252:1433 SYN ******S* Aug 20 00:47:49 62.23.57.93:4883 -> xxx.yyy.255.253:1433 SYN ******S* 71051 Aug 20 08:23:36 211.194.148.220:3592 -> xxx.yyy.1.2:1433 SYN ******S* Aug 20 08:23:33 211.194.148.220:3591 -> xxx.yyy.1.1:1433 SYN ******S* Aug 20 08:23:36 211.194.148.220:3593 -> xxx.yyy.1.3:1433 SYN ******S* Aug 20 08:23:36 211.194.148.220:3595 -> xxx.yyy.1.5:1433 SYN ******S* Aug 20 08:23:36 211.194.148.220:3594 -> xxx.yyy.1.4:1433 SYN ******S* Aug 20 08:23:36 211.194.148.220:3596 -> xxx.yyy.1.6:1433 SYN ******S* Aug 20 08:23:36 211.194.148.220:3598 -> xxx.yyy.1.8:1433 SYN ******S* Aug 20 08:23:36 211.194.148.220:3597 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 20 08:35:16 211.194.148.220:2121 -> xxx.yyy.255.151:1433 SYN ******S* Aug 20 08:35:16 211.194.148.220:2124 -> xxx.yyy.255.154:1433 SYN ******S* Aug 20 08:35:16 211.194.148.220:2122 -> xxx.yyy.255.152:1433 SYN ******S* Aug 20 08:35:16 211.194.148.220:2119 -> xxx.yyy.255.149:1433 SYN ******S* Aug 20 08:35:16 211.194.148.220:2126 -> xxx.yyy.255.156:1433 SYN ******S* Aug 20 08:35:17 211.194.148.220:2128 -> xxx.yyy.255.158:1433 SYN ******S* Aug 20 08:35:17 211.194.148.220:2129 -> xxx.yyy.255.159:1433 SYN ******S* Aug 20 08:35:17 211.194.148.220:2130 -> xxx.yyy.255.160:1433 SYN ******S* Aug 20 08:35:17 211.194.148.220:2158 -> xxx.yyy.255.188:1433 SYN ******S* 69839 Aug 20 17:22:33 194.7.124.37:2078 -> xxx.yyy.1.1:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2079 -> xxx.yyy.1.2:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2080 -> xxx.yyy.1.3:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2081 -> xxx.yyy.1.4:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2082 -> xxx.yyy.1.5:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2083 -> xxx.yyy.1.6:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2084 -> xxx.yyy.1.7:1433 SYN ******S* Aug 20 17:22:33 194.7.124.37:2085 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 20 17:41:59 194.7.124.37:1948 -> xxx.yyy.255.214:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1922 -> xxx.yyy.255.193:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1926 -> xxx.yyy.255.196:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1919 -> xxx.yyy.255.190:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1987 -> xxx.yyy.255.241:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1991 -> xxx.yyy.255.244:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1984 -> xxx.yyy.255.238:1433 SYN ******S* Aug 20 17:41:59 194.7.124.37:1937 -> xxx.yyy.255.206:1433 SYN ******S* 65843 Aug 20 11:18:50 128.227.135.204:1693 -> xxx.yyy.1.1:4000 SYN ******S* Aug 20 11:18:50 128.227.135.204:1695 -> xxx.yyy.1.2:4000 SYN ******S* Aug 20 11:18:50 128.227.135.204:1697 -> xxx.yyy.1.3:4000 SYN ******S* Aug 20 11:18:49 128.227.135.204:1699 -> xxx.yyy.1.4:4000 SYN ******S* Aug 20 11:18:52 128.227.135.204:1701 -> xxx.yyy.1.5:4000 SYN ******S* Aug 20 11:18:49 128.227.135.204:1703 -> xxx.yyy.1.6:4000 SYN ******S* Aug 20 11:18:49 128.227.135.204:1705 -> xxx.yyy.1.7:4000 SYN ******S* Aug 20 11:18:52 128.227.135.204:1707 -> xxx.yyy.1.8:4000 SYN ******S* [...] Aug 20 11:30:35 128.227.135.204:2220 -> xxx.yyy.255.195:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2242 -> xxx.yyy.255.206:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2244 -> xxx.yyy.255.207:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2238 -> xxx.yyy.255.204:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2240 -> xxx.yyy.255.205:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2236 -> xxx.yyy.255.203:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2258 -> xxx.yyy.255.214:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2254 -> xxx.yyy.255.212:4000 SYN ******S* Aug 20 11:30:36 128.227.135.204:2316 -> xxx.yyy.255.243:4000 SYN ******S* 64754 Aug 20 01:42:37 211.110.125.211:1444 -> xxx.yyy.1.1:4899 SYN ******S* Aug 20 01:42:37 211.110.125.211:1446 -> xxx.yyy.1.3:4899 SYN ******S* Aug 20 01:42:37 211.110.125.211:1445 -> xxx.yyy.1.2:4899 SYN ******S* Aug 20 01:42:35 211.110.125.211:1447 -> xxx.yyy.1.4:4899 SYN ******S* Aug 20 01:42:35 211.110.125.211:1449 -> xxx.yyy.1.5:4899 SYN ******S* Aug 20 01:42:35 211.110.125.211:1451 -> xxx.yyy.1.7:4899 SYN ******S* Aug 20 01:42:35 211.110.125.211:1450 -> xxx.yyy.1.6:4899 SYN ******S* Aug 20 01:42:35 211.110.125.211:1452 -> xxx.yyy.1.8:4899 SYN ******S* [...] Aug 20 02:04:34 211.110.125.211:1067 -> xxx.yyy.255.246:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1068 -> xxx.yyy.255.247:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1069 -> xxx.yyy.255.248:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1070 -> xxx.yyy.255.249:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1072 -> xxx.yyy.255.251:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1071 -> xxx.yyy.255.250:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1073 -> xxx.yyy.255.252:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1074 -> xxx.yyy.255.253:4899 SYN ******S* Aug 20 02:04:34 211.110.125.211:1075 -> xxx.yyy.255.254:4899 SYN ******S* 56869 Aug 20 03:22:01 82.45.238.180:3439 -> xxx.yyy.1.0:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3441 -> xxx.yyy.1.1:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3442 -> xxx.yyy.1.2:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3444 -> xxx.yyy.1.3:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3446 -> xxx.yyy.1.4:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3448 -> xxx.yyy.1.5:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3452 -> xxx.yyy.1.7:1433 SYN ******S* Aug 20 03:22:01 82.45.238.180:3450 -> xxx.yyy.1.6:1433 SYN ******S* [...] Aug 20 05:33:59 82.45.238.180:4593 -> xxx.yyy.148.50:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4600 -> xxx.yyy.148.51:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4458 -> xxx.yyy.148.33:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4608 -> xxx.yyy.148.52:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4466 -> xxx.yyy.148.34:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4611 -> xxx.yyy.148.53:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4472 -> xxx.yyy.148.35:1433 SYN ******S* Aug 20 05:33:59 82.45.238.180:4617 -> xxx.yyy.148.54:1433 SYN ******S* Aug 20 05:34:00 82.45.238.180:4479 -> xxx.yyy.148.36:1433 SYN ******S* 48883 Aug 20 04:49:17 221.149.118.235:4123 -> xxx.yyy.1.3:4899 SYN ******S* Aug 20 04:49:17 221.149.118.235:4116 -> xxx.yyy.1.1:4899 SYN ******S* Aug 20 04:49:17 221.149.118.235:4119 -> xxx.yyy.1.2:4899 SYN ******S* Aug 20 04:49:15 221.149.118.235:4125 -> xxx.yyy.1.4:4899 SYN ******S* Aug 20 04:49:15 221.149.118.235:4135 -> xxx.yyy.1.10:4899 SYN ******S* Aug 20 04:49:15 221.149.118.235:4127 -> xxx.yyy.1.5:4899 SYN ******S* Aug 20 04:49:15 221.149.118.235:4128 -> xxx.yyy.1.6:4899 SYN ******S* Aug 20 04:49:15 221.149.118.235:4145 -> xxx.yyy.1.15:4899 SYN ******S* [...] Aug 20 04:52:04 221.149.118.235:3897 -> xxx.yyy.252.232:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3892 -> xxx.yyy.252.227:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3862 -> xxx.yyy.252.203:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3861 -> xxx.yyy.252.202:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3864 -> xxx.yyy.252.205:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3899 -> xxx.yyy.252.234:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3868 -> xxx.yyy.252.208:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3871 -> xxx.yyy.252.211:4899 SYN ******S* Aug 20 04:52:04 221.149.118.235:3907 -> xxx.yyy.252.242:4899 SYN ******S* 43595 Aug 20 11:11:30 211.231.27.191:1931 -> xxx.yyy.1.1:4899 SYN ******S* Aug 20 11:11:29 211.231.27.191:1932 -> xxx.yyy.1.2:4899 SYN ******S* Aug 20 11:11:29 211.231.27.191:1933 -> xxx.yyy.1.3:4899 SYN ******S* Aug 20 11:11:29 211.231.27.191:1934 -> xxx.yyy.1.4:4899 SYN ******S* Aug 20 11:11:29 211.231.27.191:1936 -> xxx.yyy.1.6:4899 SYN ******S* Aug 20 11:11:29 211.231.27.191:1940 -> xxx.yyy.1.10:4899 SYN ******S* Aug 20 11:11:30 211.231.27.191:1941 -> xxx.yyy.1.11:4899 SYN ******S* Aug 20 11:11:29 211.231.27.191:1942 -> xxx.yyy.1.12:4899 SYN ******S* [...] Aug 20 11:14:45 211.231.27.191:1425 -> xxx.yyy.255.242:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1427 -> xxx.yyy.255.244:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1428 -> xxx.yyy.255.245:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1429 -> xxx.yyy.255.246:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1433 -> xxx.yyy.255.250:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1436 -> xxx.yyy.255.253:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1434 -> xxx.yyy.255.251:4899 SYN ******S* Aug 20 11:14:45 211.231.27.191:1437 -> xxx.yyy.255.254:4899 SYN ******S* 37802 Aug 20 00:57:01 210.58.18.79:3744 -> xxx.yyy.72.124:5554 SYN ******S* Aug 20 00:57:02 210.58.18.79:1171 -> xxx.yyy.72.124:1023 SYN ******S* Aug 20 00:57:04 210.58.18.79:2831 -> xxx.yyy.72.124:9898 SYN ******S* Aug 20 00:57:01 210.58.18.79:3767 -> xxx.yyy.72.125:5554 SYN ******S* Aug 20 00:57:04 210.58.18.79:2839 -> xxx.yyy.72.125:9898 SYN ******S* Aug 20 00:57:01 210.58.18.79:3809 -> xxx.yyy.72.131:5554 SYN ******S* Aug 20 00:57:02 210.58.18.79:1184 -> xxx.yyy.72.131:1023 SYN ******S* Aug 20 00:57:04 210.58.18.79:2861 -> xxx.yyy.72.131:9898 SYN ******S* [...] Aug 20 00:58:27 210.58.18.79:1324 -> xxx.yyy.92.246:9898 SYN ******S* Aug 20 00:58:25 210.58.18.79:3357 -> xxx.yyy.92.239:1023 SYN ******S* Aug 20 00:58:27 210.58.18.79:1292 -> xxx.yyy.92.239:9898 SYN ******S* Aug 20 00:58:25 210.58.18.79:3355 -> xxx.yyy.92.238:1023 SYN ******S* Aug 20 00:58:27 210.58.18.79:1288 -> xxx.yyy.92.238:9898 SYN ******S* Aug 20 00:58:25 210.58.18.79:3362 -> xxx.yyy.92.240:1023 SYN ******S* Aug 20 00:58:27 210.58.18.79:1293 -> xxx.yyy.92.240:9898 SYN ******S* Aug 20 00:58:25 210.58.18.79:3372 -> xxx.yyy.92.245:1023 SYN ******S* Aug 20 00:58:27 210.58.18.79:1314 -> xxx.yyy.92.245:9898 SYN ******S* 11278 Aug 20 00:56:42 60.21.224.13:4984 -> xxx.yyy.154.100:5554 SYN ******S* Aug 20 00:56:42 60.21.224.13:4987 -> xxx.yyy.154.101:5554 SYN ******S* Aug 20 00:56:42 60.21.224.13:4988 -> xxx.yyy.154.102:5554 SYN ******S* Aug 20 00:56:42 60.21.224.13:4989 -> xxx.yyy.154.103:5554 SYN ******S* Aug 20 00:56:42 60.21.224.13:4991 -> xxx.yyy.154.105:5554 SYN ******S* Aug 20 00:56:43 60.21.224.13:1657 -> xxx.yyy.154.105:1023 SYN ******S* Aug 20 00:56:42 60.21.224.13:4990 -> xxx.yyy.154.104:5554 SYN ******S* Aug 20 00:56:42 60.21.224.13:4995 -> xxx.yyy.154.108:5554 SYN ******S* [...] Aug 20 00:57:27 60.21.224.13:3027 -> xxx.yyy.174.210:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3030 -> xxx.yyy.174.208:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3046 -> xxx.yyy.174.217:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3048 -> xxx.yyy.174.219:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3049 -> xxx.yyy.174.220:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3047 -> xxx.yyy.174.218:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3050 -> xxx.yyy.174.221:9898 SYN ******S* Aug 20 00:57:27 60.21.224.13:3051 -> xxx.yyy.174.222:9898 SYN ******S* 11252 Aug 20 00:56:39 61.149.126.108:3383 -> xxx.yyy.195.88:5554 SYN ******S* Aug 20 00:56:40 61.149.126.108:4208 -> xxx.yyy.195.88:1023 SYN ******S* Aug 20 00:56:42 61.149.126.108:1764 -> xxx.yyy.195.88:9898 SYN ******S* Aug 20 00:56:39 61.149.126.108:3385 -> xxx.yyy.195.90:5554 SYN ******S* Aug 20 00:56:40 61.149.126.108:4118 -> xxx.yyy.195.90:1023 SYN ******S* Aug 20 00:56:42 61.149.126.108:1711 -> xxx.yyy.195.90:9898 SYN ******S* Aug 20 00:56:39 61.149.126.108:3384 -> xxx.yyy.195.89:5554 SYN ******S* Aug 20 00:56:40 61.149.126.108:4209 -> xxx.yyy.195.89:1023 SYN ******S* [...] Aug 20 00:57:24 61.149.126.108:1454 -> xxx.yyy.215.199:9898 SYN ******S* Aug 20 00:57:24 61.149.126.108:1463 -> xxx.yyy.215.201:9898 SYN ******S* Aug 20 00:57:24 61.149.126.108:1492 -> xxx.yyy.215.204:9898 SYN ******S* Aug 20 00:57:24 61.149.126.108:1499 -> xxx.yyy.215.203:9898 SYN ******S* Aug 20 00:57:24 61.149.126.108:1561 -> xxx.yyy.215.206:9898 SYN ******S* Aug 20 00:57:24 61.149.126.108:1562 -> xxx.yyy.215.207:9898 SYN ******S* Aug 20 00:57:24 61.149.126.108:1563 -> xxx.yyy.215.205:9898 SYN ******S* Aug 20 00:57:25 61.149.126.108:1577 -> xxx.yyy.215.210:9898 SYN ******S* 11138 Aug 20 00:55:51 218.24.165.68:3829 -> xxx.yyy.133.15:5554 SYN ******S* Aug 20 00:55:52 218.24.165.68:4452 -> xxx.yyy.133.15:1023 SYN ******S* Aug 20 00:55:54 218.24.165.68:1652 -> xxx.yyy.133.15:9898 SYN ******S* Aug 20 00:55:51 218.24.165.68:3832 -> xxx.yyy.133.16:5554 SYN ******S* Aug 20 00:55:52 218.24.165.68:4456 -> xxx.yyy.133.16:1023 SYN ******S* Aug 20 00:55:54 218.24.165.68:1655 -> xxx.yyy.133.16:9898 SYN ******S* Aug 20 00:55:51 218.24.165.68:3834 -> xxx.yyy.133.17:5554 SYN ******S* Aug 20 00:55:52 218.24.165.68:4458 -> xxx.yyy.133.17:1023 SYN ******S* [...] Aug 20 00:56:39 218.24.165.68:4991 -> xxx.yyy.153.129:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1028 -> xxx.yyy.153.126:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1033 -> xxx.yyy.153.130:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1038 -> xxx.yyy.153.131:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1041 -> xxx.yyy.153.133:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1068 -> xxx.yyy.153.132:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1085 -> xxx.yyy.153.134:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1090 -> xxx.yyy.153.136:9898 SYN ******S* Aug 20 00:56:39 218.24.165.68:1089 -> xxx.yyy.153.135:9898 SYN ******S* 11125 Aug 20 00:12:26 65.54.188.52:60835 -> xxx.yyy.248.180:80 SYN ******S* Aug 20 00:12:25 65.54.188.52:60996 -> xxx.yyy.241.255:80 SYN ******S* Aug 20 00:12:26 65.54.188.52:61175 -> xxx.yyy.16.8:80 SYN ******S* Aug 20 00:12:27 65.54.188.52:61287 -> xxx.yyy.1.13:80 SYN ******S* Aug 20 00:12:28 65.54.188.52:61392 -> xxx.yyy.248.4:80 SYN ******S* Aug 20 00:12:32 65.54.188.52:60835 -> xxx.yyy.248.180:80 SYN ******S* Aug 20 00:12:37 65.54.188.52:63028 -> xxx.yyy.1.60:80 SYN ******S* Aug 20 00:12:41 65.54.188.52:63521 -> xxx.yyy.241.20:80 SYN ******S* [...] Aug 20 23:20:50 65.54.188.52:22211 -> xxx.yyy.208.6:80 SYN ******S* Aug 20 23:20:49 65.54.188.52:22260 -> xxx.yyy.1.13:80 SYN ******S* Aug 20 23:20:53 65.54.188.52:22505 -> xxx.yyy.248.180:80 SYN ******S* Aug 20 23:20:54 65.54.188.52:22884 -> xxx.yyy.1.13:80 SYN ******S* Aug 20 23:20:58 65.54.188.52:23190 -> xxx.yyy.1.13:80 SYN ******S* Aug 20 23:20:59 65.54.188.52:22505 -> xxx.yyy.248.180:80 SYN ******S* Aug 20 23:21:02 65.54.188.52:23541 -> xxx.yyy.1.13:80 SYN ******S* Aug 20 23:21:09 65.54.188.52:24275 -> xxx.yyy.1.13:80 SYN ******S* Aug 20 23:21:11 65.54.188.52:24539 -> xxx.yyy.1.13:80 SYN ******S* 8533 Aug 20 00:53:32 220.188.86.126:3321 -> xxx.yyy.174.7:5554 SYN ******S* Aug 20 00:53:35 220.188.86.126:4264 -> xxx.yyy.174.7:9898 SYN ******S* Aug 20 00:53:32 220.188.86.126:3328 -> xxx.yyy.174.9:5554 SYN ******S* Aug 20 00:53:33 220.188.86.126:3666 -> xxx.yyy.174.9:1023 SYN ******S* Aug 20 00:53:35 220.188.86.126:4289 -> xxx.yyy.174.9:9898 SYN ******S* Aug 20 00:53:32 220.188.86.126:3335 -> xxx.yyy.174.14:5554 SYN ******S* Aug 20 00:53:32 220.188.86.126:3336 -> xxx.yyy.174.15:5554 SYN ******S* Aug 20 00:53:35 220.188.86.126:4314 -> xxx.yyy.174.15:9898 SYN ******S* [...] Aug 20 00:54:38 220.188.86.126:3087 -> xxx.yyy.194.108:9898 SYN ******S* Aug 20 00:54:38 220.188.86.126:3099 -> xxx.yyy.194.113:9898 SYN ******S* Aug 20 00:54:39 220.188.86.126:3120 -> xxx.yyy.194.120:9898 SYN ******S* Aug 20 00:54:39 220.188.86.126:3135 -> xxx.yyy.194.111:9898 SYN ******S* Aug 20 00:54:40 220.188.86.126:3696 -> xxx.yyy.178.46:9898 SYN ******S* Aug 20 00:54:40 220.188.86.126:3697 -> xxx.yyy.180.7:9898 SYN ******S* Aug 20 00:54:40 220.188.86.126:3698 -> xxx.yyy.180.8:9898 SYN ******S* Aug 20 00:54:40 220.188.86.126:3699 -> xxx.yyy.191.237:9898 SYN ******S* 7405 Aug 20 06:56:25 62.143.57.77:4053 -> xxx.yyy.235.112:5554 SYN ******S* Aug 20 06:56:26 62.143.57.77:4693 -> xxx.yyy.235.112:1023 SYN ******S* Aug 20 06:56:25 62.143.57.77:4054 -> xxx.yyy.235.113:5554 SYN ******S* Aug 20 06:56:26 62.143.57.77:4694 -> xxx.yyy.235.113:1023 SYN ******S* Aug 20 06:56:25 62.143.57.77:4055 -> xxx.yyy.235.114:5554 SYN ******S* Aug 20 06:56:26 62.143.57.77:4695 -> xxx.yyy.235.114:1023 SYN ******S* Aug 20 06:56:25 62.143.57.77:4056 -> xxx.yyy.235.115:5554 SYN ******S* Aug 20 06:56:25 62.143.57.77:4057 -> xxx.yyy.235.116:5554 SYN ******S* [...] Aug 20 06:57:14 62.143.57.77:1721 -> xxx.yyy.255.227:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1722 -> xxx.yyy.255.228:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1723 -> xxx.yyy.255.229:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1724 -> xxx.yyy.255.230:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1725 -> xxx.yyy.255.231:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1726 -> xxx.yyy.255.232:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1727 -> xxx.yyy.255.233:9898 SYN ******S* Aug 20 06:57:14 62.143.57.77:1728 -> xxx.yyy.255.234:9898 SYN ******S* 6912 Aug 20 00:56:53 221.203.175.189:1235 -> xxx.yyy.174.244:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1236 -> xxx.yyy.174.245:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1238 -> xxx.yyy.174.247:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1237 -> xxx.yyy.174.246:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1244 -> xxx.yyy.174.249:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1243 -> xxx.yyy.174.248:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1245 -> xxx.yyy.174.250:5554 SYN ******S* Aug 20 00:56:53 221.203.175.189:1246 -> xxx.yyy.174.251:5554 SYN ******S* [...] Aug 20 00:57:34 221.203.175.189:4616 -> xxx.yyy.195.81:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4615 -> xxx.yyy.195.80:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4617 -> xxx.yyy.195.82:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4618 -> xxx.yyy.195.83:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4627 -> xxx.yyy.195.88:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4641 -> xxx.yyy.195.85:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4629 -> xxx.yyy.195.84:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4642 -> xxx.yyy.195.86:9898 SYN ******S* Aug 20 00:57:34 221.203.175.189:4643 -> xxx.yyy.195.87:9898 SYN ******S* 6599 Aug 20 00:56:09 218.18.82.105:3033 -> xxx.yyy.133.234:5554 SYN ******S* Aug 20 00:56:12 218.18.82.105:1153 -> xxx.yyy.133.234:9898 SYN ******S* Aug 20 00:56:09 218.18.82.105:3036 -> xxx.yyy.133.236:5554 SYN ******S* Aug 20 00:56:10 218.18.82.105:3636 -> xxx.yyy.133.236:1023 SYN ******S* Aug 20 00:56:12 218.18.82.105:1164 -> xxx.yyy.133.236:9898 SYN ******S* Aug 20 00:56:09 218.18.82.105:3044 -> xxx.yyy.133.244:5554 SYN ******S* Aug 20 00:56:10 218.18.82.105:3644 -> xxx.yyy.133.244:1023 SYN ******S* Aug 20 00:56:12 218.18.82.105:1180 -> xxx.yyy.133.244:9898 SYN ******S* [...] Aug 20 00:56:54 218.18.82.105:4054 -> xxx.yyy.134.47:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4091 -> xxx.yyy.134.59:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4044 -> xxx.yyy.134.38:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4051 -> xxx.yyy.134.30:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4050 -> xxx.yyy.134.40:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4049 -> xxx.yyy.134.44:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4059 -> xxx.yyy.134.52:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4064 -> xxx.yyy.134.46:9898 SYN ******S* Aug 20 00:56:54 218.18.82.105:4089 -> xxx.yyy.134.58:9898 SYN ******S* 6493 Aug 20 09:26:19 213.254.64.110:1941 -> xxx.yyy.1.9:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1942 -> xxx.yyy.1.8:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1943 -> xxx.yyy.1.7:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1944 -> xxx.yyy.1.6:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1945 -> xxx.yyy.1.5:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1946 -> xxx.yyy.1.4:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1947 -> xxx.yyy.1.3:1433 SYN ******S* Aug 20 09:26:19 213.254.64.110:1948 -> xxx.yyy.1.2:1433 SYN ******S* [...] Aug 20 09:44:18 213.254.64.110:1305 -> xxx.yyy.20.253:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1302 -> xxx.yyy.20.252:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1299 -> xxx.yyy.20.251:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1296 -> xxx.yyy.20.250:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1293 -> xxx.yyy.20.249:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1290 -> xxx.yyy.20.248:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1287 -> xxx.yyy.20.247:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1308 -> xxx.yyy.20.254:1433 SYN ******S* Aug 20 09:44:18 213.254.64.110:1318 -> xxx.yyy.20.255:1433 SYN ******S* 6438 Aug 20 00:58:01 221.200.59.55:4033 -> xxx.yyy.64.0:5554 SYN ******S* Aug 20 00:58:02 221.200.59.55:4721 -> xxx.yyy.64.0:1023 SYN ******S* Aug 20 00:58:04 221.200.59.55:2563 -> xxx.yyy.64.0:9898 SYN ******S* Aug 20 00:58:01 221.200.59.55:4037 -> xxx.yyy.64.2:5554 SYN ******S* Aug 20 00:58:02 221.200.59.55:4741 -> xxx.yyy.64.2:1023 SYN ******S* Aug 20 00:58:04 221.200.59.55:2565 -> xxx.yyy.64.2:9898 SYN ******S* Aug 20 00:58:01 221.200.59.55:4038 -> xxx.yyy.64.3:5554 SYN ******S* Aug 20 00:58:02 221.200.59.55:4797 -> xxx.yyy.64.3:1023 SYN ******S* [...] Aug 20 00:58:46 221.200.59.55:1516 -> xxx.yyy.72.114:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:1514 -> xxx.yyy.72.115:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:1591 -> xxx.yyy.72.117:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:2199 -> xxx.yyy.72.119:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:2201 -> xxx.yyy.72.118:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:2203 -> xxx.yyy.72.121:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:2206 -> xxx.yyy.72.122:9898 SYN ******S* Aug 20 00:58:46 221.200.59.55:2207 -> xxx.yyy.72.120:9898 SYN ******S* 6219 Aug 20 23:57:02 220.89.246.173:3626 -> xxx.yyy.72.150:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3633 -> xxx.yyy.72.151:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3634 -> xxx.yyy.72.152:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3635 -> xxx.yyy.72.153:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3643 -> xxx.yyy.72.166:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3640 -> xxx.yyy.72.156:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3653 -> xxx.yyy.72.163:5554 SYN ******S* Aug 20 23:57:02 220.89.246.173:3645 -> xxx.yyy.72.168:5554 SYN ******S* [...] Aug 20 23:57:48 220.89.246.173:4387 -> xxx.yyy.92.211:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4405 -> xxx.yyy.92.207:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4447 -> xxx.yyy.92.215:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4453 -> xxx.yyy.92.218:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4467 -> xxx.yyy.92.230:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4493 -> xxx.yyy.92.237:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4494 -> xxx.yyy.92.238:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4506 -> xxx.yyy.92.244:9898 SYN ******S* Aug 20 23:57:48 220.89.246.173:4507 -> xxx.yyy.92.245:9898 SYN ******S* 6180 Aug 20 23:57:01 210.183.12.22:2709 -> xxx.yyy.236.83:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2707 -> xxx.yyy.236.85:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2721 -> xxx.yyy.236.94:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2720 -> xxx.yyy.236.93:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2722 -> xxx.yyy.236.95:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2716 -> xxx.yyy.236.76:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2737 -> xxx.yyy.236.110:5554 SYN ******S* Aug 20 23:57:01 210.183.12.22:2739 -> xxx.yyy.236.112:5554 SYN ******S* [...] Aug 20 23:58:38 210.183.12.22:1410 -> xxx.yyy.240.74:5554 SYN ******S* Aug 20 23:58:39 210.183.12.22:2466 -> xxx.yyy.240.74:1023 SYN ******S* Aug 20 23:58:41 210.183.12.22:3462 -> xxx.yyy.240.74:9898 SYN ******S* Aug 20 23:58:38 210.183.12.22:1411 -> xxx.yyy.240.75:5554 SYN ******S* Aug 20 23:58:39 210.183.12.22:2467 -> xxx.yyy.240.75:1023 SYN ******S* Aug 20 23:58:41 210.183.12.22:3463 -> xxx.yyy.240.75:9898 SYN ******S* Aug 20 23:58:38 210.183.12.22:1414 -> xxx.yyy.240.78:5554 SYN ******S* Aug 20 23:58:39 210.183.12.22:2470 -> xxx.yyy.240.78:1023 SYN ******S* Aug 20 23:58:41 210.183.12.22:3466 -> xxx.yyy.240.78:9898 SYN ******S* 6136 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions