[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 25 22:01:45 218.162.180.129:1052 -> xxx.yyy.106.34:25 SYN ******S* Sep 25 22:01:42 218.162.180.129:1053 -> xxx.yyy.106.35:25 SYN ******S* Sep 25 22:01:45 218.162.180.129:1055 -> xxx.yyy.106.37:25 SYN ******S* Sep 25 22:01:45 218.162.180.129:1056 -> xxx.yyy.106.38:25 SYN ******S* Sep 25 22:01:42 218.162.180.129:1058 -> xxx.yyy.106.40:25 SYN ******S* Sep 25 22:01:45 218.162.180.129:1059 -> xxx.yyy.106.41:25 SYN ******S* Sep 25 22:01:45 218.162.180.129:1060 -> xxx.yyy.106.42:25 SYN ******S* Sep 25 22:01:42 218.162.180.129:1061 -> xxx.yyy.106.43:25 SYN ******S* [...] Sep 25 22:40:25 218.162.180.129:3099 -> xxx.yyy.255.250:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3096 -> xxx.yyy.255.247:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3103 -> xxx.yyy.255.254:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3100 -> xxx.yyy.255.251:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3097 -> xxx.yyy.255.248:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3094 -> xxx.yyy.255.245:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3101 -> xxx.yyy.255.252:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3098 -> xxx.yyy.255.249:1080 SYN ******S* Sep 25 22:40:25 218.162.180.129:3095 -> xxx.yyy.255.246:1080 SYN ******S* 135024 Sep 25 02:42:19 82.36.19.49:3742 -> xxx.yyy.1.1:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3745 -> xxx.yyy.1.2:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3748 -> xxx.yyy.1.3:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3739 -> xxx.yyy.1.0:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3751 -> xxx.yyy.1.4:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3763 -> xxx.yyy.1.8:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3766 -> xxx.yyy.1.9:1433 SYN ******S* Sep 25 02:42:19 82.36.19.49:3769 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 25 06:30:58 82.36.19.49:3138 -> xxx.yyy.255.243:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3161 -> xxx.yyy.255.248:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3157 -> xxx.yyy.255.247:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3147 -> xxx.yyy.255.245:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3185 -> xxx.yyy.255.252:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3188 -> xxx.yyy.255.253:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3189 -> xxx.yyy.255.254:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3183 -> xxx.yyy.255.251:1433 SYN ******S* Sep 25 06:30:58 82.36.19.49:3168 -> xxx.yyy.255.250:1433 SYN ******S* 119414 Sep 25 18:30:01 64.4.171.59:27003 -> xxx.yyy.1.0:1433 SYN ******S* Sep 25 18:30:01 64.4.171.59:27004 -> xxx.yyy.1.1:1433 SYN ******S* Sep 25 18:30:04 64.4.171.59:27005 -> xxx.yyy.1.2:1433 SYN ******S* Sep 25 18:30:04 64.4.171.59:27006 -> xxx.yyy.1.3:1433 SYN ******S* Sep 25 18:30:04 64.4.171.59:27007 -> xxx.yyy.1.4:1433 SYN ******S* Sep 25 18:30:04 64.4.171.59:27008 -> xxx.yyy.1.5:1433 SYN ******S* Sep 25 18:30:04 64.4.171.59:27009 -> xxx.yyy.1.6:1433 SYN ******S* Sep 25 18:30:04 64.4.171.59:27010 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 25 22:18:42 64.4.171.59:17436 -> xxx.yyy.255.248:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17434 -> xxx.yyy.255.246:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17432 -> xxx.yyy.255.244:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17431 -> xxx.yyy.255.243:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17430 -> xxx.yyy.255.242:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17429 -> xxx.yyy.255.241:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17428 -> xxx.yyy.255.240:1433 SYN ******S* Sep 25 22:18:42 64.4.171.59:17437 -> xxx.yyy.255.249:1433 SYN ******S* 100382 [...] 96143 Sep 25 09:11:01 140.109.90.183:3998 -> xxx.yyy.1.1:4899 SYN ******S* Sep 25 09:11:01 140.109.90.183:4018 -> xxx.yyy.1.2:4899 SYN ******S* Sep 25 09:11:01 140.109.90.183:4019 -> xxx.yyy.1.3:4899 SYN ******S* Sep 25 09:11:03 140.109.90.183:4020 -> xxx.yyy.1.4:4899 SYN ******S* Sep 25 09:11:03 140.109.90.183:4021 -> xxx.yyy.1.5:4899 SYN ******S* Sep 25 09:11:03 140.109.90.183:4022 -> xxx.yyy.1.6:4899 SYN ******S* Sep 25 09:11:03 140.109.90.183:4025 -> xxx.yyy.1.7:4899 SYN ******S* Sep 25 09:11:03 140.109.90.183:4026 -> xxx.yyy.1.8:4899 SYN ******S* [...] Sep 25 09:22:08 140.109.90.183:2516 -> xxx.yyy.255.227:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2600 -> xxx.yyy.255.250:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2464 -> xxx.yyy.255.216:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2540 -> xxx.yyy.255.233:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2525 -> xxx.yyy.255.229:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2421 -> xxx.yyy.255.199:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2569 -> xxx.yyy.255.242:4899 SYN ******S* Sep 25 09:22:08 140.109.90.183:2558 -> xxx.yyy.255.237:4899 SYN ******S* 95255 Sep 25 08:20:04 213.254.10.74:3922 -> xxx.yyy.1.1:1433 SYN ******S* Sep 25 08:20:04 213.254.10.74:3923 -> xxx.yyy.1.2:1433 SYN ******S* Sep 25 08:20:04 213.254.10.74:3924 -> xxx.yyy.1.3:1433 SYN ******S* Sep 25 08:20:04 213.254.10.74:3925 -> xxx.yyy.1.4:1433 SYN ******S* Sep 25 08:20:04 213.254.10.74:3926 -> xxx.yyy.1.5:1433 SYN ******S* Sep 25 08:20:04 213.254.10.74:3928 -> xxx.yyy.1.7:1433 SYN ******S* Sep 25 08:20:01 213.254.10.74:3929 -> xxx.yyy.1.8:1433 SYN ******S* Sep 25 08:20:04 213.254.10.74:3930 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 25 08:31:03 213.254.10.74:3296 -> xxx.yyy.255.247:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3293 -> xxx.yyy.255.244:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3290 -> xxx.yyy.255.241:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3300 -> xxx.yyy.255.251:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3301 -> xxx.yyy.255.252:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3298 -> xxx.yyy.255.249:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3302 -> xxx.yyy.255.253:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3299 -> xxx.yyy.255.250:1433 SYN ******S* Sep 25 08:31:03 213.254.10.74:3303 -> xxx.yyy.255.254:1433 SYN ******S* 73728 Sep 25 13:28:43 203.254.139.21:2004 -> xxx.yyy.1.3:4899 SYN ******S* Sep 25 13:28:43 203.254.139.21:1999 -> xxx.yyy.1.1:4899 SYN ******S* Sep 25 13:28:43 203.254.139.21:2001 -> xxx.yyy.1.2:4899 SYN ******S* Sep 25 13:28:45 203.254.139.21:2008 -> xxx.yyy.1.5:4899 SYN ******S* Sep 25 13:28:45 203.254.139.21:2006 -> xxx.yyy.1.4:4899 SYN ******S* Sep 25 13:28:45 203.254.139.21:2010 -> xxx.yyy.1.6:4899 SYN ******S* Sep 25 13:28:45 203.254.139.21:2016 -> xxx.yyy.1.9:4899 SYN ******S* Sep 25 13:28:45 203.254.139.21:2018 -> xxx.yyy.1.10:4899 SYN ******S* [...] Sep 25 14:13:10 203.254.139.21:4195 -> xxx.yyy.255.236:4899 SYN ******S* Sep 25 14:13:10 203.254.139.21:4207 -> xxx.yyy.255.240:4899 SYN ******S* Sep 25 14:13:10 203.254.139.21:4201 -> xxx.yyy.255.238:4899 SYN ******S* Sep 25 14:13:10 203.254.139.21:4198 -> xxx.yyy.255.237:4899 SYN ******S* Sep 25 14:13:11 203.254.139.21:4221 -> xxx.yyy.255.244:4899 SYN ******S* Sep 25 14:13:11 203.254.139.21:4219 -> xxx.yyy.255.243:4899 SYN ******S* Sep 25 14:13:11 203.254.139.21:4233 -> xxx.yyy.255.248:4899 SYN ******S* Sep 25 14:13:11 203.254.139.21:4236 -> xxx.yyy.255.249:4899 SYN ******S* 67596 Sep 25 01:27:21 12.43.97.155:2938 -> xxx.yyy.1.1:4000 SYN ******S* Sep 25 01:27:21 12.43.97.155:2937 -> xxx.yyy.1.0:4000 SYN ******S* Sep 25 01:27:21 12.43.97.155:2939 -> xxx.yyy.1.2:4000 SYN ******S* Sep 25 01:27:21 12.43.97.155:2940 -> xxx.yyy.1.3:4000 SYN ******S* Sep 25 01:27:23 12.43.97.155:2942 -> xxx.yyy.1.5:4000 SYN ******S* Sep 25 01:27:23 12.43.97.155:2941 -> xxx.yyy.1.4:4000 SYN ******S* Sep 25 01:27:23 12.43.97.155:2943 -> xxx.yyy.1.6:4000 SYN ******S* Sep 25 01:27:23 12.43.97.155:2944 -> xxx.yyy.1.7:4000 SYN ******S* [...] Sep 25 01:36:43 12.43.97.155:1205 -> xxx.yyy.255.218:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1209 -> xxx.yyy.255.222:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1210 -> xxx.yyy.255.223:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1211 -> xxx.yyy.255.224:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1234 -> xxx.yyy.255.247:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1236 -> xxx.yyy.255.249:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1238 -> xxx.yyy.255.251:4000 SYN ******S* Sep 25 01:36:43 12.43.97.155:1232 -> xxx.yyy.255.245:4000 SYN ******S* 64019 Sep 25 15:33:53 136.234.37.182:2968 -> xxx.yyy.1.1:1433 SYN ******S* Sep 25 15:33:53 136.234.37.182:2969 -> xxx.yyy.1.2:1433 SYN ******S* Sep 25 15:33:56 136.234.37.182:2970 -> xxx.yyy.1.3:1433 SYN ******S* Sep 25 15:33:56 136.234.37.182:2971 -> xxx.yyy.1.4:1433 SYN ******S* Sep 25 15:33:56 136.234.37.182:2972 -> xxx.yyy.1.5:1433 SYN ******S* Sep 25 15:33:53 136.234.37.182:2973 -> xxx.yyy.1.6:1433 SYN ******S* Sep 25 15:33:56 136.234.37.182:2975 -> xxx.yyy.1.8:1433 SYN ******S* Sep 25 15:33:53 136.234.37.182:2977 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 25 15:45:42 136.234.37.182:4628 -> xxx.yyy.255.250:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4624 -> xxx.yyy.255.246:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4629 -> xxx.yyy.255.251:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4625 -> xxx.yyy.255.247:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4622 -> xxx.yyy.255.244:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4626 -> xxx.yyy.255.248:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4632 -> xxx.yyy.255.254:1433 SYN ******S* Sep 25 15:45:42 136.234.37.182:4631 -> xxx.yyy.255.253:1433 SYN ******S* 62091 Sep 25 21:29:44 218.162.179.240:2052 -> xxx.yyy.1.0:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2054 -> xxx.yyy.1.1:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2055 -> xxx.yyy.1.2:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2058 -> xxx.yyy.1.3:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2060 -> xxx.yyy.1.5:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2062 -> xxx.yyy.1.6:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2063 -> xxx.yyy.1.7:25 SYN ******S* Sep 25 21:29:44 218.162.179.240:2069 -> xxx.yyy.1.8:25 SYN ******S* [...] Sep 25 21:57:19 218.162.179.240:1574 -> xxx.yyy.107.196:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1572 -> xxx.yyy.107.193:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1569 -> xxx.yyy.107.192:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1580 -> xxx.yyy.107.202:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1578 -> xxx.yyy.107.199:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1584 -> xxx.yyy.107.206:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1582 -> xxx.yyy.107.203:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1581 -> xxx.yyy.107.204:1080 SYN ******S* Sep 25 21:57:19 218.162.179.240:1583 -> xxx.yyy.107.205:1080 SYN ******S* 49494 Sep 25 17:23:53 213.180.210.35:33250 -> xxx.yyy.137.163:1080 SYN ******S* Sep 25 17:23:53 213.180.210.35:31882 -> xxx.yyy.137.163:1075 SYN ******S* Sep 25 17:23:53 213.180.210.35:57677 -> xxx.yyy.137.163:81 SYN ******S* Sep 25 17:23:53 213.180.210.35:32242 -> xxx.yyy.137.163:80 SYN ******S* Sep 25 17:23:53 213.180.210.35:33708 -> xxx.yyy.137.163:3128 SYN ******S* Sep 25 17:23:53 213.180.210.35:49055 -> xxx.yyy.137.163:4480 SYN ******S* Sep 25 17:23:53 213.180.210.35:44103 -> xxx.yyy.137.163:6588 SYN ******S* Sep 25 17:23:53 213.180.210.35:54860 -> xxx.yyy.137.163:8000 SYN ******S* [...] Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:13782 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:6000 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:6056 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:6021 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:6014 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:12346 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:6028 SYN ******S* Sep 25 18:52:57 213.180.210.35:53585 -> xxx.yyy.137.163:6052 SYN ******S* 35907 Sep 25 00:00:04 80.8.151.12:3151 -> xxx.yyy.206.94:1433 SYN ******S* Sep 25 00:00:04 80.8.151.12:3140 -> xxx.yyy.206.93:1433 SYN ******S* Sep 25 00:00:04 80.8.151.12:4848 -> xxx.yyy.206.119:1433 SYN ******S* Sep 25 00:00:04 80.8.151.12:3265 -> xxx.yyy.206.95:1433 SYN ******S* Sep 25 00:00:04 80.8.151.12:4211 -> xxx.yyy.206.143:1433 SYN ******S* Sep 25 00:00:04 80.8.151.12:4868 -> xxx.yyy.206.120:1433 SYN ******S* Sep 25 00:00:04 80.8.151.12:4928 -> xxx.yyy.206.122:1433 SYN ******S* Sep 25 00:00:07 80.8.151.12:4272 -> xxx.yyy.206.144:1433 SYN ******S* [...] Sep 25 00:44:31 80.8.151.12:4807 -> xxx.yyy.255.244:1433 SYN ******S* Sep 25 00:44:31 80.8.151.12:3848 -> xxx.yyy.255.245:1433 SYN ******S* Sep 25 00:44:31 80.8.151.12:3853 -> xxx.yyy.255.246:1433 SYN ******S* Sep 25 00:44:31 80.8.151.12:3940 -> xxx.yyy.255.247:1433 SYN ******S* Sep 25 00:44:31 80.8.151.12:3948 -> xxx.yyy.255.248:1433 SYN ******S* Sep 25 00:44:32 80.8.151.12:4061 -> xxx.yyy.255.250:1433 SYN ******S* Sep 25 00:44:32 80.8.151.12:4321 -> xxx.yyy.255.252:1433 SYN ******S* Sep 25 00:44:32 80.8.151.12:3410 -> xxx.yyy.255.253:1433 SYN ******S* Sep 25 00:44:32 80.8.151.12:4665 -> xxx.yyy.255.254:1433 SYN ******S* 29169 [...] 25400 Sep 25 18:09:37 80.131.247.186:64653 -> xxx.yyy.1.5:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:64753 -> xxx.yyy.1.6:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:64515 -> xxx.yyy.1.7:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:64785 -> xxx.yyy.1.8:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:63841 -> xxx.yyy.1.9:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:63499 -> xxx.yyy.1.11:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:64227 -> xxx.yyy.1.16:1433 SYN ******S* Sep 25 18:09:37 80.131.247.186:65327 -> xxx.yyy.1.17:1433 SYN ******S* [...] Sep 25 18:11:49 80.131.247.186:64753 -> xxx.yyy.255.236:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:64515 -> xxx.yyy.255.237:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:64785 -> xxx.yyy.255.238:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:64697 -> xxx.yyy.255.240:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:64581 -> xxx.yyy.255.245:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:64227 -> xxx.yyy.255.246:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:65327 -> xxx.yyy.255.247:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:65423 -> xxx.yyy.255.248:1433 SYN ******S* Sep 25 18:11:49 80.131.247.186:64755 -> xxx.yyy.255.249:1433 SYN ******S* 21212 [...] 17621 [...] 16829 [...] 16797 Sep 25 00:02:30 65.54.188.52:48476 -> xxx.yyy.1.13:80 SYN ******S* Sep 25 00:02:29 65.54.188.52:48043 -> xxx.yyy.241.179:80 SYN ******S* Sep 25 00:02:30 65.54.188.52:48481 -> xxx.yyy.241.255:80 SYN ******S* Sep 25 00:02:27 65.54.188.52:47309 -> xxx.yyy.236.21:80 SYN ******S* Sep 25 00:02:28 65.54.188.52:47414 -> xxx.yyy.14.23:80 SYN ******S* Sep 25 00:02:28 65.54.188.52:47451 -> xxx.yyy.208.6:80 SYN ******S* Sep 25 00:02:34 65.54.188.52:49879 -> xxx.yyy.241.179:80 SYN ******S* Sep 25 00:02:34 65.54.188.52:49751 -> xxx.yyy.1.13:80 SYN ******S* [...] Sep 25 23:59:28 65.54.188.52:2126 -> xxx.yyy.241.179:80 SYN ******S* Sep 25 23:59:30 65.54.188.52:2751 -> xxx.yyy.1.60:80 SYN ******S* Sep 25 23:59:30 65.54.188.52:2984 -> xxx.yyy.234.52:80 SYN ******S* Sep 25 23:59:31 65.54.188.52:3025 -> xxx.yyy.248.4:80 SYN ******S* Sep 25 23:59:31 65.54.188.52:3050 -> xxx.yyy.243.44:80 SYN ******S* Sep 25 23:59:31 65.54.188.52:3133 -> xxx.yyy.212.103:80 SYN ******S* Sep 25 23:59:32 65.54.188.52:3492 -> xxx.yyy.241.179:80 SYN ******S* Sep 25 23:59:33 65.54.188.52:3820 -> xxx.yyy.1.13:80 SYN ******S* Sep 25 23:59:34 65.54.188.52:3841 -> xxx.yyy.236.22:80 SYN ******S* 14846 Sep 25 00:56:58 202.60.235.91:1677 -> xxx.yyy.215.212:5554 SYN ******S* Sep 25 00:56:59 202.60.235.91:3085 -> xxx.yyy.215.212:1023 SYN ******S* Sep 25 00:57:01 202.60.235.91:1697 -> xxx.yyy.215.212:9898 SYN ******S* Sep 25 00:56:58 202.60.235.91:1694 -> xxx.yyy.215.215:5554 SYN ******S* Sep 25 00:56:58 202.60.235.91:1667 -> xxx.yyy.215.211:5554 SYN ******S* Sep 25 00:56:59 202.60.235.91:3106 -> xxx.yyy.215.211:1023 SYN ******S* Sep 25 00:57:01 202.60.235.91:1695 -> xxx.yyy.215.211:9898 SYN ******S* Sep 25 00:56:58 202.60.235.91:1701 -> xxx.yyy.215.216:5554 SYN ******S* [...] Sep 25 00:58:38 202.60.235.91:2224 -> xxx.yyy.236.68:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2267 -> xxx.yyy.236.63:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2249 -> xxx.yyy.236.71:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2274 -> xxx.yyy.236.64:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2279 -> xxx.yyy.236.65:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2327 -> xxx.yyy.236.67:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2305 -> xxx.yyy.236.66:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2336 -> xxx.yyy.236.75:9898 SYN ******S* Sep 25 00:58:38 202.60.235.91:2338 -> xxx.yyy.236.76:9898 SYN ******S* 11084 Sep 25 00:55:28 61.50.184.136:2409 -> xxx.yyy.194.124:5554 SYN ******S* Sep 25 00:55:30 61.50.184.136:3267 -> xxx.yyy.194.124:1023 SYN ******S* Sep 25 00:55:28 61.50.184.136:2410 -> xxx.yyy.194.125:5554 SYN ******S* Sep 25 00:55:30 61.50.184.136:3268 -> xxx.yyy.194.125:1023 SYN ******S* Sep 25 00:55:28 61.50.184.136:2411 -> xxx.yyy.194.126:5554 SYN ******S* Sep 25 00:55:30 61.50.184.136:3269 -> xxx.yyy.194.126:1023 SYN ******S* Sep 25 00:55:28 61.50.184.136:2413 -> xxx.yyy.194.127:5554 SYN ******S* Sep 25 00:55:30 61.50.184.136:3272 -> xxx.yyy.194.127:1023 SYN ******S* [...] Sep 25 00:56:22 61.50.184.136:2853 -> xxx.yyy.214.215:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2854 -> xxx.yyy.214.216:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2918 -> xxx.yyy.214.223:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2926 -> xxx.yyy.214.224:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2944 -> xxx.yyy.214.231:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2945 -> xxx.yyy.214.232:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2947 -> xxx.yyy.214.233:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2950 -> xxx.yyy.214.237:9898 SYN ******S* Sep 25 00:56:22 61.50.184.136:2949 -> xxx.yyy.214.236:9898 SYN ******S* 10807 Sep 25 23:55:27 221.158.64.221:2270 -> xxx.yyy.235.114:5554 SYN ******S* Sep 25 23:55:30 221.158.64.221:3597 -> xxx.yyy.235.114:9898 SYN ******S* Sep 25 23:55:27 221.158.64.221:2271 -> xxx.yyy.235.117:5554 SYN ******S* Sep 25 23:55:28 221.158.64.221:2701 -> xxx.yyy.235.117:1023 SYN ******S* Sep 25 23:55:27 221.158.64.221:2273 -> xxx.yyy.235.119:5554 SYN ******S* Sep 25 23:55:28 221.158.64.221:2703 -> xxx.yyy.235.119:1023 SYN ******S* Sep 25 23:55:30 221.158.64.221:3606 -> xxx.yyy.235.119:9898 SYN ******S* Sep 25 23:55:27 221.158.64.221:2274 -> xxx.yyy.235.120:5554 SYN ******S* [...] Sep 25 23:56:19 221.158.64.221:2821 -> xxx.yyy.235.200:9898 SYN ******S* Sep 25 23:56:19 221.158.64.221:2822 -> xxx.yyy.235.205:9898 SYN ******S* Sep 25 23:56:19 221.158.64.221:2823 -> xxx.yyy.235.206:9898 SYN ******S* Sep 25 23:56:19 221.158.64.221:2813 -> xxx.yyy.235.202:9898 SYN ******S* Sep 25 23:56:19 221.158.64.221:2820 -> xxx.yyy.235.210:9898 SYN ******S* Sep 25 23:56:19 221.158.64.221:2830 -> xxx.yyy.235.198:9898 SYN ******S* Sep 25 23:56:20 221.158.64.221:2944 -> xxx.yyy.235.231:9898 SYN ******S* Sep 25 23:56:20 221.158.64.221:2946 -> xxx.yyy.235.233:9898 SYN ******S* 9043 [...] 9026 Sep 25 23:55:26 218.154.11.137:2465 -> xxx.yyy.153.141:5554 SYN ******S* Sep 25 23:55:27 218.154.11.137:2963 -> xxx.yyy.153.141:1023 SYN ******S* Sep 25 23:55:26 218.154.11.137:2453 -> xxx.yyy.153.137:5554 SYN ******S* Sep 25 23:55:27 218.154.11.137:2958 -> xxx.yyy.153.137:1023 SYN ******S* Sep 25 23:55:26 218.154.11.137:2454 -> xxx.yyy.153.138:5554 SYN ******S* Sep 25 23:55:27 218.154.11.137:2959 -> xxx.yyy.153.138:1023 SYN ******S* Sep 25 23:55:26 218.154.11.137:2467 -> xxx.yyy.153.142:5554 SYN ******S* Sep 25 23:55:27 218.154.11.137:2965 -> xxx.yyy.153.142:1023 SYN ******S* [...] Sep 25 23:56:11 218.154.11.137:3447 -> xxx.yyy.173.233:9898 SYN ******S* Sep 25 23:56:11 218.154.11.137:3458 -> xxx.yyy.173.238:9898 SYN ******S* Sep 25 23:56:11 218.154.11.137:3460 -> xxx.yyy.173.240:9898 SYN ******S* Sep 25 23:56:11 218.154.11.137:3485 -> xxx.yyy.173.249:9898 SYN ******S* Sep 25 23:56:11 218.154.11.137:3489 -> xxx.yyy.173.251:9898 SYN ******S* Sep 25 23:56:12 218.154.11.137:3596 -> xxx.yyy.173.253:9898 SYN ******S* Sep 25 23:56:12 218.154.11.137:3600 -> xxx.yyy.173.254:9898 SYN ******S* Sep 25 23:56:12 218.154.11.137:3605 -> xxx.yyy.174.2:9898 SYN ******S* 8990 Sep 25 00:56:46 221.202.142.51:4677 -> xxx.yyy.72.124:5554 SYN ******S* Sep 25 00:56:47 221.202.142.51:2494 -> xxx.yyy.72.124:1023 SYN ******S* Sep 25 00:56:49 221.202.142.51:2539 -> xxx.yyy.72.124:9898 SYN ******S* Sep 25 00:56:46 221.202.142.51:4684 -> xxx.yyy.72.126:5554 SYN ******S* Sep 25 00:56:47 221.202.142.51:2502 -> xxx.yyy.72.126:1023 SYN ******S* Sep 25 00:56:49 221.202.142.51:2544 -> xxx.yyy.72.126:9898 SYN ******S* Sep 25 00:56:46 221.202.142.51:4682 -> xxx.yyy.72.125:5554 SYN ******S* Sep 25 00:56:49 221.202.142.51:2542 -> xxx.yyy.72.125:9898 SYN ******S* [...] Sep 25 00:57:59 221.202.142.51:1977 -> xxx.yyy.74.42:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:1966 -> xxx.yyy.74.36:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:1986 -> xxx.yyy.74.44:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:1973 -> xxx.yyy.74.38:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:1995 -> xxx.yyy.74.46:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:2000 -> xxx.yyy.74.48:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:2004 -> xxx.yyy.74.54:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:2022 -> xxx.yyy.74.58:9898 SYN ******S* Sep 25 00:57:59 221.202.142.51:2011 -> xxx.yyy.74.56:9898 SYN ******S* 8771 Sep 25 00:56:57 61.51.164.115:3085 -> xxx.yyy.236.76:5554 SYN ******S* Sep 25 00:56:57 61.51.164.115:3086 -> xxx.yyy.236.77:5554 SYN ******S* Sep 25 00:56:57 61.51.164.115:3087 -> xxx.yyy.236.78:5554 SYN ******S* Sep 25 00:56:57 61.51.164.115:3088 -> xxx.yyy.236.79:5554 SYN ******S* Sep 25 00:56:57 61.51.164.115:3115 -> xxx.yyy.236.107:5554 SYN ******S* Sep 25 00:56:58 61.51.164.115:3601 -> xxx.yyy.236.107:1023 SYN ******S* Sep 25 00:56:57 61.51.164.115:3095 -> xxx.yyy.236.86:5554 SYN ******S* Sep 25 00:56:58 61.51.164.115:3585 -> xxx.yyy.236.86:1023 SYN ******S* [...] Sep 25 00:57:46 61.51.164.115:2902 -> xxx.yyy.255.245:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2903 -> xxx.yyy.255.246:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2909 -> xxx.yyy.255.254:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2913 -> xxx.yyy.255.241:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2915 -> xxx.yyy.255.243:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2920 -> xxx.yyy.255.247:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2922 -> xxx.yyy.255.252:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2921 -> xxx.yyy.255.250:9898 SYN ******S* Sep 25 00:57:46 61.51.164.115:2944 -> xxx.yyy.255.251:9898 SYN ******S* 8496 Sep 25 00:56:31 221.200.4.111:4420 -> xxx.yyy.154.102:5554 SYN ******S* Sep 25 00:56:32 221.200.4.111:1232 -> xxx.yyy.154.102:1023 SYN ******S* Sep 25 00:56:34 221.200.4.111:2459 -> xxx.yyy.154.102:9898 SYN ******S* Sep 25 00:56:31 221.200.4.111:4560 -> xxx.yyy.154.137:5554 SYN ******S* Sep 25 00:56:31 221.200.4.111:4562 -> xxx.yyy.154.139:5554 SYN ******S* Sep 25 00:56:34 221.200.4.111:2566 -> xxx.yyy.154.139:9898 SYN ******S* Sep 25 00:56:31 221.200.4.111:4565 -> xxx.yyy.154.140:5554 SYN ******S* Sep 25 00:56:32 221.200.4.111:1294 -> xxx.yyy.154.140:1023 SYN ******S* [...] Sep 25 00:57:28 221.200.4.111:1771 -> xxx.yyy.174.159:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1776 -> xxx.yyy.174.160:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1794 -> xxx.yyy.174.171:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1802 -> xxx.yyy.174.165:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1803 -> xxx.yyy.174.162:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1808 -> xxx.yyy.174.168:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1810 -> xxx.yyy.174.166:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1809 -> xxx.yyy.174.170:9898 SYN ******S* Sep 25 00:57:28 221.200.4.111:1811 -> xxx.yyy.174.167:9898 SYN ******S* 8197 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions