[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 27 02:46:40 82.226.144.111:4297 -> xxx.yyy.1.0:1433 SYN ******S* Sep 27 02:46:40 82.226.144.111:4298 -> xxx.yyy.1.1:1433 SYN ******S* Sep 27 02:46:40 82.226.144.111:4299 -> xxx.yyy.1.2:1433 SYN ******S* Sep 27 02:46:40 82.226.144.111:4300 -> xxx.yyy.1.3:1433 SYN ******S* Sep 27 02:46:40 82.226.144.111:4302 -> xxx.yyy.1.5:1433 SYN ******S* Sep 27 02:46:40 82.226.144.111:4303 -> xxx.yyy.1.6:1433 SYN ******S* Sep 27 02:46:37 82.226.144.111:4304 -> xxx.yyy.1.7:1433 SYN ******S* Sep 27 02:46:37 82.226.144.111:4305 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 27 06:35:25 82.226.144.111:2634 -> xxx.yyy.255.247:1433 SYN ******S* Sep 27 06:35:25 82.226.144.111:2637 -> xxx.yyy.255.248:1433 SYN ******S* Sep 27 06:35:25 82.226.144.111:2639 -> xxx.yyy.255.249:1433 SYN ******S* Sep 27 06:35:25 82.226.144.111:2641 -> xxx.yyy.255.250:1433 SYN ******S* Sep 27 06:35:26 82.226.144.111:2648 -> xxx.yyy.255.251:1433 SYN ******S* Sep 27 06:35:26 82.226.144.111:2649 -> xxx.yyy.255.252:1433 SYN ******S* Sep 27 06:35:26 82.226.144.111:2652 -> xxx.yyy.255.254:1433 SYN ******S* Sep 27 06:35:26 82.226.144.111:2651 -> xxx.yyy.255.253:1433 SYN ******S* 120719 Sep 27 07:00:50 221.12.114.148:4063 -> xxx.yyy.29.96:1433 SYN ******S* Sep 27 07:00:50 221.12.114.148:4067 -> xxx.yyy.29.97:1433 SYN ******S* Sep 27 07:00:50 221.12.114.148:4070 -> xxx.yyy.29.98:1433 SYN ******S* Sep 27 07:00:50 221.12.114.148:4073 -> xxx.yyy.29.99:1433 SYN ******S* Sep 27 07:00:50 221.12.114.148:4077 -> xxx.yyy.29.100:1433 SYN ******S* Sep 27 07:00:51 221.12.114.148:4084 -> xxx.yyy.29.102:1433 SYN ******S* Sep 27 07:00:51 221.12.114.148:4082 -> xxx.yyy.29.101:1433 SYN ******S* Sep 27 07:00:51 221.12.114.148:4087 -> xxx.yyy.29.103:1433 SYN ******S* [...] Sep 27 10:16:37 221.12.114.148:1795 -> xxx.yyy.247.198:1433 SYN ******S* Sep 27 10:16:37 221.12.114.148:1435 -> xxx.yyy.247.138:1433 SYN ******S* Sep 27 10:16:37 221.12.114.148:1440 -> xxx.yyy.247.140:1433 SYN ******S* Sep 27 10:16:37 221.12.114.148:1438 -> xxx.yyy.247.139:1433 SYN ******S* Sep 27 10:16:37 221.12.114.148:1817 -> xxx.yyy.247.200:1433 SYN ******S* Sep 27 10:16:37 221.12.114.148:1449 -> xxx.yyy.247.142:1433 SYN ******S* Sep 27 10:16:38 221.12.114.148:1457 -> xxx.yyy.247.145:1433 SYN ******S* Sep 27 10:16:38 221.12.114.148:1467 -> xxx.yyy.247.146:1433 SYN ******S* 83051 Sep 27 06:03:12 82.120.176.212:3148 -> xxx.yyy.10.0:1433 SYN ******S* Sep 27 06:03:12 82.120.176.212:3150 -> xxx.yyy.10.1:1433 SYN ******S* Sep 27 06:03:12 82.120.176.212:3152 -> xxx.yyy.10.2:1433 SYN ******S* Sep 27 06:03:12 82.120.176.212:3155 -> xxx.yyy.10.3:1433 SYN ******S* Sep 27 06:03:13 82.120.176.212:3156 -> xxx.yyy.10.4:1433 SYN ******S* Sep 27 06:03:13 82.120.176.212:3160 -> xxx.yyy.10.6:1433 SYN ******S* Sep 27 06:03:13 82.120.176.212:3164 -> xxx.yyy.10.8:1433 SYN ******S* Sep 27 06:03:10 82.120.176.212:3166 -> xxx.yyy.10.9:1433 SYN ******S* [...] Sep 27 15:11:39 82.120.176.212:1969 -> xxx.yyy.254.207:1433 SYN ******S* Sep 27 15:11:39 82.120.176.212:1972 -> xxx.yyy.254.208:1433 SYN ******S* Sep 27 15:11:39 82.120.176.212:1977 -> xxx.yyy.254.209:1433 SYN ******S* Sep 27 15:11:41 82.120.176.212:1959 -> xxx.yyy.254.203:1433 SYN ******S* Sep 27 15:11:41 82.120.176.212:1996 -> xxx.yyy.254.215:1433 SYN ******S* Sep 27 15:11:41 82.120.176.212:1961 -> xxx.yyy.254.204:1433 SYN ******S* Sep 27 15:11:41 82.120.176.212:1963 -> xxx.yyy.254.205:1433 SYN ******S* Sep 27 15:11:41 82.120.176.212:1999 -> xxx.yyy.254.216:1433 SYN ******S* 78725 Sep 27 12:11:30 141.153.188.220:3049 -> xxx.yyy.1.0:1433 SYN ******S* Sep 27 12:11:33 141.153.188.220:3050 -> xxx.yyy.1.1:1433 SYN ******S* Sep 27 12:11:30 141.153.188.220:3052 -> xxx.yyy.1.2:1433 SYN ******S* Sep 27 12:11:33 141.153.188.220:3054 -> xxx.yyy.1.3:1433 SYN ******S* Sep 27 12:11:33 141.153.188.220:3055 -> xxx.yyy.1.4:1433 SYN ******S* Sep 27 12:11:33 141.153.188.220:3056 -> xxx.yyy.1.5:1433 SYN ******S* Sep 27 12:11:33 141.153.188.220:3057 -> xxx.yyy.1.6:1433 SYN ******S* Sep 27 12:11:30 141.153.188.220:3058 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 27 16:00:16 141.153.188.220:2110 -> xxx.yyy.255.241:1433 SYN ******S* Sep 27 16:00:16 141.153.188.220:2119 -> xxx.yyy.255.244:1433 SYN ******S* Sep 27 16:00:16 141.153.188.220:2122 -> xxx.yyy.255.245:1433 SYN ******S* Sep 27 16:00:17 141.153.188.220:2129 -> xxx.yyy.255.247:1433 SYN ******S* Sep 27 16:00:17 141.153.188.220:2132 -> xxx.yyy.255.250:1433 SYN ******S* Sep 27 16:00:17 141.153.188.220:2131 -> xxx.yyy.255.249:1433 SYN ******S* Sep 27 16:00:17 141.153.188.220:2130 -> xxx.yyy.255.248:1433 SYN ******S* Sep 27 16:00:17 141.153.188.220:2155 -> xxx.yyy.255.253:1433 SYN ******S* Sep 27 16:00:18 141.153.188.220:2158 -> xxx.yyy.255.254:1433 SYN ******S* 64546 Sep 27 04:41:20 62.110.249.178:2758 -> xxx.yyy.1.1:1433 SYN ******S* Sep 27 04:41:23 62.110.249.178:2761 -> xxx.yyy.1.4:1433 SYN ******S* Sep 27 04:41:20 62.110.249.178:2759 -> xxx.yyy.1.2:1433 SYN ******S* Sep 27 04:41:20 62.110.249.178:2760 -> xxx.yyy.1.3:1433 SYN ******S* Sep 27 04:41:23 62.110.249.178:2762 -> xxx.yyy.1.5:1433 SYN ******S* Sep 27 04:41:23 62.110.249.178:2765 -> xxx.yyy.1.8:1433 SYN ******S* Sep 27 04:41:20 62.110.249.178:2764 -> xxx.yyy.1.7:1433 SYN ******S* Sep 27 04:41:23 62.110.249.178:2763 -> xxx.yyy.1.6:1433 SYN ******S* [...] Sep 27 04:50:28 62.110.249.178:1047 -> xxx.yyy.255.213:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:1069 -> xxx.yyy.255.235:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:1057 -> xxx.yyy.255.223:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:1067 -> xxx.yyy.255.233:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:1059 -> xxx.yyy.255.225:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:1056 -> xxx.yyy.255.222:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:4997 -> xxx.yyy.255.192:1433 SYN ******S* Sep 27 04:50:28 62.110.249.178:1055 -> xxx.yyy.255.221:1433 SYN ******S* 64382 Sep 27 11:46:47 195.55.130.62:39929 -> xxx.yyy.1.0:111 SYN ******S* Sep 27 11:46:50 195.55.130.62:39930 -> xxx.yyy.1.1:111 SYN ******S* Sep 27 11:46:50 195.55.130.62:39931 -> xxx.yyy.1.2:111 SYN ******S* Sep 27 11:46:50 195.55.130.62:39933 -> xxx.yyy.1.4:111 SYN ******S* Sep 27 11:46:50 195.55.130.62:39934 -> xxx.yyy.1.5:111 SYN ******S* Sep 27 11:46:47 195.55.130.62:39935 -> xxx.yyy.1.6:111 SYN ******S* Sep 27 11:46:50 195.55.130.62:39936 -> xxx.yyy.1.7:111 SYN ******S* Sep 27 11:46:50 195.55.130.62:39937 -> xxx.yyy.1.8:111 SYN ******S* [...] Sep 27 12:04:26 195.55.130.62:39782 -> xxx.yyy.255.243:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39798 -> xxx.yyy.255.242:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39794 -> xxx.yyy.255.251:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39795 -> xxx.yyy.255.250:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39797 -> xxx.yyy.255.245:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39796 -> xxx.yyy.255.247:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39791 -> xxx.yyy.255.253:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39793 -> xxx.yyy.255.249:111 SYN ******S* Sep 27 12:04:26 195.55.130.62:39792 -> xxx.yyy.255.252:111 SYN ******S* 52147 Sep 27 06:54:15 194.208.133.150:3717 -> xxx.yyy.1.1:80 SYN ******S* Sep 27 06:54:15 194.208.133.150:3718 -> xxx.yyy.1.2:80 SYN ******S* Sep 27 06:54:16 194.208.133.150:3720 -> xxx.yyy.1.4:80 SYN ******S* Sep 27 06:54:16 194.208.133.150:3721 -> xxx.yyy.1.5:80 SYN ******S* Sep 27 06:54:16 194.208.133.150:3725 -> xxx.yyy.1.9:80 SYN ******S* Sep 27 06:54:16 194.208.133.150:3728 -> xxx.yyy.1.12:80 SYN ******S* Sep 27 06:54:13 194.208.133.150:3729 -> xxx.yyy.1.13:80 SYN ******S* Sep 27 06:54:13 194.208.133.150:3730 -> xxx.yyy.1.14:80 SYN ******S* [...] Sep 27 07:02:23 194.208.133.150:4231 -> xxx.yyy.255.235:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4228 -> xxx.yyy.255.232:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4225 -> xxx.yyy.255.229:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4219 -> xxx.yyy.255.223:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4235 -> xxx.yyy.255.239:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4216 -> xxx.yyy.255.220:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4232 -> xxx.yyy.255.236:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4244 -> xxx.yyy.255.248:80 SYN ******S* Sep 27 07:02:23 194.208.133.150:4248 -> xxx.yyy.255.252:80 SYN ******S* 52081 [...] 44081 Sep 27 16:56:08 68.21.194.93:2784 -> xxx.yyy.1.1:1433 SYN ******S* Sep 27 16:56:11 68.21.194.93:2787 -> xxx.yyy.1.2:1433 SYN ******S* Sep 27 16:56:08 68.21.194.93:2791 -> xxx.yyy.1.4:1433 SYN ******S* Sep 27 16:56:11 68.21.194.93:2793 -> xxx.yyy.1.5:1433 SYN ******S* Sep 27 16:56:08 68.21.194.93:2795 -> xxx.yyy.1.6:1433 SYN ******S* Sep 27 16:56:11 68.21.194.93:2797 -> xxx.yyy.1.7:1433 SYN ******S* Sep 27 16:56:08 68.21.194.93:2799 -> xxx.yyy.1.8:1433 SYN ******S* Sep 27 16:56:11 68.21.194.93:2805 -> xxx.yyy.1.11:1433 SYN ******S* [...] Sep 27 17:10:14 68.21.194.93:2636 -> xxx.yyy.255.231:1433 SYN ******S* Sep 27 17:10:14 68.21.194.93:2638 -> xxx.yyy.255.232:1433 SYN ******S* Sep 27 17:10:15 68.21.194.93:2652 -> xxx.yyy.255.238:1433 SYN ******S* Sep 27 17:10:15 68.21.194.93:2654 -> xxx.yyy.255.239:1433 SYN ******S* Sep 27 17:10:15 68.21.194.93:2656 -> xxx.yyy.255.240:1433 SYN ******S* Sep 27 17:10:15 68.21.194.93:2666 -> xxx.yyy.255.245:1433 SYN ******S* Sep 27 17:10:15 68.21.194.93:2674 -> xxx.yyy.255.249:1433 SYN ******S* Sep 27 17:10:15 68.21.194.93:2680 -> xxx.yyy.255.252:1433 SYN ******S* 43873 Sep 27 21:04:33 24.205.116.79:4252 -> xxx.yyy.1.1:4000 SYN ******S* Sep 27 21:04:32 24.205.116.79:4253 -> xxx.yyy.1.2:4000 SYN ******S* Sep 27 21:04:32 24.205.116.79:4254 -> xxx.yyy.1.3:4000 SYN ******S* Sep 27 21:04:32 24.205.116.79:4256 -> xxx.yyy.1.5:4000 SYN ******S* Sep 27 21:04:32 24.205.116.79:4260 -> xxx.yyy.1.9:4000 SYN ******S* Sep 27 21:04:32 24.205.116.79:4261 -> xxx.yyy.1.10:4000 SYN ******S* Sep 27 21:04:32 24.205.116.79:4264 -> xxx.yyy.1.13:4000 SYN ******S* Sep 27 21:04:35 24.205.116.79:4266 -> xxx.yyy.1.15:4000 SYN ******S* [...] Sep 27 21:16:00 24.205.116.79:4534 -> xxx.yyy.255.231:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4533 -> xxx.yyy.255.230:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4536 -> xxx.yyy.255.233:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4537 -> xxx.yyy.255.234:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4538 -> xxx.yyy.255.235:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4546 -> xxx.yyy.255.243:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4549 -> xxx.yyy.255.246:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4553 -> xxx.yyy.255.250:4000 SYN ******S* Sep 27 21:16:00 24.205.116.79:4555 -> xxx.yyy.255.252:4000 SYN ******S* 39653 Sep 27 05:56:57 213.220.231.173:3315 -> xxx.yyy.1.1:4899 SYN ******S* Sep 27 05:56:57 213.220.231.173:3316 -> xxx.yyy.1.2:4899 SYN ******S* Sep 27 05:56:57 213.220.231.173:3317 -> xxx.yyy.1.3:4899 SYN ******S* Sep 27 05:56:56 213.220.231.173:3318 -> xxx.yyy.1.4:4899 SYN ******S* Sep 27 05:56:56 213.220.231.173:3320 -> xxx.yyy.1.6:4899 SYN ******S* Sep 27 05:56:56 213.220.231.173:3321 -> xxx.yyy.1.7:4899 SYN ******S* Sep 27 05:56:56 213.220.231.173:3319 -> xxx.yyy.1.5:4899 SYN ******S* Sep 27 05:56:56 213.220.231.173:3322 -> xxx.yyy.1.8:4899 SYN ******S* [...] Sep 27 06:01:42 213.220.231.173:4969 -> xxx.yyy.255.246:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4973 -> xxx.yyy.255.248:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4971 -> xxx.yyy.255.247:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4974 -> xxx.yyy.255.249:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4976 -> xxx.yyy.255.250:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4982 -> xxx.yyy.255.251:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4984 -> xxx.yyy.255.252:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4986 -> xxx.yyy.255.253:4899 SYN ******S* Sep 27 06:01:42 213.220.231.173:4987 -> xxx.yyy.255.254:4899 SYN ******S* 37210 Sep 27 22:17:33 193.202.83.192:4030 -> xxx.yyy.1.6:1433 SYN ******S* Sep 27 22:17:33 193.202.83.192:4032 -> xxx.yyy.1.8:1433 SYN ******S* Sep 27 22:17:33 193.202.83.192:4034 -> xxx.yyy.1.10:1433 SYN ******S* Sep 27 22:17:33 193.202.83.192:4035 -> xxx.yyy.1.11:1433 SYN ******S* Sep 27 22:17:33 193.202.83.192:4039 -> xxx.yyy.1.15:1433 SYN ******S* Sep 27 22:17:33 193.202.83.192:4041 -> xxx.yyy.1.17:1433 SYN ******S* Sep 27 22:17:30 193.202.83.192:4046 -> xxx.yyy.1.22:1433 SYN ******S* Sep 27 22:17:30 193.202.83.192:4049 -> xxx.yyy.1.25:1433 SYN ******S* [...] Sep 27 22:29:11 193.202.83.192:2649 -> xxx.yyy.255.238:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2653 -> xxx.yyy.255.242:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2650 -> xxx.yyy.255.239:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2652 -> xxx.yyy.255.241:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2654 -> xxx.yyy.255.243:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2648 -> xxx.yyy.255.237:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2651 -> xxx.yyy.255.240:1433 SYN ******S* Sep 27 22:29:11 193.202.83.192:2655 -> xxx.yyy.255.244:1433 SYN ******S* 36931 Sep 27 18:43:48 24.16.61.181:2603 -> xxx.yyy.1.2:1433 SYN ******S* Sep 27 18:43:51 24.16.61.181:2604 -> xxx.yyy.1.3:1433 SYN ******S* Sep 27 18:43:48 24.16.61.181:2607 -> xxx.yyy.1.6:1433 SYN ******S* Sep 27 18:43:51 24.16.61.181:2608 -> xxx.yyy.1.7:1433 SYN ******S* Sep 27 18:43:48 24.16.61.181:2610 -> xxx.yyy.1.9:1433 SYN ******S* Sep 27 18:43:51 24.16.61.181:2613 -> xxx.yyy.1.12:1433 SYN ******S* Sep 27 18:43:51 24.16.61.181:2614 -> xxx.yyy.1.13:1433 SYN ******S* Sep 27 18:43:48 24.16.61.181:2617 -> xxx.yyy.1.16:1433 SYN ******S* [...] Sep 27 18:55:31 24.16.61.181:1353 -> xxx.yyy.255.218:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1356 -> xxx.yyy.255.221:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1364 -> xxx.yyy.255.229:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1360 -> xxx.yyy.255.225:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1369 -> xxx.yyy.255.234:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1382 -> xxx.yyy.255.247:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1378 -> xxx.yyy.255.243:1433 SYN ******S* Sep 27 18:55:31 24.16.61.181:1386 -> xxx.yyy.255.251:1433 SYN ******S* 24488 Sep 27 14:33:33 202.188.227.196:2954 -> xxx.yyy.1.1:4000 SYN ******S* Sep 27 14:33:35 202.188.227.196:2955 -> xxx.yyy.1.2:4000 SYN ******S* Sep 27 14:33:35 202.188.227.196:2956 -> xxx.yyy.1.3:4000 SYN ******S* Sep 27 14:33:33 202.188.227.196:2960 -> xxx.yyy.1.7:4000 SYN ******S* Sep 27 14:33:35 202.188.227.196:2967 -> xxx.yyy.1.14:4000 SYN ******S* Sep 27 14:33:33 202.188.227.196:2968 -> xxx.yyy.1.15:4000 SYN ******S* Sep 27 14:33:35 202.188.227.196:2981 -> xxx.yyy.1.28:4000 SYN ******S* Sep 27 14:33:33 202.188.227.196:2982 -> xxx.yyy.1.29:4000 SYN ******S* [...] Sep 27 14:41:31 202.188.227.196:1295 -> xxx.yyy.255.210:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1247 -> xxx.yyy.255.162:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1263 -> xxx.yyy.255.178:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1311 -> xxx.yyy.255.226:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1215 -> xxx.yyy.255.130:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1231 -> xxx.yyy.255.146:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1199 -> xxx.yyy.255.114:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1244 -> xxx.yyy.255.159:4000 SYN ******S* Sep 27 14:41:31 202.188.227.196:1228 -> xxx.yyy.255.143:4000 SYN ******S* 24246 Sep 27 11:01:27 220.92.230.46:3937 -> xxx.yyy.1.1:4899 SYN ******S* Sep 27 11:01:27 220.92.230.46:3954 -> xxx.yyy.1.11:4899 SYN ******S* Sep 27 11:01:25 220.92.230.46:3957 -> xxx.yyy.1.13:4899 SYN ******S* Sep 27 11:01:25 220.92.230.46:3950 -> xxx.yyy.1.9:4899 SYN ******S* Sep 27 11:01:25 220.92.230.46:3951 -> xxx.yyy.1.10:4899 SYN ******S* Sep 27 11:01:25 220.92.230.46:3973 -> xxx.yyy.1.25:4899 SYN ******S* Sep 27 11:01:26 220.92.230.46:3958 -> xxx.yyy.1.14:4899 SYN ******S* Sep 27 11:01:25 220.92.230.46:3960 -> xxx.yyy.1.15:4899 SYN ******S* [...] Sep 27 11:04:34 220.92.230.46:1147 -> xxx.yyy.255.223:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1158 -> xxx.yyy.255.234:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1159 -> xxx.yyy.255.235:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1165 -> xxx.yyy.255.241:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1167 -> xxx.yyy.255.243:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1161 -> xxx.yyy.255.237:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1166 -> xxx.yyy.255.242:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1170 -> xxx.yyy.255.246:4899 SYN ******S* Sep 27 11:04:34 220.92.230.46:1180 -> xxx.yyy.255.253:4899 SYN ******S* 18768 Sep 27 06:56:37 172.184.147.174:1253 -> xxx.yyy.215.210:5554 SYN ******S* Sep 27 06:56:38 172.184.147.174:1297 -> xxx.yyy.215.210:1023 SYN ******S* Sep 27 06:56:40 172.184.147.174:1382 -> xxx.yyy.215.210:9898 SYN ******S* Sep 27 06:56:37 172.184.147.174:1256 -> xxx.yyy.215.211:5554 SYN ******S* Sep 27 06:56:38 172.184.147.174:1299 -> xxx.yyy.215.211:1023 SYN ******S* Sep 27 06:56:40 172.184.147.174:1383 -> xxx.yyy.215.211:9898 SYN ******S* Sep 27 06:56:37 172.184.147.174:1257 -> xxx.yyy.215.212:5554 SYN ******S* Sep 27 06:56:38 172.184.147.174:1300 -> xxx.yyy.215.212:1023 SYN ******S* [...] Sep 27 07:04:21 172.184.147.174:4062 -> xxx.yyy.236.59:9898 SYN ******S* Sep 27 07:04:21 172.184.147.174:4063 -> xxx.yyy.236.60:9898 SYN ******S* Sep 27 07:04:21 172.184.147.174:4064 -> xxx.yyy.236.58:9898 SYN ******S* Sep 27 07:04:22 172.184.147.174:4106 -> xxx.yyy.236.55:9898 SYN ******S* Sep 27 07:04:22 172.184.147.174:4108 -> xxx.yyy.236.57:9898 SYN ******S* Sep 27 07:04:22 172.184.147.174:4110 -> xxx.yyy.236.73:9898 SYN ******S* Sep 27 07:04:22 172.184.147.174:4111 -> xxx.yyy.236.74:9898 SYN ******S* Sep 27 07:04:22 172.184.147.174:4112 -> xxx.yyy.236.76:9898 SYN ******S* Sep 27 07:04:22 172.184.147.174:4114 -> xxx.yyy.236.56:9898 SYN ******S* 14738 [...] 12508 [...] 11542 Sep 27 00:05:38 220.123.28.77:2927 -> xxx.yyy.236.76:5554 SYN ******S* Sep 27 00:05:39 220.123.28.77:4372 -> xxx.yyy.236.76:1023 SYN ******S* Sep 27 00:05:41 220.123.28.77:3162 -> xxx.yyy.236.76:9898 SYN ******S* Sep 27 00:05:38 220.123.28.77:2930 -> xxx.yyy.236.77:5554 SYN ******S* Sep 27 00:05:39 220.123.28.77:4378 -> xxx.yyy.236.77:1023 SYN ******S* Sep 27 00:05:41 220.123.28.77:3184 -> xxx.yyy.236.77:9898 SYN ******S* Sep 27 00:05:38 220.123.28.77:2933 -> xxx.yyy.236.78:5554 SYN ******S* Sep 27 00:05:39 220.123.28.77:4400 -> xxx.yyy.236.78:1023 SYN ******S* [...] Sep 27 00:07:11 220.123.28.77:2500 -> xxx.yyy.255.243:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2462 -> xxx.yyy.255.236:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2471 -> xxx.yyy.255.238:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2508 -> xxx.yyy.255.246:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2569 -> xxx.yyy.255.250:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2612 -> xxx.yyy.255.251:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2638 -> xxx.yyy.255.254:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2614 -> xxx.yyy.255.252:9898 SYN ******S* Sep 27 00:07:11 220.123.28.77:2615 -> xxx.yyy.255.253:9898 SYN ******S* 10280 Sep 27 00:57:06 61.218.10.242:2979 -> xxx.yyy.133.235:5554 SYN ******S* Sep 27 00:57:07 61.218.10.242:4302 -> xxx.yyy.133.235:1023 SYN ******S* Sep 27 00:57:06 61.218.10.242:3010 -> xxx.yyy.133.238:5554 SYN ******S* Sep 27 00:57:07 61.218.10.242:4380 -> xxx.yyy.133.238:1023 SYN ******S* Sep 27 00:57:06 61.218.10.242:3018 -> xxx.yyy.133.240:5554 SYN ******S* Sep 27 00:57:09 61.218.10.242:3162 -> xxx.yyy.133.240:9898 SYN ******S* Sep 27 00:57:06 61.218.10.242:3020 -> xxx.yyy.133.241:5554 SYN ******S* Sep 27 00:57:09 61.218.10.242:3173 -> xxx.yyy.133.241:9898 SYN ******S* [...] Sep 27 00:57:58 61.218.10.242:1374 -> xxx.yyy.153.224:1023 SYN ******S* Sep 27 00:58:00 61.218.10.242:3547 -> xxx.yyy.153.224:9898 SYN ******S* Sep 27 00:57:58 61.218.10.242:1376 -> xxx.yyy.153.194:1023 SYN ******S* Sep 27 00:58:00 61.218.10.242:3561 -> xxx.yyy.153.194:9898 SYN ******S* Sep 27 00:57:58 61.218.10.242:1389 -> xxx.yyy.153.236:1023 SYN ******S* Sep 27 00:57:58 61.218.10.242:1414 -> xxx.yyy.154.68:1023 SYN ******S* Sep 27 00:58:00 61.218.10.242:3542 -> xxx.yyy.153.222:9898 SYN ******S* Sep 27 00:58:00 61.218.10.242:3575 -> xxx.yyy.154.77:9898 SYN ******S* Sep 27 00:58:00 61.218.10.242:3594 -> xxx.yyy.154.31:9898 SYN ******S* 8275 Sep 27 00:05:21 220.109.189.29:1628 -> xxx.yyy.236.79:5554 SYN ******S* Sep 27 00:05:22 220.109.189.29:2061 -> xxx.yyy.236.79:1023 SYN ******S* Sep 27 00:05:24 220.109.189.29:3063 -> xxx.yyy.236.79:9898 SYN ******S* Sep 27 00:05:21 220.109.189.29:1629 -> xxx.yyy.236.80:5554 SYN ******S* Sep 27 00:05:22 220.109.189.29:2062 -> xxx.yyy.236.80:1023 SYN ******S* Sep 27 00:05:24 220.109.189.29:3064 -> xxx.yyy.236.80:9898 SYN ******S* Sep 27 00:05:21 220.109.189.29:1631 -> xxx.yyy.236.82:5554 SYN ******S* Sep 27 00:05:22 220.109.189.29:2064 -> xxx.yyy.236.82:1023 SYN ******S* [...] Sep 27 00:06:04 220.109.189.29:3392 -> xxx.yyy.255.237:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3394 -> xxx.yyy.255.239:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3369 -> xxx.yyy.255.214:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3376 -> xxx.yyy.255.221:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3381 -> xxx.yyy.255.226:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3405 -> xxx.yyy.255.250:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3382 -> xxx.yyy.255.227:9898 SYN ******S* Sep 27 00:06:04 220.109.189.29:3396 -> xxx.yyy.255.241:9898 SYN ******S* 8113 Sep 27 00:57:01 219.76.147.224:1281 -> xxx.yyy.72.124:5554 SYN ******S* Sep 27 00:57:04 219.76.147.224:3508 -> xxx.yyy.72.124:9898 SYN ******S* Sep 27 00:57:01 219.76.147.224:1302 -> xxx.yyy.72.128:5554 SYN ******S* Sep 27 00:57:04 219.76.147.224:3516 -> xxx.yyy.72.128:9898 SYN ******S* Sep 27 00:57:01 219.76.147.224:1306 -> xxx.yyy.72.129:5554 SYN ******S* Sep 27 00:57:04 219.76.147.224:3521 -> xxx.yyy.72.129:9898 SYN ******S* Sep 27 00:57:01 219.76.147.224:1290 -> xxx.yyy.72.126:5554 SYN ******S* Sep 27 00:57:01 219.76.147.224:1324 -> xxx.yyy.72.135:5554 SYN ******S* [...] Sep 27 00:58:23 219.76.147.224:4405 -> xxx.yyy.74.40:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4435 -> xxx.yyy.74.49:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4448 -> xxx.yyy.74.50:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4450 -> xxx.yyy.74.51:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4413 -> xxx.yyy.74.44:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4494 -> xxx.yyy.74.55:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4426 -> xxx.yyy.74.48:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4507 -> xxx.yyy.74.59:9898 SYN ******S* Sep 27 00:58:23 219.76.147.224:4500 -> xxx.yyy.74.58:9898 SYN ******S* 7869 [...] 7783 Sep 27 00:52:52 221.194.113.86:4146 -> xxx.yyy.235.136:5554 SYN ******S* Sep 27 00:52:53 221.194.113.86:1561 -> xxx.yyy.235.136:1023 SYN ******S* Sep 27 00:52:55 221.194.113.86:3820 -> xxx.yyy.235.136:9898 SYN ******S* Sep 27 00:52:52 221.194.113.86:4176 -> xxx.yyy.235.146:5554 SYN ******S* Sep 27 00:52:53 221.194.113.86:1572 -> xxx.yyy.235.146:1023 SYN ******S* Sep 27 00:52:55 221.194.113.86:3830 -> xxx.yyy.235.146:9898 SYN ******S* Sep 27 00:52:52 221.194.113.86:4177 -> xxx.yyy.235.147:5554 SYN ******S* Sep 27 00:52:53 221.194.113.86:1573 -> xxx.yyy.235.147:1023 SYN ******S* [...] Sep 27 00:53:37 221.194.113.86:2510 -> xxx.yyy.255.186:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2525 -> xxx.yyy.255.187:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2509 -> xxx.yyy.255.185:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2732 -> xxx.yyy.255.232:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2733 -> xxx.yyy.255.233:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2734 -> xxx.yyy.255.234:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2730 -> xxx.yyy.255.230:9898 SYN ******S* Sep 27 00:53:37 221.194.113.86:2731 -> xxx.yyy.255.231:9898 SYN ******S* 7665 Sep 27 00:00:06 160.26.110.90:2448 -> xxx.yyy.222.74:9898 SYN ******S* Sep 27 00:00:06 160.26.110.90:2451 -> xxx.yyy.223.165:5554 SYN ******S* Sep 27 00:00:06 160.26.110.90:2452 -> xxx.yyy.223.166:5554 SYN ******S* Sep 27 00:00:06 160.26.110.90:2460 -> xxx.yyy.222.77:9898 SYN ******S* Sep 27 00:00:06 160.26.110.90:2462 -> xxx.yyy.222.68:9898 SYN ******S* Sep 27 00:00:06 160.26.110.90:2461 -> xxx.yyy.222.72:9898 SYN ******S* Sep 27 00:00:06 160.26.110.90:2463 -> xxx.yyy.222.78:9898 SYN ******S* Sep 27 00:00:06 160.26.110.90:2469 -> xxx.yyy.222.76:9898 SYN ******S* [...] Sep 27 00:01:42 160.26.110.90:1438 -> xxx.yyy.233.116:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1440 -> xxx.yyy.233.109:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1448 -> xxx.yyy.233.112:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1454 -> xxx.yyy.233.107:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1456 -> xxx.yyy.233.113:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1455 -> xxx.yyy.233.108:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1475 -> xxx.yyy.233.117:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1477 -> xxx.yyy.233.92:9898 SYN ******S* Sep 27 00:01:42 160.26.110.90:1487 -> xxx.yyy.233.118:9898 SYN ******S* 7112 Sep 27 00:06:33 65.54.188.52:20693 -> xxx.yyy.1.13:80 SYN ******S* Sep 27 00:06:33 65.54.188.52:20681 -> xxx.yyy.241.29:80 SYN ******S* Sep 27 00:06:34 65.54.188.52:21134 -> xxx.yyy.241.20:80 SYN ******S* Sep 27 00:06:34 65.54.188.52:21208 -> xxx.yyy.241.255:80 SYN ******S* Sep 27 00:06:34 65.54.188.52:21243 -> xxx.yyy.1.60:80 SYN ******S* Sep 27 00:06:36 65.54.188.52:21652 -> xxx.yyy.241.179:80 SYN ******S* Sep 27 00:06:37 65.54.188.52:21855 -> xxx.yyy.210.5:80 SYN ******S* Sep 27 00:06:40 65.54.188.52:22519 -> xxx.yyy.234.52:80 SYN ******S* [...] Sep 27 23:53:04 65.54.188.52:48164 -> xxx.yyy.248.4:80 SYN ******S* Sep 27 23:53:05 65.54.188.52:48463 -> xxx.yyy.248.180:80 SYN ******S* Sep 27 23:53:11 65.54.188.52:49032 -> xxx.yyy.210.5:80 SYN ******S* Sep 27 23:53:26 65.54.188.52:49411 -> xxx.yyy.241.255:80 SYN ******S* Sep 27 23:53:28 65.54.188.52:49974 -> xxx.yyy.241.98:80 SYN ******S* Sep 27 23:53:28 65.54.188.52:50100 -> xxx.yyy.1.13:80 SYN ******S* Sep 27 23:53:29 65.54.188.52:50169 -> xxx.yyy.241.35:80 SYN ******S* Sep 27 23:53:29 65.54.188.52:50184 -> xxx.yyy.241.179:80 SYN ******S* Sep 27 23:53:36 65.54.188.52:52324 -> xxx.yyy.248.80:80 SYN ******S* 6737 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions