[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Oct 23 03:49:19 67.104.30.52:57871 -> xxx.yyy.1.0:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57872 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57874 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57875 -> xxx.yyy.1.3:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57876 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57877 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57878 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 03:49:19 67.104.30.52:57879 -> xxx.yyy.1.7:1433 SYN ******S* [...] Oct 23 07:54:57 67.104.30.52:3311 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3317 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3321 -> xxx.yyy.255.248:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3327 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3328 -> xxx.yyy.255.250:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3332 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3334 -> xxx.yyy.255.252:1433 SYN ******S* Oct 23 07:54:57 67.104.30.52:3338 -> xxx.yyy.255.253:1433 SYN ******S* Oct 23 07:54:58 67.104.30.52:3345 -> xxx.yyy.255.254:1433 SYN ******S* 120818 Oct 23 00:42:21 221.209.19.2:3001 -> xxx.yyy.1.0:1433 SYN ******S* Oct 23 00:42:18 221.209.19.2:3002 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 00:42:21 221.209.19.2:3003 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 00:42:21 221.209.19.2:3009 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 00:42:22 221.209.19.2:3010 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 00:42:19 221.209.19.2:3016 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 00:42:19 221.209.19.2:3021 -> xxx.yyy.1.7:1433 SYN ******S* Oct 23 00:42:22 221.209.19.2:3027 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 23 04:31:57 221.209.19.2:3359 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 04:31:57 221.209.19.2:3353 -> xxx.yyy.255.248:1433 SYN ******S* Oct 23 04:31:57 221.209.19.2:3347 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 04:31:57 221.209.19.2:3322 -> xxx.yyy.255.245:1433 SYN ******S* Oct 23 04:31:57 221.209.19.2:3372 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 04:31:58 221.209.19.2:3448 -> xxx.yyy.255.252:1433 SYN ******S* Oct 23 04:31:58 221.209.19.2:3455 -> xxx.yyy.255.253:1433 SYN ******S* Oct 23 04:31:58 221.209.19.2:3464 -> xxx.yyy.255.254:1433 SYN ******S* 112184 Oct 23 20:32:07 61.90.87.155:4939 -> xxx.yyy.11.120:1433 SYN ******S* Oct 23 20:32:07 61.90.87.155:4941 -> xxx.yyy.11.121:1433 SYN ******S* Oct 23 20:32:07 61.90.87.155:4948 -> xxx.yyy.11.123:1433 SYN ******S* Oct 23 20:32:07 61.90.87.155:4950 -> xxx.yyy.11.124:1433 SYN ******S* Oct 23 20:32:05 61.90.87.155:4952 -> xxx.yyy.11.125:1433 SYN ******S* Oct 23 20:32:08 61.90.87.155:4954 -> xxx.yyy.11.126:1433 SYN ******S* Oct 23 20:32:05 61.90.87.155:4956 -> xxx.yyy.11.127:1433 SYN ******S* Oct 23 20:32:08 61.90.87.155:4958 -> xxx.yyy.11.128:1433 SYN ******S* [...] Oct 23 23:59:58 61.90.87.155:3924 -> xxx.yyy.243.43:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3540 -> xxx.yyy.243.3:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3534 -> xxx.yyy.243.2:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3532 -> xxx.yyy.243.1:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3927 -> xxx.yyy.243.44:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3531 -> xxx.yyy.243.0:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3929 -> xxx.yyy.243.46:1433 SYN ******S* Oct 23 23:59:58 61.90.87.155:3559 -> xxx.yyy.243.6:1433 SYN ******S* 96026 Oct 23 04:45:13 144.230.99.5:1132 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 04:45:13 144.230.99.5:1134 -> xxx.yyy.1.3:1433 SYN ******S* Oct 23 04:45:13 144.230.99.5:1137 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 04:45:11 144.230.99.5:1139 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 04:45:14 144.230.99.5:1141 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 04:45:14 144.230.99.5:1143 -> xxx.yyy.1.7:1433 SYN ******S* Oct 23 04:45:11 144.230.99.5:1145 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 04:45:12 144.230.99.5:1147 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 23 09:27:43 144.230.99.5:4281 -> xxx.yyy.255.242:1433 SYN ******S* Oct 23 09:27:43 144.230.99.5:4305 -> xxx.yyy.255.254:1433 SYN ******S* Oct 23 09:27:43 144.230.99.5:4283 -> xxx.yyy.255.243:1433 SYN ******S* Oct 23 09:27:43 144.230.99.5:4287 -> xxx.yyy.255.245:1433 SYN ******S* Oct 23 09:27:43 144.230.99.5:4289 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 09:27:44 144.230.99.5:4291 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 09:27:44 144.230.99.5:4295 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 09:27:46 144.230.99.5:4305 -> xxx.yyy.255.254:1433 SYN ******S* 73177 Oct 23 12:49:30 83.130.181.72:4566 -> xxx.yyy.64.0:1433 SYN ******S* Oct 23 12:49:30 83.130.181.72:4569 -> xxx.yyy.64.1:1433 SYN ******S* Oct 23 12:49:30 83.130.181.72:4581 -> xxx.yyy.64.2:1433 SYN ******S* Oct 23 12:49:30 83.130.181.72:4584 -> xxx.yyy.64.3:1433 SYN ******S* Oct 23 12:49:31 83.130.181.72:4595 -> xxx.yyy.64.4:1433 SYN ******S* Oct 23 12:49:31 83.130.181.72:4597 -> xxx.yyy.64.5:1433 SYN ******S* Oct 23 12:49:31 83.130.181.72:4598 -> xxx.yyy.64.6:1433 SYN ******S* Oct 23 12:49:28 83.130.181.72:4601 -> xxx.yyy.64.7:1433 SYN ******S* [...] Oct 23 15:00:45 83.130.181.72:3070 -> xxx.yyy.210.71:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3078 -> xxx.yyy.210.75:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3077 -> xxx.yyy.210.74:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3263 -> xxx.yyy.210.93:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3083 -> xxx.yyy.210.76:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3265 -> xxx.yyy.210.94:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3098 -> xxx.yyy.210.77:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3442 -> xxx.yyy.210.103:1433 SYN ******S* Oct 23 15:00:45 83.130.181.72:3455 -> xxx.yyy.210.104:1433 SYN ******S* 72769 Oct 23 03:47:39 202.111.174.195:55958 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 03:47:39 202.111.174.195:55959 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 03:47:39 202.111.174.195:55960 -> xxx.yyy.1.3:1433 SYN ******S* Oct 23 03:47:39 202.111.174.195:55961 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 03:47:39 202.111.174.195:55962 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 03:47:39 202.111.174.195:55963 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 03:47:39 202.111.174.195:55965 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 03:47:36 202.111.174.195:55966 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 23 03:59:16 202.111.174.195:57384 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 03:59:16 202.111.174.195:57385 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 03:59:16 202.111.174.195:57382 -> xxx.yyy.255.244:1433 SYN ******S* Oct 23 03:59:16 202.111.174.195:57381 -> xxx.yyy.255.243:1433 SYN ******S* Oct 23 03:59:16 202.111.174.195:57379 -> xxx.yyy.255.241:1433 SYN ******S* Oct 23 03:59:16 202.111.174.195:57380 -> xxx.yyy.255.242:1433 SYN ******S* Oct 23 03:59:16 202.111.174.195:57383 -> xxx.yyy.255.245:1433 SYN ******S* Oct 23 03:59:17 202.111.174.195:57389 -> xxx.yyy.255.251:1433 SYN ******S* 68211 Oct 23 11:47:20 83.129.6.154:3893 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 11:47:20 83.129.6.154:3894 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 11:47:20 83.129.6.154:3895 -> xxx.yyy.1.3:1433 SYN ******S* Oct 23 11:47:20 83.129.6.154:3896 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 11:47:20 83.129.6.154:3897 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 11:47:20 83.129.6.154:3898 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 11:47:18 83.129.6.154:3900 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 11:47:18 83.129.6.154:3902 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 23 12:57:38 83.129.6.154:4763 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4764 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4765 -> xxx.yyy.255.248:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4766 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4767 -> xxx.yyy.255.250:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4768 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4770 -> xxx.yyy.255.253:1433 SYN ******S* Oct 23 12:57:38 83.129.6.154:4771 -> xxx.yyy.255.254:1433 SYN ******S* 67311 Oct 23 03:53:47 62.238.63.86:30010 -> xxx.yyy.1.1:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30013 -> xxx.yyy.1.4:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30014 -> xxx.yyy.1.5:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30015 -> xxx.yyy.1.6:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30016 -> xxx.yyy.1.7:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30017 -> xxx.yyy.1.8:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30018 -> xxx.yyy.1.9:8000 SYN ******S* Oct 23 03:53:48 62.238.63.86:30019 -> xxx.yyy.1.10:8000 SYN ******S* [...] Oct 23 04:10:47 62.238.63.86:39662 -> xxx.yyy.255.246:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39663 -> xxx.yyy.255.247:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39664 -> xxx.yyy.255.248:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39665 -> xxx.yyy.255.249:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39666 -> xxx.yyy.255.250:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39667 -> xxx.yyy.255.251:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39668 -> xxx.yyy.255.252:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39669 -> xxx.yyy.255.253:8000 SYN ******S* Oct 23 04:10:47 62.238.63.86:39670 -> xxx.yyy.255.254:8000 SYN ******S* 66781 Oct 23 20:02:53 129.119.168.76:3849 -> xxx.yyy.1.1:3632 SYN ******S* Oct 23 20:02:54 129.119.168.76:3850 -> xxx.yyy.1.2:3632 SYN ******S* Oct 23 20:02:54 129.119.168.76:3851 -> xxx.yyy.1.3:3632 SYN ******S* Oct 23 20:02:53 129.119.168.76:3852 -> xxx.yyy.1.4:3632 SYN ******S* Oct 23 20:02:53 129.119.168.76:3854 -> xxx.yyy.1.6:3632 SYN ******S* Oct 23 20:02:53 129.119.168.76:3855 -> xxx.yyy.1.7:3632 SYN ******S* Oct 23 20:02:56 129.119.168.76:3856 -> xxx.yyy.1.8:3632 SYN ******S* Oct 23 20:02:53 129.119.168.76:3859 -> xxx.yyy.1.9:3632 SYN ******S* [...] Oct 23 20:13:49 129.119.168.76:1629 -> xxx.yyy.255.235:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1630 -> xxx.yyy.255.236:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1631 -> xxx.yyy.255.237:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1624 -> xxx.yyy.255.230:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1625 -> xxx.yyy.255.231:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1628 -> xxx.yyy.255.234:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1642 -> xxx.yyy.255.248:3632 SYN ******S* Oct 23 20:13:49 129.119.168.76:1636 -> xxx.yyy.255.242:3632 SYN ******S* 61475 Oct 23 15:37:19 63.84.238.40:4792 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 15:37:19 63.84.238.40:4793 -> xxx.yyy.1.3:1433 SYN ******S* Oct 23 15:37:19 63.84.238.40:4794 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 15:37:19 63.84.238.40:4795 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 15:37:19 63.84.238.40:4796 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 15:37:19 63.84.238.40:4797 -> xxx.yyy.1.7:1433 SYN ******S* Oct 23 15:37:19 63.84.238.40:4799 -> xxx.yyy.1.9:1433 SYN ******S* Oct 23 15:37:22 63.84.238.40:4801 -> xxx.yyy.1.11:1433 SYN ******S* [...] Oct 23 15:49:02 63.84.238.40:3586 -> xxx.yyy.255.242:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3590 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3587 -> xxx.yyy.255.243:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3597 -> xxx.yyy.255.253:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3598 -> xxx.yyy.255.254:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3594 -> xxx.yyy.255.250:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3595 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 15:49:02 63.84.238.40:3596 -> xxx.yyy.255.252:1433 SYN ******S* 59195 Oct 23 14:09:36 213.215.41.46:4597 -> xxx.yyy.1.1:8000 SYN ******S* Oct 23 14:09:37 213.215.41.46:4603 -> xxx.yyy.1.7:8000 SYN ******S* Oct 23 14:09:37 213.215.41.46:4605 -> xxx.yyy.1.9:8000 SYN ******S* Oct 23 14:09:34 213.215.41.46:4610 -> xxx.yyy.1.14:8000 SYN ******S* Oct 23 14:09:37 213.215.41.46:4604 -> xxx.yyy.1.8:8000 SYN ******S* Oct 23 14:09:37 213.215.41.46:4608 -> xxx.yyy.1.12:8000 SYN ******S* Oct 23 14:09:35 213.215.41.46:4609 -> xxx.yyy.1.13:8000 SYN ******S* Oct 23 14:09:35 213.215.41.46:4607 -> xxx.yyy.1.11:8000 SYN ******S* [...] Oct 23 14:13:46 213.215.41.46:3247 -> xxx.yyy.255.242:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3231 -> xxx.yyy.255.226:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3255 -> xxx.yyy.255.250:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3219 -> xxx.yyy.255.214:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3251 -> xxx.yyy.255.246:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3243 -> xxx.yyy.255.238:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3223 -> xxx.yyy.255.218:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3227 -> xxx.yyy.255.222:8000 SYN ******S* Oct 23 14:13:46 213.215.41.46:3259 -> xxx.yyy.255.254:8000 SYN ******S* 53661 Oct 23 09:03:29 64.187.41.25:4917 -> xxx.yyy.1.1:2000 SYN ******S* Oct 23 09:03:32 64.187.41.25:4921 -> xxx.yyy.1.2:2000 SYN ******S* Oct 23 09:03:32 64.187.41.25:4923 -> xxx.yyy.1.3:2000 SYN ******S* Oct 23 09:03:32 64.187.41.25:4925 -> xxx.yyy.1.4:2000 SYN ******S* Oct 23 09:03:32 64.187.41.25:4927 -> xxx.yyy.1.5:2000 SYN ******S* Oct 23 09:03:29 64.187.41.25:4929 -> xxx.yyy.1.6:2000 SYN ******S* Oct 23 09:03:32 64.187.41.25:4931 -> xxx.yyy.1.7:2000 SYN ******S* Oct 23 09:03:29 64.187.41.25:4933 -> xxx.yyy.1.8:2000 SYN ******S* [...] Oct 23 09:06:59 64.187.41.25:4306 -> xxx.yyy.255.248:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:4313 -> xxx.yyy.255.254:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:4310 -> xxx.yyy.255.251:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:2778 -> xxx.yyy.255.242:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:2782 -> xxx.yyy.255.246:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:2779 -> xxx.yyy.255.243:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:4307 -> xxx.yyy.255.249:2000 SYN ******S* Oct 23 09:06:59 64.187.41.25:4311 -> xxx.yyy.255.252:2000 SYN ******S* 53017 Oct 23 00:05:24 69.140.200.98:1676 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 00:05:24 69.140.200.98:1679 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 00:05:23 69.140.200.98:1680 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 00:05:24 69.140.200.98:1681 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 00:05:21 69.140.200.98:1682 -> xxx.yyy.1.7:1433 SYN ******S* Oct 23 00:05:21 69.140.200.98:1683 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 00:05:23 69.140.200.98:1684 -> xxx.yyy.1.9:1433 SYN ******S* Oct 23 00:05:21 69.140.200.98:1685 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 23 00:16:19 69.140.200.98:4231 -> xxx.yyy.255.243:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4235 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4229 -> xxx.yyy.255.241:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4232 -> xxx.yyy.255.244:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4230 -> xxx.yyy.255.242:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4241 -> xxx.yyy.255.253:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4242 -> xxx.yyy.255.254:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4240 -> xxx.yyy.255.252:1433 SYN ******S* Oct 23 00:16:19 69.140.200.98:4239 -> xxx.yyy.255.251:1433 SYN ******S* 52799 Oct 23 16:18:14 12.20.160.226:3343 -> xxx.yyy.1.3:6129 SYN ******S* Oct 23 16:18:15 12.20.160.226:3347 -> xxx.yyy.1.5:6129 SYN ******S* Oct 23 16:18:13 12.20.160.226:3351 -> xxx.yyy.1.7:6129 SYN ******S* Oct 23 16:18:16 12.20.160.226:3355 -> xxx.yyy.1.9:6129 SYN ******S* Oct 23 16:18:16 12.20.160.226:3357 -> xxx.yyy.1.10:6129 SYN ******S* Oct 23 16:18:14 12.20.160.226:3359 -> xxx.yyy.1.11:6129 SYN ******S* Oct 23 16:18:16 12.20.160.226:3361 -> xxx.yyy.1.12:6129 SYN ******S* Oct 23 16:18:13 12.20.160.226:3365 -> xxx.yyy.1.14:6129 SYN ******S* [...] Oct 23 16:44:53 12.20.160.226:3326 -> xxx.yyy.255.238:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3334 -> xxx.yyy.255.242:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3330 -> xxx.yyy.255.240:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3321 -> xxx.yyy.255.235:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3328 -> xxx.yyy.255.239:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3324 -> xxx.yyy.255.237:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3341 -> xxx.yyy.255.245:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3351 -> xxx.yyy.255.250:6129 SYN ******S* Oct 23 16:44:53 12.20.160.226:3349 -> xxx.yyy.255.249:6129 SYN ******S* 52514 Oct 23 13:31:43 210.187.125.76:63679 -> xxx.yyy.1.0:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63680 -> xxx.yyy.1.1:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63681 -> xxx.yyy.1.2:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63682 -> xxx.yyy.1.3:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63683 -> xxx.yyy.1.4:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63751 -> xxx.yyy.1.5:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63752 -> xxx.yyy.1.6:32773 SYN ******S* Oct 23 13:31:43 210.187.125.76:63753 -> xxx.yyy.1.7:32773 SYN ******S* [...] Oct 23 13:48:22 210.187.125.76:60687 -> xxx.yyy.255.223:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60686 -> xxx.yyy.255.222:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60684 -> xxx.yyy.255.220:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60685 -> xxx.yyy.255.221:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60683 -> xxx.yyy.255.219:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60682 -> xxx.yyy.255.218:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60680 -> xxx.yyy.255.216:32773 SYN ******S* Oct 23 13:48:22 210.187.125.76:60681 -> xxx.yyy.255.217:32773 SYN ******S* 48794 Oct 23 04:13:39 210.5.68.34:13824 -> xxx.yyy.1.1:4899 SYN ******S* Oct 23 04:13:39 210.5.68.34:13825 -> xxx.yyy.1.2:4899 SYN ******S* Oct 23 04:13:37 210.5.68.34:13827 -> xxx.yyy.1.4:4899 SYN ******S* Oct 23 04:13:37 210.5.68.34:13828 -> xxx.yyy.1.5:4899 SYN ******S* Oct 23 04:13:39 210.5.68.34:13837 -> xxx.yyy.1.14:4899 SYN ******S* Oct 23 04:13:37 210.5.68.34:13835 -> xxx.yyy.1.12:4899 SYN ******S* Oct 23 04:13:37 210.5.68.34:13838 -> xxx.yyy.1.15:4899 SYN ******S* Oct 23 04:13:37 210.5.68.34:13829 -> xxx.yyy.1.6:4899 SYN ******S* [...] Oct 23 04:17:26 210.5.68.34:28224 -> xxx.yyy.255.251:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28206 -> xxx.yyy.255.242:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28202 -> xxx.yyy.255.240:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28204 -> xxx.yyy.255.241:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28208 -> xxx.yyy.255.243:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28228 -> xxx.yyy.255.253:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28230 -> xxx.yyy.255.254:4899 SYN ******S* Oct 23 04:17:26 210.5.68.34:28227 -> xxx.yyy.255.252:4899 SYN ******S* 40064 Oct 23 04:40:37 61.79.10.10:63825 -> xxx.yyy.1.4:4899 SYN ******S* Oct 23 04:40:37 61.79.10.10:63826 -> xxx.yyy.1.5:4899 SYN ******S* Oct 23 04:40:38 61.79.10.10:63822 -> xxx.yyy.1.1:4899 SYN ******S* Oct 23 04:40:38 61.79.10.10:63823 -> xxx.yyy.1.2:4899 SYN ******S* Oct 23 04:40:38 61.79.10.10:63824 -> xxx.yyy.1.3:4899 SYN ******S* Oct 23 04:40:37 61.79.10.10:63829 -> xxx.yyy.1.8:4899 SYN ******S* Oct 23 04:40:37 61.79.10.10:63827 -> xxx.yyy.1.6:4899 SYN ******S* Oct 23 04:40:37 61.79.10.10:63828 -> xxx.yyy.1.7:4899 SYN ******S* [...] Oct 23 04:45:07 61.79.10.10:62773 -> xxx.yyy.255.245:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62774 -> xxx.yyy.255.246:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62776 -> xxx.yyy.255.248:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62778 -> xxx.yyy.255.250:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62779 -> xxx.yyy.255.251:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62780 -> xxx.yyy.255.252:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62781 -> xxx.yyy.255.253:4899 SYN ******S* Oct 23 04:45:07 61.79.10.10:62782 -> xxx.yyy.255.254:4899 SYN ******S* 38860 Oct 23 15:39:41 195.172.215.101:4814 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 15:39:38 195.172.215.101:4817 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 15:39:38 195.172.215.101:4819 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 15:39:41 195.172.215.101:4822 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 15:39:38 195.172.215.101:4824 -> xxx.yyy.1.10:1433 SYN ******S* Oct 23 15:39:38 195.172.215.101:4827 -> xxx.yyy.1.13:1433 SYN ******S* Oct 23 15:39:41 195.172.215.101:4829 -> xxx.yyy.1.15:1433 SYN ******S* Oct 23 15:39:38 195.172.215.101:4834 -> xxx.yyy.1.19:1433 SYN ******S* [...] Oct 23 15:46:00 195.172.215.101:2970 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2967 -> xxx.yyy.255.248:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2964 -> xxx.yyy.255.245:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2958 -> xxx.yyy.255.239:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2971 -> xxx.yyy.255.252:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2968 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2965 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2962 -> xxx.yyy.255.243:1433 SYN ******S* Oct 23 15:46:00 195.172.215.101:2959 -> xxx.yyy.255.240:1433 SYN ******S* 37675 Oct 23 20:23:47 64.247.235.248:3323 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 20:23:47 64.247.235.248:3324 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 20:23:47 64.247.235.248:3326 -> xxx.yyy.1.4:1433 SYN ******S* Oct 23 20:23:48 64.247.235.248:3327 -> xxx.yyy.1.5:1433 SYN ******S* Oct 23 20:23:48 64.247.235.248:3328 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 20:23:48 64.247.235.248:3329 -> xxx.yyy.1.7:1433 SYN ******S* Oct 23 20:23:48 64.247.235.248:3330 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 20:23:48 64.247.235.248:3331 -> xxx.yyy.1.9:1433 SYN ******S* [...] Oct 23 20:40:43 64.247.235.248:4324 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4326 -> xxx.yyy.255.248:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4327 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4328 -> xxx.yyy.255.250:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4329 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4330 -> xxx.yyy.255.252:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4331 -> xxx.yyy.255.253:1433 SYN ******S* Oct 23 20:40:43 64.247.235.248:4332 -> xxx.yyy.255.254:1433 SYN ******S* 37369 Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.1:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.4:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.7:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.11:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.47:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.44:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.0:22 SYN ******S* Oct 23 20:20:45 220.117.182.14:30300 -> xxx.yyy.1.2:22 SYN ******S* [...] Oct 23 23:56:29 220.117.182.14:53689 -> xxx.yyy.233.168:22 SYN ******S* Oct 23 23:56:29 220.117.182.14:53793 -> xxx.yyy.241.44:22 SYN ******S* Oct 23 23:56:31 220.117.182.14:53858 -> xxx.yyy.241.36:22 SYN ******S* Oct 23 23:56:32 220.117.182.14:53903 -> xxx.yyy.241.157:22 SYN ******S* Oct 23 23:56:36 220.117.182.14:53938 -> xxx.yyy.241.44:22 SYN ******S* Oct 23 23:56:37 220.117.182.14:54057 -> xxx.yyy.248.18:22 SYN ******S* Oct 23 23:56:40 220.117.182.14:53858 -> xxx.yyy.241.36:22 SYN ******S* Oct 23 23:56:41 220.117.182.14:54081 -> xxx.yyy.241.87:22 SYN ******S* Oct 23 23:56:42 220.117.182.14:53938 -> xxx.yyy.241.44:22 SYN ******S* 33848 Oct 23 21:25:00 172.182.86.124:1067 -> xxx.yyy.1.0:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1068 -> xxx.yyy.1.1:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1069 -> xxx.yyy.1.2:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1070 -> xxx.yyy.1.3:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1073 -> xxx.yyy.1.6:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1074 -> xxx.yyy.1.7:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1075 -> xxx.yyy.1.8:1433 SYN ******S* Oct 23 21:25:00 172.182.86.124:1077 -> xxx.yyy.1.10:1433 SYN ******S* [...] Oct 23 21:28:24 172.182.86.124:1082 -> xxx.yyy.255.245:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1083 -> xxx.yyy.255.246:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1084 -> xxx.yyy.255.247:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1085 -> xxx.yyy.255.248:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1086 -> xxx.yyy.255.249:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1087 -> xxx.yyy.255.250:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1038 -> xxx.yyy.255.251:1433 SYN ******S* Oct 23 21:28:24 172.182.86.124:1041 -> xxx.yyy.255.254:1433 SYN ******S* 33572 Oct 23 08:57:01 213.180.210.35:57353 -> xxx.yyy.241.72:1080 SYN ******S* Oct 23 08:57:01 213.180.210.35:44609 -> xxx.yyy.241.72:1075 SYN ******S* Oct 23 08:57:01 213.180.210.35:39196 -> xxx.yyy.241.72:80 SYN ******S* Oct 23 08:57:01 213.180.210.35:56429 -> xxx.yyy.241.72:81 SYN ******S* Oct 23 08:57:01 213.180.210.35:53484 -> xxx.yyy.241.72:4480 SYN ******S* Oct 23 08:57:01 213.180.210.35:51341 -> xxx.yyy.241.72:3128 SYN ******S* Oct 23 08:57:01 213.180.210.35:65181 -> xxx.yyy.241.72:6588 SYN ******S* Oct 23 08:57:01 213.180.210.35:35210 -> xxx.yyy.241.72:8000 SYN ******S* [...] Oct 23 12:42:38 213.180.210.35:53182 -> xxx.yyy.241.72:443 SYN ******S* Oct 23 12:42:38 213.180.210.35:45092 -> xxx.yyy.241.72:548 SYN ******S* Oct 23 12:42:38 213.180.210.35:60484 -> xxx.yyy.241.72:631 SYN ******S* Oct 23 12:42:38 213.180.210.35:52590 -> xxx.yyy.241.72:736 SYN ******S* Oct 23 12:42:38 213.180.210.35:41994 -> xxx.yyy.241.72:833 SYN ******S* Oct 23 12:42:38 213.180.210.35:31302 -> xxx.yyy.241.72:867 SYN ******S* Oct 23 12:42:38 213.180.210.35:53345 -> xxx.yyy.241.72:912 SYN ******S* Oct 23 12:42:38 213.180.210.35:57330 -> xxx.yyy.241.72:993 SYN ******S* Oct 23 12:42:38 213.180.210.35:43864 -> xxx.yyy.241.72:995 SYN ******S* 28643 Oct 23 16:29:10 211.221.14.28:1758 -> xxx.yyy.1.1:4899 SYN ******S* Oct 23 16:29:12 211.221.14.28:1759 -> xxx.yyy.1.2:4899 SYN ******S* Oct 23 16:29:11 211.221.14.28:1761 -> xxx.yyy.1.3:4899 SYN ******S* Oct 23 16:29:13 211.221.14.28:1763 -> xxx.yyy.1.5:4899 SYN ******S* Oct 23 16:29:13 211.221.14.28:1765 -> xxx.yyy.1.7:4899 SYN ******S* Oct 23 16:29:10 211.221.14.28:1767 -> xxx.yyy.1.9:4899 SYN ******S* Oct 23 16:29:10 211.221.14.28:1768 -> xxx.yyy.1.10:4899 SYN ******S* Oct 23 16:29:10 211.221.14.28:1771 -> xxx.yyy.1.13:4899 SYN ******S* [...] Oct 23 16:35:05 211.221.14.28:3145 -> xxx.yyy.255.238:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3201 -> xxx.yyy.255.250:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3178 -> xxx.yyy.255.241:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3206 -> xxx.yyy.255.252:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3195 -> xxx.yyy.255.244:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3198 -> xxx.yyy.255.247:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3200 -> xxx.yyy.255.249:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3203 -> xxx.yyy.255.251:4899 SYN ******S* Oct 23 16:35:05 211.221.14.28:3207 -> xxx.yyy.255.253:4899 SYN ******S* 27455 Oct 23 06:16:35 213.40.71.179:2459 -> xxx.yyy.64.0:1433 SYN ******S* Oct 23 06:16:34 213.40.71.179:2461 -> xxx.yyy.64.1:1433 SYN ******S* Oct 23 06:16:32 213.40.71.179:2532 -> xxx.yyy.64.3:1433 SYN ******S* Oct 23 06:16:35 213.40.71.179:2519 -> xxx.yyy.64.2:1433 SYN ******S* Oct 23 06:16:32 213.40.71.179:2551 -> xxx.yyy.64.4:1433 SYN ******S* Oct 23 06:16:32 213.40.71.179:2632 -> xxx.yyy.64.9:1433 SYN ******S* Oct 23 06:16:35 213.40.71.179:2631 -> xxx.yyy.64.8:1433 SYN ******S* Oct 23 06:16:32 213.40.71.179:2651 -> xxx.yyy.64.10:1433 SYN ******S* [...] Oct 23 07:21:58 213.40.71.179:3670 -> xxx.yyy.140.221:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3080 -> xxx.yyy.140.188:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3166 -> xxx.yyy.140.190:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3679 -> xxx.yyy.140.222:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3683 -> xxx.yyy.140.223:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3688 -> xxx.yyy.140.224:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3693 -> xxx.yyy.140.225:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3699 -> xxx.yyy.140.226:1433 SYN ******S* Oct 23 07:21:59 213.40.71.179:3709 -> xxx.yyy.140.227:1433 SYN ******S* 26306 Oct 23 18:14:54 200.119.25.21:50388 -> xxx.yyy.1.3:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50389 -> xxx.yyy.1.4:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50390 -> xxx.yyy.1.5:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50391 -> xxx.yyy.1.6:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50392 -> xxx.yyy.1.7:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50393 -> xxx.yyy.1.8:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50394 -> xxx.yyy.1.9:4899 SYN ******S* Oct 23 18:14:53 200.119.25.21:50395 -> xxx.yyy.1.10:4899 SYN ******S* [...] Oct 23 18:28:05 200.119.25.21:60708 -> xxx.yyy.255.247:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60709 -> xxx.yyy.255.248:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60710 -> xxx.yyy.255.249:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60719 -> xxx.yyy.255.250:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60720 -> xxx.yyy.255.251:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60721 -> xxx.yyy.255.252:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60722 -> xxx.yyy.255.253:4899 SYN ******S* Oct 23 18:28:05 200.119.25.21:60723 -> xxx.yyy.255.254:4899 SYN ******S* 23835 Oct 23 00:51:40 213.92.131.184:1291 -> xxx.yyy.1.251:1433 SYN ******S* Oct 23 00:51:40 213.92.131.184:1283 -> xxx.yyy.1.250:1433 SYN ******S* Oct 23 00:51:40 213.92.131.184:1278 -> xxx.yyy.1.249:1433 SYN ******S* Oct 23 00:51:40 213.92.131.184:1302 -> xxx.yyy.1.253:1433 SYN ******S* Oct 23 00:51:40 213.92.131.184:1309 -> xxx.yyy.1.254:1433 SYN ******S* Oct 23 00:51:40 213.92.131.184:1296 -> xxx.yyy.1.252:1433 SYN ******S* Oct 23 00:51:41 213.92.131.184:1272 -> xxx.yyy.1.248:1433 SYN ******S* Oct 23 00:51:41 213.92.131.184:1268 -> xxx.yyy.1.247:1433 SYN ******S* [...] Oct 23 04:20:39 213.92.131.184:4014 -> xxx.yyy.255.229:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4008 -> xxx.yyy.255.228:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4003 -> xxx.yyy.255.227:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4030 -> xxx.yyy.255.232:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4038 -> xxx.yyy.255.233:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4053 -> xxx.yyy.255.236:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4058 -> xxx.yyy.255.237:1433 SYN ******S* Oct 23 04:20:39 213.92.131.184:4025 -> xxx.yyy.255.231:1433 SYN ******S* 23340 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions