[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 6 05:34:36 221.9.81.160:3569 -> xxx.yyy.1.0:1433 SYN ******S* Nov 6 05:34:39 221.9.81.160:3571 -> xxx.yyy.1.1:1433 SYN ******S* Nov 6 05:34:39 221.9.81.160:3572 -> xxx.yyy.1.2:1433 SYN ******S* Nov 6 05:34:39 221.9.81.160:3573 -> xxx.yyy.1.3:1433 SYN ******S* Nov 6 05:34:36 221.9.81.160:3580 -> xxx.yyy.1.4:1433 SYN ******S* Nov 6 05:34:36 221.9.81.160:3582 -> xxx.yyy.1.5:1433 SYN ******S* Nov 6 05:34:36 221.9.81.160:3584 -> xxx.yyy.1.6:1433 SYN ******S* Nov 6 05:34:36 221.9.81.160:3585 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 6 09:23:28 221.9.81.160:3065 -> xxx.yyy.255.247:1433 SYN ******S* Nov 6 09:23:28 221.9.81.160:3071 -> xxx.yyy.255.249:1433 SYN ******S* Nov 6 09:23:28 221.9.81.160:3068 -> xxx.yyy.255.248:1433 SYN ******S* Nov 6 09:23:28 221.9.81.160:3090 -> xxx.yyy.255.250:1433 SYN ******S* Nov 6 09:23:29 221.9.81.160:3098 -> xxx.yyy.255.251:1433 SYN ******S* Nov 6 09:23:29 221.9.81.160:3101 -> xxx.yyy.255.252:1433 SYN ******S* Nov 6 09:23:29 221.9.81.160:3110 -> xxx.yyy.255.254:1433 SYN ******S* Nov 6 09:23:29 221.9.81.160:3109 -> xxx.yyy.255.253:1433 SYN ******S* 118880 Nov 6 00:44:45 151.36.178.178:58591 -> xxx.yyy.1.0:139 SYN ******S* Nov 6 00:44:42 151.36.178.178:58592 -> xxx.yyy.1.1:139 SYN ******S* Nov 6 00:44:45 151.36.178.178:58593 -> xxx.yyy.1.2:139 SYN ******S* Nov 6 00:44:45 151.36.178.178:58594 -> xxx.yyy.1.3:139 SYN ******S* Nov 6 00:44:46 151.36.178.178:58595 -> xxx.yyy.1.4:139 SYN ******S* Nov 6 00:44:46 151.36.178.178:58596 -> xxx.yyy.1.5:139 SYN ******S* Nov 6 00:44:46 151.36.178.178:58597 -> xxx.yyy.1.6:139 SYN ******S* Nov 6 00:44:46 151.36.178.178:58598 -> xxx.yyy.1.7:139 SYN ******S* [...] Nov 6 01:17:55 151.36.178.178:62957 -> xxx.yyy.255.246:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62958 -> xxx.yyy.255.247:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62959 -> xxx.yyy.255.248:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62960 -> xxx.yyy.255.249:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62961 -> xxx.yyy.255.250:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62963 -> xxx.yyy.255.252:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62964 -> xxx.yyy.255.253:139 SYN ******S* Nov 6 01:17:55 151.36.178.178:62965 -> xxx.yyy.255.254:139 SYN ******S* 100587 Nov 6 06:33:12 217.17.19.51:14236 -> xxx.yyy.1.1:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14237 -> xxx.yyy.1.2:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14238 -> xxx.yyy.1.3:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14239 -> xxx.yyy.1.4:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14240 -> xxx.yyy.1.5:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14241 -> xxx.yyy.1.6:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14242 -> xxx.yyy.1.7:25 SYN ******S* Nov 6 06:33:12 217.17.19.51:14243 -> xxx.yyy.1.8:25 SYN ******S* [...] Nov 6 06:48:57 217.17.19.51:17178 -> xxx.yyy.255.156:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17230 -> xxx.yyy.255.208:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17179 -> xxx.yyy.255.157:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17231 -> xxx.yyy.255.209:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17180 -> xxx.yyy.255.158:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17232 -> xxx.yyy.255.210:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17181 -> xxx.yyy.255.159:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17233 -> xxx.yyy.255.211:25 SYN ******S* Nov 6 06:48:57 217.17.19.51:17182 -> xxx.yyy.255.160:25 SYN ******S* 66518 Nov 6 19:12:35 210.104.106.40:4668 -> xxx.yyy.1.1:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4669 -> xxx.yyy.1.2:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4671 -> xxx.yyy.1.4:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4672 -> xxx.yyy.1.5:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4673 -> xxx.yyy.1.6:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4676 -> xxx.yyy.1.7:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4678 -> xxx.yyy.1.9:110 SYN ******S* Nov 6 19:12:35 210.104.106.40:4677 -> xxx.yyy.1.8:110 SYN ******S* [...] Nov 6 19:42:51 210.104.106.40:3697 -> xxx.yyy.255.250:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3700 -> xxx.yyy.255.251:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3692 -> xxx.yyy.255.245:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3695 -> xxx.yyy.255.248:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3696 -> xxx.yyy.255.249:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3693 -> xxx.yyy.255.246:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3691 -> xxx.yyy.255.244:110 SYN ******S* Nov 6 19:42:51 210.104.106.40:3701 -> xxx.yyy.255.252:110 SYN ******S* Nov 6 19:42:55 210.104.106.40:3731 -> xxx.yyy.255.254:110 SYN ******S* 64120 Nov 6 04:01:39 61.158.71.207:4117 -> xxx.yyy.128.22:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4125 -> xxx.yyy.128.24:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4133 -> xxx.yyy.128.26:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4113 -> xxx.yyy.128.21:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4121 -> xxx.yyy.128.23:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4144 -> xxx.yyy.128.29:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4129 -> xxx.yyy.128.25:1433 SYN ******S* Nov 6 04:01:39 61.158.71.207:4152 -> xxx.yyy.128.31:1433 SYN ******S* [...] Nov 6 05:27:49 61.158.71.207:3304 -> xxx.yyy.223.168:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3302 -> xxx.yyy.223.166:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3303 -> xxx.yyy.223.167:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3301 -> xxx.yyy.223.165:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3305 -> xxx.yyy.223.169:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3402 -> xxx.yyy.223.179:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3399 -> xxx.yyy.223.178:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3403 -> xxx.yyy.223.180:1433 SYN ******S* Nov 6 05:27:49 61.158.71.207:3405 -> xxx.yyy.223.181:1433 SYN ******S* 64049 Nov 6 00:41:56 61.241.156.215:4698 -> xxx.yyy.1.1:2301 SYN ******S* Nov 6 00:41:56 61.241.156.215:4701 -> xxx.yyy.1.3:2301 SYN ******S* Nov 6 00:41:54 61.241.156.215:4702 -> xxx.yyy.1.4:2301 SYN ******S* Nov 6 00:41:54 61.241.156.215:4706 -> xxx.yyy.1.8:2301 SYN ******S* Nov 6 00:41:54 61.241.156.215:4712 -> xxx.yyy.1.14:2301 SYN ******S* Nov 6 00:41:57 61.241.156.215:4713 -> xxx.yyy.1.15:2301 SYN ******S* Nov 6 00:41:56 61.241.156.215:4725 -> xxx.yyy.1.27:2301 SYN ******S* Nov 6 00:41:54 61.241.156.215:4730 -> xxx.yyy.1.31:2301 SYN ******S* [...] Nov 6 00:53:44 61.241.156.215:4141 -> xxx.yyy.255.227:2301 SYN ******S* Nov 6 00:53:44 61.241.156.215:4107 -> xxx.yyy.255.193:2301 SYN ******S* Nov 6 00:53:44 61.241.156.215:4111 -> xxx.yyy.255.197:2301 SYN ******S* Nov 6 00:53:44 61.241.156.215:4109 -> xxx.yyy.255.195:2301 SYN ******S* Nov 6 00:53:44 61.241.156.215:4105 -> xxx.yyy.255.191:2301 SYN ******S* Nov 6 00:53:44 61.241.156.215:4108 -> xxx.yyy.255.194:2301 SYN ******S* Nov 6 00:53:45 61.241.156.215:4135 -> xxx.yyy.255.221:2301 SYN ******S* Nov 6 00:53:45 61.241.156.215:4166 -> xxx.yyy.255.252:2301 SYN ******S* 60887 Nov 6 17:47:04 67.180.245.133:1888 -> xxx.yyy.1.1:4000 SYN ******S* Nov 6 17:47:04 67.180.245.133:1891 -> xxx.yyy.1.2:4000 SYN ******S* Nov 6 17:47:04 67.180.245.133:1894 -> xxx.yyy.1.3:4000 SYN ******S* Nov 6 17:47:06 67.180.245.133:1897 -> xxx.yyy.1.4:4000 SYN ******S* Nov 6 17:47:06 67.180.245.133:1900 -> xxx.yyy.1.5:4000 SYN ******S* Nov 6 17:47:06 67.180.245.133:1903 -> xxx.yyy.1.6:4000 SYN ******S* Nov 6 17:47:06 67.180.245.133:1906 -> xxx.yyy.1.7:4000 SYN ******S* Nov 6 17:47:06 67.180.245.133:1909 -> xxx.yyy.1.8:4000 SYN ******S* [...] Nov 6 18:00:06 67.180.245.133:1387 -> xxx.yyy.255.243:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1389 -> xxx.yyy.255.244:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1398 -> xxx.yyy.255.247:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1384 -> xxx.yyy.255.242:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1392 -> xxx.yyy.255.245:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1395 -> xxx.yyy.255.246:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1407 -> xxx.yyy.255.250:4000 SYN ******S* Nov 6 18:00:06 67.180.245.133:1413 -> xxx.yyy.255.252:4000 SYN ******S* 59808 Nov 6 16:20:32 61.85.35.62:1264 -> xxx.yyy.139.28:25 SYN ******S* Nov 6 16:20:32 61.85.35.62:1269 -> xxx.yyy.139.34:25 SYN ******S* Nov 6 16:20:32 61.85.35.62:1270 -> xxx.yyy.139.35:25 SYN ******S* Nov 6 16:20:32 61.85.35.62:1277 -> xxx.yyy.139.42:25 SYN ******S* Nov 6 16:20:32 61.85.35.62:1282 -> xxx.yyy.139.47:25 SYN ******S* Nov 6 16:20:29 61.85.35.62:1283 -> xxx.yyy.139.46:25 SYN ******S* Nov 6 16:20:32 61.85.35.62:1302 -> xxx.yyy.139.66:25 SYN ******S* Nov 6 16:20:32 61.85.35.62:1266 -> xxx.yyy.139.31:25 SYN ******S* [...] Nov 6 16:25:56 61.85.35.62:3584 -> xxx.yyy.255.239:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3583 -> xxx.yyy.255.238:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3580 -> xxx.yyy.255.235:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3578 -> xxx.yyy.255.233:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3599 -> xxx.yyy.255.254:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3597 -> xxx.yyy.255.252:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3596 -> xxx.yyy.255.251:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3595 -> xxx.yyy.255.250:25 SYN ******S* Nov 6 16:25:56 61.85.35.62:3594 -> xxx.yyy.255.249:25 SYN ******S* 58212 Nov 6 13:18:17 62.39.6.83:3519 -> xxx.yyy.1.2:6129 SYN ******S* Nov 6 13:18:17 62.39.6.83:3520 -> xxx.yyy.1.3:6129 SYN ******S* Nov 6 13:18:19 62.39.6.83:3521 -> xxx.yyy.1.4:6129 SYN ******S* Nov 6 13:18:19 62.39.6.83:3522 -> xxx.yyy.1.5:6129 SYN ******S* Nov 6 13:18:16 62.39.6.83:3523 -> xxx.yyy.1.6:6129 SYN ******S* Nov 6 13:18:16 62.39.6.83:3524 -> xxx.yyy.1.7:6129 SYN ******S* Nov 6 13:18:19 62.39.6.83:3529 -> xxx.yyy.1.8:6129 SYN ******S* Nov 6 13:18:19 62.39.6.83:3531 -> xxx.yyy.1.10:6129 SYN ******S* [...] Nov 6 13:30:38 62.39.6.83:3448 -> xxx.yyy.255.225:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3457 -> xxx.yyy.255.233:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3456 -> xxx.yyy.255.232:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3458 -> xxx.yyy.255.234:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3459 -> xxx.yyy.255.235:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3460 -> xxx.yyy.255.236:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3455 -> xxx.yyy.255.231:6129 SYN ******S* Nov 6 13:30:38 62.39.6.83:3454 -> xxx.yyy.255.230:6129 SYN ******S* 56050 Nov 6 10:07:14 211.174.63.45:3707 -> xxx.yyy.1.2:1433 SYN ******S* Nov 6 10:07:17 211.174.63.45:3702 -> xxx.yyy.1.1:1433 SYN ******S* Nov 6 10:07:14 211.174.63.45:3711 -> xxx.yyy.1.3:1433 SYN ******S* Nov 6 10:07:17 211.174.63.45:3716 -> xxx.yyy.1.4:1433 SYN ******S* Nov 6 10:07:17 211.174.63.45:3731 -> xxx.yyy.1.7:1433 SYN ******S* Nov 6 10:07:17 211.174.63.45:3726 -> xxx.yyy.1.6:1433 SYN ******S* Nov 6 10:07:17 211.174.63.45:3735 -> xxx.yyy.1.8:1433 SYN ******S* Nov 6 10:07:17 211.174.63.45:3745 -> xxx.yyy.1.10:1433 SYN ******S* [...] Nov 6 10:31:19 211.174.63.45:1811 -> xxx.yyy.252.76:1433 SYN ******S* Nov 6 10:31:19 211.174.63.45:4625 -> xxx.yyy.251.188:1433 SYN ******S* Nov 6 10:31:19 211.174.63.45:4719 -> xxx.yyy.251.155:1433 SYN ******S* Nov 6 10:31:20 211.174.63.45:2544 -> xxx.yyy.252.121:1433 SYN ******S* Nov 6 10:31:21 211.174.63.45:4368 -> xxx.yyy.252.35:1433 SYN ******S* Nov 6 10:31:22 211.174.63.45:4305 -> xxx.yyy.252.87:1433 SYN ******S* Nov 6 10:31:22 211.174.63.45:1811 -> xxx.yyy.252.76:1433 SYN ******S* Nov 6 10:31:22 211.174.63.45:4655 -> xxx.yyy.252.75:1433 SYN ******S* Nov 6 10:31:23 211.174.63.45:2544 -> xxx.yyy.252.121:1433 SYN ******S* 52015 [...] 40524 Nov 6 21:23:40 61.37.231.82:17649 -> xxx.yyy.1.1:4899 SYN ******S* Nov 6 21:23:39 61.37.231.82:64369 -> xxx.yyy.1.2:4899 SYN ******S* Nov 6 21:23:39 61.37.231.82:18194 -> xxx.yyy.1.4:4899 SYN ******S* Nov 6 21:23:39 61.37.231.82:47909 -> xxx.yyy.1.5:4899 SYN ******S* Nov 6 21:23:39 61.37.231.82:44030 -> xxx.yyy.1.6:4899 SYN ******S* Nov 6 21:23:39 61.37.231.82:28342 -> xxx.yyy.1.7:4899 SYN ******S* Nov 6 21:23:39 61.37.231.82:50311 -> xxx.yyy.1.8:4899 SYN ******S* Nov 6 21:23:40 61.37.231.82:63089 -> xxx.yyy.1.11:4899 SYN ******S* [...] Nov 6 21:30:34 61.37.231.82:58423 -> xxx.yyy.255.235:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:46436 -> xxx.yyy.255.238:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:42434 -> xxx.yyy.255.241:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:6657 -> xxx.yyy.255.237:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:53395 -> xxx.yyy.255.246:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:39773 -> xxx.yyy.255.248:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:13212 -> xxx.yyy.255.253:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:15750 -> xxx.yyy.255.251:4899 SYN ******S* Nov 6 21:30:34 61.37.231.82:18090 -> xxx.yyy.255.254:4899 SYN ******S* 33422 Nov 6 13:53:57 196.36.91.26:5971 -> xxx.yyy.1.1:1433 SYN ******S* Nov 6 13:53:57 196.36.91.26:5972 -> xxx.yyy.1.2:1433 SYN ******S* Nov 6 13:53:57 196.36.91.26:5973 -> xxx.yyy.1.3:1433 SYN ******S* Nov 6 13:53:57 196.36.91.26:5974 -> xxx.yyy.1.4:1433 SYN ******S* Nov 6 13:53:57 196.36.91.26:5976 -> xxx.yyy.1.6:1433 SYN ******S* Nov 6 13:54:00 196.36.91.26:5977 -> xxx.yyy.1.7:1433 SYN ******S* Nov 6 13:53:57 196.36.91.26:5978 -> xxx.yyy.1.8:1433 SYN ******S* Nov 6 13:53:57 196.36.91.26:5980 -> xxx.yyy.1.10:1433 SYN ******S* [...] Nov 6 14:05:38 196.36.91.26:15327 -> xxx.yyy.255.197:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15330 -> xxx.yyy.255.200:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15358 -> xxx.yyy.255.225:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15372 -> xxx.yyy.255.237:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15373 -> xxx.yyy.255.238:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15381 -> xxx.yyy.255.245:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15383 -> xxx.yyy.255.247:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15384 -> xxx.yyy.255.248:1433 SYN ******S* Nov 6 14:05:38 196.36.91.26:15389 -> xxx.yyy.255.253:1433 SYN ******S* 31843 Nov 6 16:14:23 211.224.152.158:4448 -> xxx.yyy.1.7:25 SYN ******S* Nov 6 16:14:26 211.224.152.158:4449 -> xxx.yyy.1.6:25 SYN ******S* Nov 6 16:14:26 211.224.152.158:4450 -> xxx.yyy.1.5:25 SYN ******S* Nov 6 16:14:26 211.224.152.158:4454 -> xxx.yyy.1.12:25 SYN ******S* Nov 6 16:14:23 211.224.152.158:4455 -> xxx.yyy.1.11:25 SYN ******S* Nov 6 16:14:26 211.224.152.158:4456 -> xxx.yyy.1.10:25 SYN ******S* Nov 6 16:14:26 211.224.152.158:4457 -> xxx.yyy.1.9:25 SYN ******S* Nov 6 16:14:26 211.224.152.158:4458 -> xxx.yyy.1.8:25 SYN ******S* [...] Nov 6 16:20:20 211.224.152.158:2593 -> xxx.yyy.133.184:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2170 -> xxx.yyy.132.40:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2598 -> xxx.yyy.133.192:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2601 -> xxx.yyy.133.189:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2602 -> xxx.yyy.133.188:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2606 -> xxx.yyy.133.198:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2603 -> xxx.yyy.133.196:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2604 -> xxx.yyy.133.195:25 SYN ******S* Nov 6 16:20:20 211.224.152.158:2605 -> xxx.yyy.133.197:25 SYN ******S* 26896 Nov 6 02:30:06 61.158.71.210:1968 -> xxx.yyy.1.0:1433 SYN ******S* Nov 6 02:30:06 61.158.71.210:1973 -> xxx.yyy.1.2:1433 SYN ******S* Nov 6 02:30:06 61.158.71.210:1978 -> xxx.yyy.1.5:1433 SYN ******S* Nov 6 02:30:06 61.158.71.210:1971 -> xxx.yyy.1.1:1433 SYN ******S* Nov 6 02:30:06 61.158.71.210:1975 -> xxx.yyy.1.3:1433 SYN ******S* Nov 6 02:30:03 61.158.71.210:1977 -> xxx.yyy.1.4:1433 SYN ******S* Nov 6 02:30:06 61.158.71.210:1980 -> xxx.yyy.1.7:1433 SYN ******S* Nov 6 02:30:06 61.158.71.210:1982 -> xxx.yyy.1.9:1433 SYN ******S* [...] Nov 6 03:55:58 61.158.71.210:2116 -> xxx.yyy.95.248:1433 SYN ******S* Nov 6 03:55:59 61.158.71.210:2146 -> xxx.yyy.95.250:1433 SYN ******S* Nov 6 03:55:59 61.158.71.210:2140 -> xxx.yyy.95.249:1433 SYN ******S* Nov 6 03:56:00 61.158.71.210:2168 -> xxx.yyy.95.251:1433 SYN ******S* Nov 6 03:56:00 61.158.71.210:2175 -> xxx.yyy.95.252:1433 SYN ******S* Nov 6 03:56:00 61.158.71.210:2177 -> xxx.yyy.95.253:1433 SYN ******S* Nov 6 03:56:00 61.158.71.210:2189 -> xxx.yyy.95.255:1433 SYN ******S* Nov 6 03:56:00 61.158.71.210:2188 -> xxx.yyy.95.254:1433 SYN ******S* 26468 [...] 26390 [...] 21093 Nov 6 08:30:20 59.36.8.117:4489 -> xxx.yyy.64.7:17300 SYN ******S* Nov 6 08:30:20 59.36.8.117:4484 -> xxx.yyy.64.2:17300 SYN ******S* Nov 6 08:30:20 59.36.8.117:4488 -> xxx.yyy.64.6:17300 SYN ******S* Nov 6 08:30:20 59.36.8.117:4486 -> xxx.yyy.64.4:17300 SYN ******S* Nov 6 08:30:20 59.36.8.117:4490 -> xxx.yyy.64.8:17300 SYN ******S* Nov 6 08:30:21 59.36.8.117:4631 -> xxx.yyy.64.15:17300 SYN ******S* Nov 6 08:30:21 59.36.8.117:4637 -> xxx.yyy.64.21:17300 SYN ******S* Nov 6 08:30:21 59.36.8.117:4639 -> xxx.yyy.64.23:17300 SYN ******S* [...] Nov 6 09:26:01 59.36.8.117:4258 -> xxx.yyy.254.232:17300 SYN ******S* Nov 6 09:26:01 59.36.8.117:4256 -> xxx.yyy.254.230:17300 SYN ******S* Nov 6 09:26:01 59.36.8.117:4270 -> xxx.yyy.254.244:17300 SYN ******S* Nov 6 09:26:02 59.36.8.117:4440 -> xxx.yyy.254.249:17300 SYN ******S* Nov 6 09:26:02 59.36.8.117:4446 -> xxx.yyy.254.255:17300 SYN ******S* Nov 6 09:26:02 59.36.8.117:4444 -> xxx.yyy.254.253:17300 SYN ******S* Nov 6 09:26:02 59.36.8.117:4442 -> xxx.yyy.254.251:17300 SYN ******S* Nov 6 09:26:02 59.36.8.117:4445 -> xxx.yyy.254.254:17300 SYN ******S* 19332 Nov 6 00:14:02 61.152.224.121:4211 -> xxx.yyy.1.1:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4212 -> xxx.yyy.1.2:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4232 -> xxx.yyy.1.22:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4235 -> xxx.yyy.1.25:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4234 -> xxx.yyy.1.24:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4233 -> xxx.yyy.1.23:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4218 -> xxx.yyy.1.8:21 SYN ******S* Nov 6 00:14:02 61.152.224.121:4222 -> xxx.yyy.1.12:21 SYN ******S* [...] Nov 6 00:24:55 61.152.224.121:3620 -> xxx.yyy.255.238:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3621 -> xxx.yyy.255.239:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3616 -> xxx.yyy.255.234:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3622 -> xxx.yyy.255.240:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3628 -> xxx.yyy.255.246:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3610 -> xxx.yyy.255.228:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3614 -> xxx.yyy.255.232:21 SYN ******S* Nov 6 00:24:55 61.152.224.121:3633 -> xxx.yyy.255.251:21 SYN ******S* 15037 [...] 14684 [...] 14170 [...] 11145 [...] 10669 [...] 10520 Nov 6 22:55:21 221.155.238.216:1812 -> xxx.yyy.133.15:5554 SYN ******S* Nov 6 22:55:22 221.155.238.216:2353 -> xxx.yyy.133.15:1023 SYN ******S* Nov 6 22:55:24 221.155.238.216:3404 -> xxx.yyy.133.15:9898 SYN ******S* Nov 6 22:55:21 221.155.238.216:1813 -> xxx.yyy.133.16:5554 SYN ******S* Nov 6 22:55:22 221.155.238.216:2341 -> xxx.yyy.133.16:1023 SYN ******S* Nov 6 22:55:24 221.155.238.216:3398 -> xxx.yyy.133.16:9898 SYN ******S* Nov 6 22:55:21 221.155.238.216:1827 -> xxx.yyy.133.18:5554 SYN ******S* Nov 6 22:55:22 221.155.238.216:2368 -> xxx.yyy.133.18:1023 SYN ******S* [...] Nov 6 22:56:05 221.155.238.216:3658 -> xxx.yyy.153.85:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3667 -> xxx.yyy.153.88:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3888 -> xxx.yyy.153.129:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3702 -> xxx.yyy.153.95:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3763 -> xxx.yyy.153.103:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3786 -> xxx.yyy.153.107:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3797 -> xxx.yyy.153.111:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3810 -> xxx.yyy.153.110:9898 SYN ******S* Nov 6 22:56:05 221.155.238.216:3827 -> xxx.yyy.153.113:9898 SYN ******S* 9896 Nov 6 21:20:38 161.184.180.197:4392 -> xxx.yyy.69.39:291 SYN ******S* Nov 6 21:20:38 161.184.180.197:4393 -> xxx.yyy.69.39:294 SYN ******S* Nov 6 21:20:40 161.184.180.197:4400 -> xxx.yyy.69.39:288 SYN ******S* Nov 6 21:20:40 161.184.180.197:4401 -> xxx.yyy.69.39:296 SYN ******S* Nov 6 21:20:40 161.184.180.197:4402 -> xxx.yyy.69.39:298 SYN ******S* Nov 6 21:20:44 161.184.180.197:4393 -> xxx.yyy.69.39:294 SYN ******S* Nov 6 21:20:46 161.184.180.197:4402 -> xxx.yyy.69.39:298 SYN ******S* Nov 6 21:20:46 161.184.180.197:4400 -> xxx.yyy.69.39:288 SYN ******S* [...] Nov 6 23:59:58 161.184.180.197:4241 -> xxx.yyy.77.190:317 SYN ******S* Nov 6 23:59:58 161.184.180.197:4238 -> xxx.yyy.77.190:326 SYN ******S* Nov 6 23:59:53 161.184.180.197:4221 -> xxx.yyy.77.190:323 SYN ******S* Nov 6 23:59:53 161.184.180.197:4222 -> xxx.yyy.77.190:320 SYN ******S* Nov 6 23:59:58 161.184.180.197:4232 -> xxx.yyy.69.39:290 SYN ******S* Nov 6 23:59:58 161.184.180.197:4233 -> xxx.yyy.69.39:292 SYN ******S* Nov 6 23:59:58 161.184.180.197:4234 -> xxx.yyy.69.39:295 SYN ******S* Nov 6 23:59:58 161.184.180.197:4235 -> xxx.yyy.69.39:297 SYN ******S* Nov 6 23:59:58 161.184.180.197:4236 -> xxx.yyy.69.39:300 SYN ******S* 9674 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions