[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 15 04:55:46 81.192.47.235:4385 -> xxx.yyy.29.0:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4392 -> xxx.yyy.29.1:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4401 -> xxx.yyy.29.2:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4404 -> xxx.yyy.29.3:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4405 -> xxx.yyy.29.4:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4406 -> xxx.yyy.29.5:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4408 -> xxx.yyy.29.6:1433 SYN ******S* Nov 15 04:55:46 81.192.47.235:4410 -> xxx.yyy.29.7:1433 SYN ******S* [...] Nov 15 08:19:38 81.192.47.235:3604 -> xxx.yyy.255.254:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3548 -> xxx.yyy.255.244:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3554 -> xxx.yyy.255.247:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3558 -> xxx.yyy.255.248:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3566 -> xxx.yyy.255.252:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3565 -> xxx.yyy.255.251:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3564 -> xxx.yyy.255.250:1433 SYN ******S* Nov 15 08:19:39 81.192.47.235:3567 -> xxx.yyy.255.253:1433 SYN ******S* Nov 15 08:19:44 81.192.47.235:3604 -> xxx.yyy.255.254:1433 SYN ******S* 109429 Nov 15 06:46:54 217.160.227.167:2059 -> xxx.yyy.1.1:4899 SYN ******S* Nov 15 06:46:54 217.160.227.167:2060 -> xxx.yyy.1.2:4899 SYN ******S* Nov 15 06:46:54 217.160.227.167:2061 -> xxx.yyy.1.3:4899 SYN ******S* Nov 15 06:46:56 217.160.227.167:2062 -> xxx.yyy.1.4:4899 SYN ******S* Nov 15 06:46:56 217.160.227.167:2063 -> xxx.yyy.1.5:4899 SYN ******S* Nov 15 06:46:56 217.160.227.167:2064 -> xxx.yyy.1.6:4899 SYN ******S* Nov 15 06:46:56 217.160.227.167:2065 -> xxx.yyy.1.7:4899 SYN ******S* Nov 15 06:46:56 217.160.227.167:2066 -> xxx.yyy.1.8:4899 SYN ******S* [...] Nov 15 06:58:48 217.160.227.167:4087 -> xxx.yyy.255.222:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4012 -> xxx.yyy.255.205:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4459 -> xxx.yyy.255.250:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4493 -> xxx.yyy.255.254:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4314 -> xxx.yyy.255.238:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4089 -> xxx.yyy.255.223:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4145 -> xxx.yyy.255.229:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4058 -> xxx.yyy.255.214:4899 SYN ******S* Nov 15 06:58:48 217.160.227.167:4022 -> xxx.yyy.255.207:4899 SYN ******S* 93716 Nov 15 02:37:04 164.124.141.110:1121 -> xxx.yyy.1.2:139 SYN ******S* Nov 15 02:37:04 164.124.141.110:1120 -> xxx.yyy.1.1:139 SYN ******S* Nov 15 02:37:04 164.124.141.110:1122 -> xxx.yyy.1.3:139 SYN ******S* Nov 15 02:37:01 164.124.141.110:1123 -> xxx.yyy.1.4:139 SYN ******S* Nov 15 02:37:04 164.124.141.110:1125 -> xxx.yyy.1.6:139 SYN ******S* Nov 15 02:37:04 164.124.141.110:1126 -> xxx.yyy.1.7:139 SYN ******S* Nov 15 02:37:04 164.124.141.110:1128 -> xxx.yyy.1.9:139 SYN ******S* Nov 15 02:37:04 164.124.141.110:1127 -> xxx.yyy.1.8:139 SYN ******S* [...] Nov 15 02:49:11 164.124.141.110:3635 -> xxx.yyy.255.242:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3637 -> xxx.yyy.255.244:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3641 -> xxx.yyy.255.248:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3646 -> xxx.yyy.255.253:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3645 -> xxx.yyy.255.252:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3643 -> xxx.yyy.255.250:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3644 -> xxx.yyy.255.251:139 SYN ******S* Nov 15 02:49:11 164.124.141.110:3647 -> xxx.yyy.255.254:139 SYN ******S* 66461 Nov 15 01:27:56 130.227.229.146:1535 -> xxx.yyy.1.2:1433 SYN ******S* Nov 15 01:27:56 130.227.229.146:1537 -> xxx.yyy.1.3:1433 SYN ******S* Nov 15 01:27:56 130.227.229.146:1539 -> xxx.yyy.1.4:1433 SYN ******S* Nov 15 01:27:56 130.227.229.146:1541 -> xxx.yyy.1.5:1433 SYN ******S* Nov 15 01:27:56 130.227.229.146:1543 -> xxx.yyy.1.6:1433 SYN ******S* Nov 15 01:27:56 130.227.229.146:1545 -> xxx.yyy.1.7:1433 SYN ******S* Nov 15 01:27:56 130.227.229.146:1547 -> xxx.yyy.1.8:1433 SYN ******S* Nov 15 01:27:53 130.227.229.146:1549 -> xxx.yyy.1.9:1433 SYN ******S* [...] Nov 15 01:46:08 130.227.229.146:2411 -> xxx.yyy.zzz.242:1433 SYN ******S* Nov 15 01:46:08 130.227.229.146:2398 -> xxx.yyy.zzz.235:1433 SYN ******S* Nov 15 01:46:08 130.227.229.146:2409 -> xxx.yyy.zzz.241:1433 SYN ******S* Nov 15 01:46:08 130.227.229.146:2413 -> xxx.yyy.zzz.243:1433 SYN ******S* Nov 15 01:46:08 130.227.229.146:2404 -> xxx.yyy.zzz.238:1433 SYN ******S* Nov 15 01:46:08 130.227.229.146:2406 -> xxx.yyy.zzz.239:1433 SYN ******S* Nov 15 01:46:09 130.227.229.146:2423 -> xxx.yyy.zzz.248:1433 SYN ******S* Nov 15 01:46:09 130.227.229.146:2417 -> xxx.yyy.zzz.245:1433 SYN ******S* Nov 15 01:46:09 130.227.229.146:2427 -> xxx.yyy.zzz.250:1433 SYN ******S* 59115 Nov 15 09:19:02 210.222.19.52:1326 -> xxx.yyy.1.2:1433 SYN ******S* Nov 15 09:19:02 210.222.19.52:1327 -> xxx.yyy.1.3:1433 SYN ******S* Nov 15 09:19:05 210.222.19.52:1332 -> xxx.yyy.1.8:1433 SYN ******S* Nov 15 09:19:05 210.222.19.52:1333 -> xxx.yyy.1.9:1433 SYN ******S* Nov 15 09:19:05 210.222.19.52:1329 -> xxx.yyy.1.5:1433 SYN ******S* Nov 15 09:19:05 210.222.19.52:1334 -> xxx.yyy.1.10:1433 SYN ******S* Nov 15 09:19:05 210.222.19.52:1336 -> xxx.yyy.1.12:1433 SYN ******S* Nov 15 09:19:05 210.222.19.52:1338 -> xxx.yyy.1.13:1433 SYN ******S* [...] Nov 15 09:30:53 210.222.19.52:3724 -> xxx.yyy.255.213:1433 SYN ******S* Nov 15 09:30:53 210.222.19.52:3722 -> xxx.yyy.255.211:1433 SYN ******S* Nov 15 09:30:53 210.222.19.52:3723 -> xxx.yyy.255.212:1433 SYN ******S* Nov 15 09:30:53 210.222.19.52:3726 -> xxx.yyy.255.215:1433 SYN ******S* Nov 15 09:30:54 210.222.19.52:3725 -> xxx.yyy.255.214:1433 SYN ******S* Nov 15 09:30:54 210.222.19.52:3743 -> xxx.yyy.255.232:1433 SYN ******S* Nov 15 09:30:54 210.222.19.52:3763 -> xxx.yyy.255.252:1433 SYN ******S* Nov 15 09:30:54 210.222.19.52:3760 -> xxx.yyy.255.249:1433 SYN ******S* Nov 15 09:30:54 210.222.19.52:3764 -> xxx.yyy.255.253:1433 SYN ******S* 39528 Nov 15 03:36:22 67.117.96.171:2503 -> xxx.yyy.1.1:4899 SYN ******S* Nov 15 03:36:22 67.117.96.171:2504 -> xxx.yyy.1.2:4899 SYN ******S* Nov 15 03:36:22 67.117.96.171:2505 -> xxx.yyy.1.3:4899 SYN ******S* Nov 15 03:36:21 67.117.96.171:2506 -> xxx.yyy.1.4:4899 SYN ******S* Nov 15 03:36:21 67.117.96.171:2507 -> xxx.yyy.1.5:4899 SYN ******S* Nov 15 03:36:21 67.117.96.171:2508 -> xxx.yyy.1.6:4899 SYN ******S* Nov 15 03:36:21 67.117.96.171:2509 -> xxx.yyy.1.7:4899 SYN ******S* Nov 15 03:36:21 67.117.96.171:2510 -> xxx.yyy.1.8:4899 SYN ******S* [...] Nov 15 03:40:02 67.117.96.171:2628 -> xxx.yyy.255.244:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2629 -> xxx.yyy.255.245:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2630 -> xxx.yyy.255.246:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2631 -> xxx.yyy.255.247:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2632 -> xxx.yyy.255.248:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2633 -> xxx.yyy.255.249:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2635 -> xxx.yyy.255.251:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2637 -> xxx.yyy.255.253:4899 SYN ******S* Nov 15 03:40:02 67.117.96.171:2638 -> xxx.yyy.255.254:4899 SYN ******S* 36869 Nov 15 07:57:23 61.222.186.42:1209 -> xxx.yyy.1.1:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1210 -> xxx.yyy.1.2:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1211 -> xxx.yyy.1.3:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1212 -> xxx.yyy.1.4:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1213 -> xxx.yyy.1.5:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1214 -> xxx.yyy.1.6:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1215 -> xxx.yyy.1.7:1433 SYN ******S* Nov 15 07:57:23 61.222.186.42:1216 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 15 08:31:16 61.222.186.42:1220 -> xxx.yyy.255.246:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1221 -> xxx.yyy.255.247:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1222 -> xxx.yyy.255.248:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1224 -> xxx.yyy.255.250:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1225 -> xxx.yyy.255.251:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1226 -> xxx.yyy.255.252:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1227 -> xxx.yyy.255.253:1433 SYN ******S* Nov 15 08:31:16 61.222.186.42:1228 -> xxx.yyy.255.254:1433 SYN ******S* Nov 15 08:31:19 61.222.186.42:1227 -> xxx.yyy.255.253:1433 SYN ******S* 35826 Nov 15 13:08:42 195.17.24.248:3314 -> xxx.yyy.1.3:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3318 -> xxx.yyy.1.7:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3319 -> xxx.yyy.1.8:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3320 -> xxx.yyy.1.9:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3325 -> xxx.yyy.1.14:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3328 -> xxx.yyy.1.17:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3329 -> xxx.yyy.1.18:443 SYN ******S* Nov 15 13:08:42 195.17.24.248:3330 -> xxx.yyy.1.19:443 SYN ******S* [...] Nov 15 13:20:02 195.17.24.248:2277 -> xxx.yyy.255.243:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2271 -> xxx.yyy.255.237:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2286 -> xxx.yyy.255.252:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2287 -> xxx.yyy.255.253:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2280 -> xxx.yyy.255.246:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2283 -> xxx.yyy.255.249:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2284 -> xxx.yyy.255.250:443 SYN ******S* Nov 15 13:20:02 195.17.24.248:2288 -> xxx.yyy.255.254:443 SYN ******S* 35047 Nov 15 09:33:23 206.13.56.94:3947 -> xxx.yyy.1.6:1433 SYN ******S* Nov 15 09:33:23 206.13.56.94:4082 -> xxx.yyy.1.5:1433 SYN ******S* Nov 15 09:33:26 206.13.56.94:4143 -> xxx.yyy.1.1:1433 SYN ******S* Nov 15 09:33:24 206.13.56.94:4483 -> xxx.yyy.1.57:1433 SYN ******S* Nov 15 09:33:27 206.13.56.94:4502 -> xxx.yyy.1.56:1433 SYN ******S* Nov 15 09:33:24 206.13.56.94:4535 -> xxx.yyy.1.54:1433 SYN ******S* Nov 15 09:33:27 206.13.56.94:4552 -> xxx.yyy.1.53:1433 SYN ******S* Nov 15 09:33:24 206.13.56.94:4569 -> xxx.yyy.1.52:1433 SYN ******S* [...] Nov 15 09:56:58 206.13.56.94:1802 -> xxx.yyy.255.224:1433 SYN ******S* Nov 15 09:56:58 206.13.56.94:1833 -> xxx.yyy.255.227:1433 SYN ******S* Nov 15 09:56:58 206.13.56.94:1841 -> xxx.yyy.255.228:1433 SYN ******S* Nov 15 09:56:59 206.13.56.94:1897 -> xxx.yyy.255.235:1433 SYN ******S* Nov 15 09:56:59 206.13.56.94:1905 -> xxx.yyy.255.236:1433 SYN ******S* Nov 15 09:56:59 206.13.56.94:1929 -> xxx.yyy.255.239:1433 SYN ******S* Nov 15 09:56:59 206.13.56.94:1985 -> xxx.yyy.255.246:1433 SYN ******S* Nov 15 09:56:59 206.13.56.94:2025 -> xxx.yyy.255.251:1433 SYN ******S* 34601 Nov 15 14:41:18 69.93.247.178:1739 -> xxx.yyy.1.3:1433 SYN ******S* Nov 15 14:41:21 69.93.247.178:1740 -> xxx.yyy.1.4:1433 SYN ******S* Nov 15 14:41:18 69.93.247.178:1741 -> xxx.yyy.1.5:1433 SYN ******S* Nov 15 14:41:18 69.93.247.178:1742 -> xxx.yyy.1.6:1433 SYN ******S* Nov 15 14:41:18 69.93.247.178:1743 -> xxx.yyy.1.7:1433 SYN ******S* Nov 15 14:41:21 69.93.247.178:1749 -> xxx.yyy.1.13:1433 SYN ******S* Nov 15 14:41:21 69.93.247.178:1750 -> xxx.yyy.1.14:1433 SYN ******S* Nov 15 14:41:21 69.93.247.178:1751 -> xxx.yyy.1.15:1433 SYN ******S* [...] Nov 15 14:53:00 69.93.247.178:4053 -> xxx.yyy.255.190:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4050 -> xxx.yyy.255.187:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4067 -> xxx.yyy.255.204:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4070 -> xxx.yyy.255.207:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4069 -> xxx.yyy.255.206:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4071 -> xxx.yyy.255.208:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4068 -> xxx.yyy.255.205:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4072 -> xxx.yyy.255.209:1433 SYN ******S* Nov 15 14:53:00 69.93.247.178:4065 -> xxx.yyy.255.202:1433 SYN ******S* 31248 Nov 15 16:00:54 216.62.194.131:60370 -> xxx.yyy.1.2:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60371 -> xxx.yyy.1.3:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60374 -> xxx.yyy.1.6:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60376 -> xxx.yyy.1.8:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60378 -> xxx.yyy.1.10:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60380 -> xxx.yyy.1.12:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60381 -> xxx.yyy.1.13:7100 SYN ******S* Nov 15 16:00:54 216.62.194.131:60384 -> xxx.yyy.1.16:7100 SYN ******S* [...] Nov 15 16:37:32 216.62.194.131:60166 -> xxx.yyy.255.240:7100 SYN ******S* Nov 15 16:37:32 216.62.194.131:60167 -> xxx.yyy.255.241:7100 SYN ******S* Nov 15 16:37:32 216.62.194.131:60168 -> xxx.yyy.255.242:7100 SYN ******S* Nov 15 16:37:32 216.62.194.131:60169 -> xxx.yyy.255.243:7100 SYN ******S* Nov 15 16:37:32 216.62.194.131:60170 -> xxx.yyy.255.244:7100 SYN ******S* Nov 15 16:37:33 216.62.194.131:60174 -> xxx.yyy.255.248:7100 SYN ******S* Nov 15 16:37:33 216.62.194.131:60179 -> xxx.yyy.255.253:7100 SYN ******S* Nov 15 16:37:33 216.62.194.131:60180 -> xxx.yyy.255.254:7100 SYN ******S* Nov 15 16:37:33 216.62.194.131:60181 -> xxx.yyy.255.255:7100 SYN ******S* 19232 [...] 16101 [...] 11356 [...] 10877 Nov 15 06:56:48 217.217.42.124:2333 -> xxx.yyy.133.238:5554 SYN ******S* Nov 15 06:56:49 217.217.42.124:2974 -> xxx.yyy.133.238:1023 SYN ******S* Nov 15 06:56:51 217.217.42.124:4749 -> xxx.yyy.133.238:9898 SYN ******S* Nov 15 06:56:48 217.217.42.124:2337 -> xxx.yyy.133.241:5554 SYN ******S* Nov 15 06:56:49 217.217.42.124:2976 -> xxx.yyy.133.241:1023 SYN ******S* Nov 15 06:56:51 217.217.42.124:4761 -> xxx.yyy.133.241:9898 SYN ******S* Nov 15 06:56:48 217.217.42.124:2341 -> xxx.yyy.133.243:5554 SYN ******S* Nov 15 06:56:49 217.217.42.124:2978 -> xxx.yyy.133.243:1023 SYN ******S* [...] Nov 15 06:57:32 217.217.42.124:4461 -> xxx.yyy.154.86:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4451 -> xxx.yyy.154.82:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4470 -> xxx.yyy.154.88:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4480 -> xxx.yyy.154.89:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4542 -> xxx.yyy.154.98:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4536 -> xxx.yyy.154.100:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4524 -> xxx.yyy.154.96:9898 SYN ******S* Nov 15 06:57:32 217.217.42.124:4544 -> xxx.yyy.154.99:9898 SYN ******S* 9880 Nov 15 01:36:18 220.87.105.184:2974 -> xxx.yyy.174.3:5554 SYN ******S* Nov 15 01:36:19 220.87.105.184:3479 -> xxx.yyy.174.3:1023 SYN ******S* Nov 15 01:36:21 220.87.105.184:4532 -> xxx.yyy.174.3:9898 SYN ******S* Nov 15 01:36:18 220.87.105.184:2981 -> xxx.yyy.174.10:5554 SYN ******S* Nov 15 01:36:19 220.87.105.184:3497 -> xxx.yyy.174.10:1023 SYN ******S* Nov 15 01:36:21 220.87.105.184:4605 -> xxx.yyy.174.10:9898 SYN ******S* Nov 15 01:36:18 220.87.105.184:2979 -> xxx.yyy.174.8:5554 SYN ******S* Nov 15 01:36:19 220.87.105.184:3495 -> xxx.yyy.174.8:1023 SYN ******S* [...] Nov 15 01:37:04 220.87.105.184:3822 -> xxx.yyy.194.92:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3827 -> xxx.yyy.194.97:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3835 -> xxx.yyy.194.102:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3831 -> xxx.yyy.194.101:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3849 -> xxx.yyy.194.106:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3855 -> xxx.yyy.194.109:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3858 -> xxx.yyy.194.112:9898 SYN ******S* Nov 15 01:37:04 220.87.105.184:3857 -> xxx.yyy.194.111:9898 SYN ******S* 9182 [...] 7758 [...] 7562 Nov 15 23:54:40 61.50.181.17:3210 -> xxx.yyy.72.194:5554 SYN ******S* Nov 15 23:54:41 61.50.181.17:3759 -> xxx.yyy.72.194:1023 SYN ******S* Nov 15 23:54:43 61.50.181.17:1413 -> xxx.yyy.72.194:9898 SYN ******S* Nov 15 23:54:40 61.50.181.17:3240 -> xxx.yyy.72.198:5554 SYN ******S* Nov 15 23:54:43 61.50.181.17:1427 -> xxx.yyy.72.198:9898 SYN ******S* Nov 15 23:54:40 61.50.181.17:3241 -> xxx.yyy.72.200:5554 SYN ******S* Nov 15 23:54:41 61.50.181.17:3792 -> xxx.yyy.72.200:1023 SYN ******S* Nov 15 23:54:43 61.50.181.17:1420 -> xxx.yyy.72.200:9898 SYN ******S* [...] Nov 15 23:56:01 61.50.181.17:1825 -> xxx.yyy.72.188:5554 SYN ******S* Nov 15 23:56:02 61.50.181.17:2417 -> xxx.yyy.72.188:1023 SYN ******S* Nov 15 23:56:04 61.50.181.17:3672 -> xxx.yyy.72.188:9898 SYN ******S* Nov 15 23:56:01 61.50.181.17:1885 -> xxx.yyy.72.192:5554 SYN ******S* Nov 15 23:56:02 61.50.181.17:2468 -> xxx.yyy.72.192:1023 SYN ******S* Nov 15 23:56:02 61.50.181.17:2456 -> xxx.yyy.72.189:1023 SYN ******S* Nov 15 23:56:02 61.50.181.17:2457 -> xxx.yyy.72.190:1023 SYN ******S* Nov 15 23:56:04 61.50.181.17:3572 -> xxx.yyy.72.186:9898 SYN ******S* Nov 15 23:56:04 61.50.181.17:3726 -> xxx.yyy.72.179:9898 SYN ******S* 5221 Nov 15 23:56:35 211.95.209.173:3975 -> xxx.yyy.195.88:5554 SYN ******S* Nov 15 23:56:36 211.95.209.173:4277 -> xxx.yyy.195.88:1023 SYN ******S* Nov 15 23:56:38 211.95.209.173:1210 -> xxx.yyy.195.88:9898 SYN ******S* Nov 15 23:56:35 211.95.209.173:3982 -> xxx.yyy.195.90:5554 SYN ******S* Nov 15 23:56:36 211.95.209.173:4279 -> xxx.yyy.195.90:1023 SYN ******S* Nov 15 23:56:38 211.95.209.173:1215 -> xxx.yyy.195.90:9898 SYN ******S* Nov 15 23:56:35 211.95.209.173:3977 -> xxx.yyy.195.89:5554 SYN ******S* Nov 15 23:56:36 211.95.209.173:4278 -> xxx.yyy.195.89:1023 SYN ******S* [...] Nov 15 23:58:28 211.95.209.173:1662 -> xxx.yyy.197.10:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1666 -> xxx.yyy.197.11:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1674 -> xxx.yyy.196.241:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1677 -> xxx.yyy.197.5:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1678 -> xxx.yyy.196.248:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1691 -> xxx.yyy.197.13:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1704 -> xxx.yyy.196.252:9898 SYN ******S* Nov 15 23:58:28 211.95.209.173:1703 -> xxx.yyy.196.250:9898 SYN ******S* 5125 Nov 15 22:57:03 218.147.114.183:2794 -> xxx.yyy.236.81:5554 SYN ******S* Nov 15 22:57:04 218.147.114.183:2988 -> xxx.yyy.236.81:1023 SYN ******S* Nov 15 22:57:03 218.147.114.183:2797 -> xxx.yyy.236.83:5554 SYN ******S* Nov 15 22:57:03 218.147.114.183:2802 -> xxx.yyy.236.87:5554 SYN ******S* Nov 15 22:57:04 218.147.114.183:3003 -> xxx.yyy.236.87:1023 SYN ******S* Nov 15 22:57:03 218.147.114.183:2818 -> xxx.yyy.236.95:5554 SYN ******S* Nov 15 22:57:04 218.147.114.183:3017 -> xxx.yyy.236.95:1023 SYN ******S* Nov 15 22:57:03 218.147.114.183:2788 -> xxx.yyy.236.77:5554 SYN ******S* [...] Nov 15 22:59:27 218.147.114.183:1394 -> xxx.yyy.255.205:9898 SYN ******S* Nov 15 22:59:27 218.147.114.183:1396 -> xxx.yyy.255.207:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1507 -> xxx.yyy.255.224:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1528 -> xxx.yyy.255.241:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1514 -> xxx.yyy.255.231:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1515 -> xxx.yyy.255.232:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1543 -> xxx.yyy.255.248:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1542 -> xxx.yyy.255.247:9898 SYN ******S* Nov 15 22:59:28 218.147.114.183:1526 -> xxx.yyy.255.240:9898 SYN ******S* 4950 Nov 15 23:08:48 222.99.158.206:1205 -> xxx.yyy.236.79:5554 SYN ******S* Nov 15 23:08:50 222.99.158.206:1206 -> xxx.yyy.236.88:5554 SYN ******S* Nov 15 23:08:48 222.99.158.206:1212 -> xxx.yyy.236.94:5554 SYN ******S* Nov 15 23:08:48 222.99.158.206:1213 -> xxx.yyy.236.95:5554 SYN ******S* Nov 15 23:08:48 222.99.158.206:1208 -> xxx.yyy.236.90:5554 SYN ******S* Nov 15 23:08:48 222.99.158.206:1207 -> xxx.yyy.236.89:5554 SYN ******S* Nov 15 23:08:48 222.99.158.206:1215 -> xxx.yyy.236.97:5554 SYN ******S* Nov 15 23:08:48 222.99.158.206:1277 -> xxx.yyy.236.81:5554 SYN ******S* [...] Nov 15 23:13:09 222.99.158.206:3276 -> xxx.yyy.254.174:9898 SYN ******S* Nov 15 23:13:10 222.99.158.206:1846 -> xxx.yyy.255.246:9898 SYN ******S* Nov 15 23:13:10 222.99.158.206:1871 -> xxx.yyy.255.247:9898 SYN ******S* Nov 15 23:13:10 222.99.158.206:4238 -> xxx.yyy.255.218:9898 SYN ******S* Nov 15 23:13:10 222.99.158.206:4363 -> xxx.yyy.255.254:9898 SYN ******S* Nov 15 23:13:10 222.99.158.206:1711 -> xxx.yyy.253.217:1023 SYN ******S* Nov 15 23:13:10 222.99.158.206:4648 -> xxx.yyy.255.253:9898 SYN ******S* Nov 15 23:13:14 222.99.158.206:4421 -> xxx.yyy.253.216:9898 SYN ******S* 4940 Nov 15 23:56:47 221.203.169.200:1081 -> xxx.yyy.215.216:5554 SYN ******S* Nov 15 23:56:47 221.203.169.200:1078 -> xxx.yyy.215.214:5554 SYN ******S* Nov 15 23:56:48 221.203.169.200:2324 -> xxx.yyy.215.214:1023 SYN ******S* Nov 15 23:56:47 221.203.169.200:1086 -> xxx.yyy.215.218:5554 SYN ******S* Nov 15 23:56:47 221.203.169.200:1087 -> xxx.yyy.215.219:5554 SYN ******S* Nov 15 23:56:48 221.203.169.200:2334 -> xxx.yyy.215.219:1023 SYN ******S* Nov 15 23:56:50 221.203.169.200:4024 -> xxx.yyy.215.219:9898 SYN ******S* Nov 15 23:56:47 221.203.169.200:1099 -> xxx.yyy.215.222:5554 SYN ******S* [...] Nov 15 23:58:33 221.203.169.200:1211 -> xxx.yyy.236.21:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1194 -> xxx.yyy.236.15:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1307 -> xxx.yyy.236.66:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1308 -> xxx.yyy.236.67:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1319 -> xxx.yyy.236.71:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1317 -> xxx.yyy.236.69:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1322 -> xxx.yyy.236.73:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1323 -> xxx.yyy.236.74:9898 SYN ******S* Nov 15 23:58:33 221.203.169.200:1325 -> xxx.yyy.236.76:9898 SYN ******S* 4919 [...] 4655 Nov 15 23:56:56 211.90.19.249:54388 -> xxx.yyy.174.230:1023 SYN ******S* Nov 15 23:56:56 211.90.19.249:54395 -> xxx.yyy.174.235:1023 SYN ******S* Nov 15 23:56:58 211.90.19.249:54660 -> xxx.yyy.174.235:9898 SYN ******S* Nov 15 23:56:56 211.90.19.249:54396 -> xxx.yyy.174.236:1023 SYN ******S* Nov 15 23:56:56 211.90.19.249:54398 -> xxx.yyy.174.232:1023 SYN ******S* Nov 15 23:56:56 211.90.19.249:54399 -> xxx.yyy.174.233:1023 SYN ******S* Nov 15 23:56:56 211.90.19.249:54405 -> xxx.yyy.174.238:1023 SYN ******S* Nov 15 23:56:56 211.90.19.249:54406 -> xxx.yyy.174.237:1023 SYN ******S* [...] Nov 15 23:58:59 211.90.19.249:36803 -> xxx.yyy.194.196:9898 SYN ******S* Nov 15 23:58:59 211.90.19.249:36852 -> xxx.yyy.195.82:1023 SYN ******S* Nov 15 23:58:59 211.90.19.249:36854 -> xxx.yyy.194.244:9898 SYN ******S* Nov 15 23:58:59 211.90.19.249:36855 -> xxx.yyy.195.83:1023 SYN ******S* Nov 15 23:58:59 211.90.19.249:36856 -> xxx.yyy.195.84:1023 SYN ******S* Nov 15 23:59:01 211.90.19.249:37072 -> xxx.yyy.195.42:9898 SYN ******S* Nov 15 23:59:01 211.90.19.249:37073 -> xxx.yyy.195.51:9898 SYN ******S* Nov 15 23:59:02 211.90.19.249:37205 -> xxx.yyy.195.85:9898 SYN ******S* 4486 Nov 15 22:56:39 221.145.19.16:3684 -> xxx.yyy.215.222:5554 SYN ******S* Nov 15 22:56:39 221.145.19.16:3731 -> xxx.yyy.215.236:5554 SYN ******S* Nov 15 22:56:39 221.145.19.16:3724 -> xxx.yyy.215.233:5554 SYN ******S* Nov 15 22:56:39 221.145.19.16:3733 -> xxx.yyy.215.238:5554 SYN ******S* Nov 15 22:56:39 221.145.19.16:3732 -> xxx.yyy.215.237:5554 SYN ******S* Nov 15 22:56:39 221.145.19.16:3705 -> xxx.yyy.215.229:5554 SYN ******S* Nov 15 22:56:42 221.145.19.16:4324 -> xxx.yyy.215.229:9898 SYN ******S* Nov 15 22:56:39 221.145.19.16:3921 -> xxx.yyy.216.5:5554 SYN ******S* [...] Nov 15 22:58:20 221.145.19.16:3226 -> xxx.yyy.236.72:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3217 -> xxx.yyy.236.71:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3215 -> xxx.yyy.236.70:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3229 -> xxx.yyy.236.73:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3247 -> xxx.yyy.236.76:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3239 -> xxx.yyy.236.75:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3037 -> xxx.yyy.236.51:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3041 -> xxx.yyy.236.52:9898 SYN ******S* Nov 15 22:58:20 221.145.19.16:3050 -> xxx.yyy.236.54:9898 SYN ******S* 4141 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions