[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 17 07:19:36 64.202.132.51:1428 -> xxx.yyy.1.1:1433 SYN ******S* Nov 17 07:19:36 64.202.132.51:1429 -> xxx.yyy.1.2:1433 SYN ******S* Nov 17 07:19:36 64.202.132.51:1431 -> xxx.yyy.1.3:1433 SYN ******S* Nov 17 07:19:36 64.202.132.51:1432 -> xxx.yyy.1.4:1433 SYN ******S* Nov 17 07:19:36 64.202.132.51:1435 -> xxx.yyy.1.5:1433 SYN ******S* Nov 17 07:19:37 64.202.132.51:1436 -> xxx.yyy.1.6:1433 SYN ******S* Nov 17 07:19:37 64.202.132.51:1438 -> xxx.yyy.1.8:1433 SYN ******S* Nov 17 07:19:34 64.202.132.51:1439 -> xxx.yyy.1.9:1433 SYN ******S* [...] Nov 17 09:57:58 64.202.132.51:2749 -> xxx.yyy.255.243:1433 SYN ******S* Nov 17 09:57:58 64.202.132.51:2754 -> xxx.yyy.255.245:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2756 -> xxx.yyy.255.247:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2758 -> xxx.yyy.255.249:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2755 -> xxx.yyy.255.246:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2757 -> xxx.yyy.255.248:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2761 -> xxx.yyy.255.250:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2762 -> xxx.yyy.255.251:1433 SYN ******S* Nov 17 09:57:59 64.202.132.51:2767 -> xxx.yyy.255.253:1433 SYN ******S* 91532 Nov 17 03:48:06 195.141.187.218:3109 -> xxx.yyy.1.2:400 SYN ******S* Nov 17 03:48:05 195.141.187.218:3108 -> xxx.yyy.1.1:400 SYN ******S* Nov 17 03:48:06 195.141.187.218:3110 -> xxx.yyy.1.3:400 SYN ******S* Nov 17 03:48:07 195.141.187.218:3111 -> xxx.yyy.1.4:400 SYN ******S* Nov 17 03:48:07 195.141.187.218:3112 -> xxx.yyy.1.5:400 SYN ******S* Nov 17 03:48:07 195.141.187.218:3113 -> xxx.yyy.1.6:400 SYN ******S* Nov 17 03:48:07 195.141.187.218:3114 -> xxx.yyy.1.7:400 SYN ******S* Nov 17 03:48:07 195.141.187.218:3115 -> xxx.yyy.1.8:400 SYN ******S* [...] Nov 17 03:59:52 195.141.187.218:3027 -> xxx.yyy.255.240:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3041 -> xxx.yyy.255.254:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3038 -> xxx.yyy.255.251:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3039 -> xxx.yyy.255.252:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3035 -> xxx.yyy.255.248:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3036 -> xxx.yyy.255.249:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3040 -> xxx.yyy.255.253:400 SYN ******S* Nov 17 03:59:52 195.141.187.218:3037 -> xxx.yyy.255.250:400 SYN ******S* 66211 Nov 17 17:11:55 212.204.177.14:1681 -> xxx.yyy.1.0:1433 SYN ******S* Nov 17 17:11:58 212.204.177.14:1683 -> xxx.yyy.1.2:1433 SYN ******S* Nov 17 17:11:58 212.204.177.14:1684 -> xxx.yyy.1.3:1433 SYN ******S* Nov 17 17:11:55 212.204.177.14:1687 -> xxx.yyy.1.5:1433 SYN ******S* Nov 17 17:11:55 212.204.177.14:1688 -> xxx.yyy.1.6:1433 SYN ******S* Nov 17 17:11:58 212.204.177.14:1690 -> xxx.yyy.1.8:1433 SYN ******S* Nov 17 17:11:55 212.204.177.14:1693 -> xxx.yyy.1.10:1433 SYN ******S* Nov 17 17:11:58 212.204.177.14:1695 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 17 20:30:35 212.204.177.14:4391 -> xxx.yyy.222.94:1433 SYN ******S* Nov 17 20:30:35 212.204.177.14:4371 -> xxx.yyy.222.74:1433 SYN ******S* Nov 17 20:30:35 212.204.177.14:4395 -> xxx.yyy.222.98:1433 SYN ******S* Nov 17 20:30:35 212.204.177.14:4396 -> xxx.yyy.222.99:1433 SYN ******S* Nov 17 20:30:35 212.204.177.14:4397 -> xxx.yyy.222.100:1433 SYN ******S* Nov 17 20:30:36 212.204.177.14:4400 -> xxx.yyy.222.103:1433 SYN ******S* Nov 17 20:30:36 212.204.177.14:4403 -> xxx.yyy.222.106:1433 SYN ******S* Nov 17 20:30:36 212.204.177.14:4404 -> xxx.yyy.222.107:1433 SYN ******S* 55137 Nov 17 20:42:47 82.37.185.132:49163 -> xxx.yyy.1.4:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49164 -> xxx.yyy.1.5:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49165 -> xxx.yyy.1.6:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49171 -> xxx.yyy.1.12:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49170 -> xxx.yyy.1.11:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49174 -> xxx.yyy.1.15:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49176 -> xxx.yyy.1.17:1433 SYN ******S* Nov 17 20:42:47 82.37.185.132:49177 -> xxx.yyy.1.18:1433 SYN ******S* [...] Nov 17 22:37:15 82.37.185.132:60562 -> xxx.yyy.255.232:1433 SYN ******S* Nov 17 22:37:15 82.37.185.132:60568 -> xxx.yyy.255.233:1433 SYN ******S* Nov 17 22:37:15 82.37.185.132:60570 -> xxx.yyy.255.234:1433 SYN ******S* Nov 17 22:37:15 82.37.185.132:60573 -> xxx.yyy.255.235:1433 SYN ******S* Nov 17 22:37:16 82.37.185.132:60599 -> xxx.yyy.255.242:1433 SYN ******S* Nov 17 22:37:16 82.37.185.132:60612 -> xxx.yyy.255.251:1433 SYN ******S* Nov 17 22:37:16 82.37.185.132:60613 -> xxx.yyy.255.252:1433 SYN ******S* Nov 17 22:37:16 82.37.185.132:60619 -> xxx.yyy.255.254:1433 SYN ******S* 52570 Nov 17 02:23:46 65.68.89.105:4442 -> xxx.yyy.1.3:1433 SYN ******S* Nov 17 02:23:47 65.68.89.105:4448 -> xxx.yyy.1.6:1433 SYN ******S* Nov 17 02:23:47 65.68.89.105:4449 -> xxx.yyy.1.7:1433 SYN ******S* Nov 17 02:23:44 65.68.89.105:4450 -> xxx.yyy.1.8:1433 SYN ******S* Nov 17 02:23:47 65.68.89.105:4452 -> xxx.yyy.1.10:1433 SYN ******S* Nov 17 02:23:47 65.68.89.105:4456 -> xxx.yyy.1.14:1433 SYN ******S* Nov 17 02:23:47 65.68.89.105:4462 -> xxx.yyy.1.18:1433 SYN ******S* Nov 17 02:23:47 65.68.89.105:4465 -> xxx.yyy.1.20:1433 SYN ******S* [...] Nov 17 02:28:07 65.68.89.105:2422 -> xxx.yyy.255.241:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2418 -> xxx.yyy.255.238:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2398 -> xxx.yyy.255.219:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2395 -> xxx.yyy.255.216:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2415 -> xxx.yyy.255.235:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2412 -> xxx.yyy.255.232:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2432 -> xxx.yyy.255.251:1433 SYN ******S* Nov 17 02:28:07 65.68.89.105:2402 -> xxx.yyy.255.223:1433 SYN ******S* 50976 Nov 17 05:05:18 198.213.51.27:4970 -> xxx.yyy.1.8:8000 SYN ******S* Nov 17 05:05:18 198.213.51.27:4971 -> xxx.yyy.1.9:8000 SYN ******S* Nov 17 05:05:18 198.213.51.27:4972 -> xxx.yyy.1.10:8000 SYN ******S* Nov 17 05:05:18 198.213.51.27:4973 -> xxx.yyy.1.11:8000 SYN ******S* Nov 17 05:05:21 198.213.51.27:4974 -> xxx.yyy.1.12:8000 SYN ******S* Nov 17 05:05:19 198.213.51.27:4975 -> xxx.yyy.1.13:8000 SYN ******S* Nov 17 05:05:18 198.213.51.27:4976 -> xxx.yyy.1.14:8000 SYN ******S* Nov 17 05:05:19 198.213.51.27:1034 -> xxx.yyy.1.41:8000 SYN ******S* [...] Nov 17 13:49:37 198.213.51.27:4179 -> xxx.yyy.zzz.211:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:4153 -> xxx.yyy.zzz.186:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:4223 -> xxx.yyy.zzz.228:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:4156 -> xxx.yyy.zzz.189:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:3916 -> xxx.yyy.zzz.130:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:4177 -> xxx.yyy.zzz.209:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:3978 -> xxx.yyy.zzz.167:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:4255 -> xxx.yyy.zzz.254:8000 SYN ******S* Nov 17 13:49:37 198.213.51.27:4252 -> xxx.yyy.zzz.252:8000 SYN ******S* 46465 Nov 17 21:13:46 212.82.195.210:4412 -> xxx.yyy.1.2:443 SYN ******S* Nov 17 21:13:48 212.82.195.210:4413 -> xxx.yyy.1.3:443 SYN ******S* Nov 17 21:13:49 212.82.195.210:4414 -> xxx.yyy.1.4:443 SYN ******S* Nov 17 21:13:49 212.82.195.210:4415 -> xxx.yyy.1.5:443 SYN ******S* Nov 17 21:13:49 212.82.195.210:4416 -> xxx.yyy.1.6:443 SYN ******S* Nov 17 21:13:46 212.82.195.210:4417 -> xxx.yyy.1.7:443 SYN ******S* Nov 17 21:13:46 212.82.195.210:4418 -> xxx.yyy.1.8:443 SYN ******S* Nov 17 21:13:46 212.82.195.210:4419 -> xxx.yyy.1.9:443 SYN ******S* [...] Nov 17 21:27:54 212.82.195.210:2088 -> xxx.yyy.255.241:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2090 -> xxx.yyy.255.243:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2092 -> xxx.yyy.255.245:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2093 -> xxx.yyy.255.246:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2095 -> xxx.yyy.255.248:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2098 -> xxx.yyy.255.251:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2099 -> xxx.yyy.255.252:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2100 -> xxx.yyy.255.253:443 SYN ******S* Nov 17 21:27:54 212.82.195.210:2101 -> xxx.yyy.255.254:443 SYN ******S* 43697 Nov 17 00:00:06 60.37.250.119:1824 -> xxx.yyy.162.158:1433 SYN ******S* Nov 17 00:00:10 60.37.250.119:1831 -> xxx.yyy.162.161:1433 SYN ******S* Nov 17 00:00:10 60.37.250.119:1834 -> xxx.yyy.162.162:1433 SYN ******S* Nov 17 00:00:07 60.37.250.119:1842 -> xxx.yyy.162.164:1433 SYN ******S* Nov 17 00:00:10 60.37.250.119:1843 -> xxx.yyy.162.165:1433 SYN ******S* Nov 17 00:00:10 60.37.250.119:1844 -> xxx.yyy.162.166:1433 SYN ******S* Nov 17 00:00:10 60.37.250.119:1849 -> xxx.yyy.162.167:1433 SYN ******S* Nov 17 00:00:10 60.37.250.119:1851 -> xxx.yyy.162.169:1433 SYN ******S* [...] Nov 17 00:42:18 60.37.250.119:3608 -> xxx.yyy.255.243:1433 SYN ******S* Nov 17 00:42:18 60.37.250.119:3615 -> xxx.yyy.255.246:1433 SYN ******S* Nov 17 00:42:18 60.37.250.119:3616 -> xxx.yyy.255.247:1433 SYN ******S* Nov 17 00:42:18 60.37.250.119:3623 -> xxx.yyy.255.248:1433 SYN ******S* Nov 17 00:42:18 60.37.250.119:3624 -> xxx.yyy.255.249:1433 SYN ******S* Nov 17 00:42:18 60.37.250.119:3628 -> xxx.yyy.255.250:1433 SYN ******S* Nov 17 00:42:19 60.37.250.119:3633 -> xxx.yyy.255.251:1433 SYN ******S* Nov 17 00:42:19 60.37.250.119:3642 -> xxx.yyy.255.252:1433 SYN ******S* Nov 17 00:42:19 60.37.250.119:3646 -> xxx.yyy.255.254:1433 SYN ******S* 39697 Nov 17 04:35:21 61.134.47.182:4225 -> xxx.yyy.1.5:4000 SYN ******S* Nov 17 04:35:18 61.134.47.182:4226 -> xxx.yyy.1.6:4000 SYN ******S* Nov 17 04:35:18 61.134.47.182:4227 -> xxx.yyy.1.7:4000 SYN ******S* Nov 17 04:35:18 61.134.47.182:4229 -> xxx.yyy.1.9:4000 SYN ******S* Nov 17 04:35:20 61.134.47.182:4231 -> xxx.yyy.1.11:4000 SYN ******S* Nov 17 04:35:18 61.134.47.182:4233 -> xxx.yyy.1.13:4000 SYN ******S* Nov 17 04:35:21 61.134.47.182:4235 -> xxx.yyy.1.15:4000 SYN ******S* Nov 17 04:35:21 61.134.47.182:4236 -> xxx.yyy.1.16:4000 SYN ******S* [...] Nov 17 04:47:06 61.134.47.182:4297 -> xxx.yyy.255.237:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4298 -> xxx.yyy.255.238:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4304 -> xxx.yyy.255.244:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4305 -> xxx.yyy.255.245:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4302 -> xxx.yyy.255.242:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4307 -> xxx.yyy.255.247:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4308 -> xxx.yyy.255.248:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4309 -> xxx.yyy.255.249:4000 SYN ******S* Nov 17 04:47:06 61.134.47.182:4314 -> xxx.yyy.255.254:4000 SYN ******S* 38401 Nov 17 22:46:53 164.8.65.115:3449 -> xxx.yyy.1.12:1433 SYN ******S* Nov 17 22:46:56 164.8.65.115:3450 -> xxx.yyy.1.13:1433 SYN ******S* Nov 17 22:46:53 164.8.65.115:3451 -> xxx.yyy.1.14:1433 SYN ******S* Nov 17 22:46:53 164.8.65.115:3452 -> xxx.yyy.1.15:1433 SYN ******S* Nov 17 22:46:53 164.8.65.115:3455 -> xxx.yyy.1.18:1433 SYN ******S* Nov 17 22:46:56 164.8.65.115:3456 -> xxx.yyy.1.19:1433 SYN ******S* Nov 17 22:46:53 164.8.65.115:3458 -> xxx.yyy.1.21:1433 SYN ******S* Nov 17 22:46:56 164.8.65.115:3459 -> xxx.yyy.1.22:1433 SYN ******S* [...] Nov 17 23:25:05 164.8.65.115:3030 -> xxx.yyy.255.238:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3031 -> xxx.yyy.255.239:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3035 -> xxx.yyy.255.243:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3036 -> xxx.yyy.255.244:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3037 -> xxx.yyy.255.245:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3039 -> xxx.yyy.255.247:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3044 -> xxx.yyy.255.252:1433 SYN ******S* Nov 17 23:25:05 164.8.65.115:3046 -> xxx.yyy.255.254:1433 SYN ******S* 32597 Nov 17 13:39:32 64.2.191.149:1337 -> xxx.yyy.1.3:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1340 -> xxx.yyy.1.6:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1352 -> xxx.yyy.1.18:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1353 -> xxx.yyy.1.17:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1354 -> xxx.yyy.1.20:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1358 -> xxx.yyy.1.24:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1359 -> xxx.yyy.1.23:1433 SYN ******S* Nov 17 13:39:32 64.2.191.149:1362 -> xxx.yyy.1.27:1433 SYN ******S* [...] Nov 17 13:46:42 64.2.191.149:1046 -> xxx.yyy.255.231:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1047 -> xxx.yyy.255.232:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1048 -> xxx.yyy.255.233:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1058 -> xxx.yyy.255.243:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1059 -> xxx.yyy.255.244:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1060 -> xxx.yyy.255.245:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1063 -> xxx.yyy.255.248:1433 SYN ******S* Nov 17 13:46:42 64.2.191.149:1066 -> xxx.yyy.255.251:1433 SYN ******S* 31248 Nov 17 10:30:59 159.134.199.143:4594 -> xxx.yyy.1.1:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4601 -> xxx.yyy.1.6:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4600 -> xxx.yyy.1.5:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4602 -> xxx.yyy.1.7:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4604 -> xxx.yyy.1.8:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4607 -> xxx.yyy.1.11:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4611 -> xxx.yyy.1.14:4899 SYN ******S* Nov 17 10:30:59 159.134.199.143:4610 -> xxx.yyy.1.13:4899 SYN ******S* [...] Nov 17 10:42:20 159.134.199.143:3738 -> xxx.yyy.254.249:4899 SYN ******S* Nov 17 10:42:20 159.134.199.143:3745 -> xxx.yyy.254.251:4899 SYN ******S* Nov 17 10:42:20 159.134.199.143:3750 -> xxx.yyy.254.252:4899 SYN ******S* Nov 17 10:42:20 159.134.199.143:3752 -> xxx.yyy.254.253:4899 SYN ******S* Nov 17 10:42:20 159.134.199.143:3189 -> xxx.yyy.254.31:4899 SYN ******S* Nov 17 10:42:23 159.134.199.143:3617 -> xxx.yyy.254.197:4899 SYN ******S* Nov 17 10:42:23 159.134.199.143:3618 -> xxx.yyy.254.198:4899 SYN ******S* Nov 17 10:42:23 159.134.199.143:3616 -> xxx.yyy.254.196:4899 SYN ******S* Nov 17 10:42:23 159.134.199.143:3619 -> xxx.yyy.254.199:4899 SYN ******S* 23031 [...] 20349 [...] 19911 Nov 17 06:09:34 82.65.98.117:3947 -> xxx.yyy.68.39:139 SYN ******S* Nov 17 06:09:36 82.65.98.117:3978 -> xxx.yyy.68.40:139 SYN ******S* Nov 17 06:09:37 82.65.98.117:3995 -> xxx.yyy.68.41:139 SYN ******S* Nov 17 06:09:37 82.65.98.117:4011 -> xxx.yyy.68.42:139 SYN ******S* Nov 17 06:09:38 82.65.98.117:4021 -> xxx.yyy.68.43:139 SYN ******S* Nov 17 06:09:36 82.65.98.117:4034 -> xxx.yyy.68.44:139 SYN ******S* Nov 17 06:09:37 82.65.98.117:4051 -> xxx.yyy.68.45:139 SYN ******S* Nov 17 06:09:38 82.65.98.117:4060 -> xxx.yyy.68.46:139 SYN ******S* [...] Nov 17 08:47:20 82.65.98.117:4879 -> xxx.yyy.105.14:139 SYN ******S* Nov 17 08:47:21 82.65.98.117:4872 -> xxx.yyy.105.12:139 SYN ******S* Nov 17 08:47:21 82.65.98.117:4840 -> xxx.yyy.105.6:139 SYN ******S* Nov 17 08:47:21 82.65.98.117:4884 -> xxx.yyy.105.15:139 SYN ******S* Nov 17 08:47:22 82.65.98.117:4848 -> xxx.yyy.105.7:139 SYN ******S* Nov 17 08:47:22 82.65.98.117:4888 -> xxx.yyy.105.16:139 SYN ******S* Nov 17 08:47:23 82.65.98.117:4854 -> xxx.yyy.105.8:139 SYN ******S* Nov 17 08:47:23 82.65.98.117:4879 -> xxx.yyy.105.14:139 SYN ******S* Nov 17 08:47:23 82.65.98.117:4890 -> xxx.yyy.105.17:139 SYN ******S* 19170 [...] 18110 [...] 16732 [...] 15813 Nov 17 06:57:07 213.37.55.156:1152 -> xxx.yyy.215.211:5554 SYN ******S* Nov 17 06:57:08 213.37.55.156:1830 -> xxx.yyy.215.211:1023 SYN ******S* Nov 17 06:57:10 213.37.55.156:2796 -> xxx.yyy.215.211:9898 SYN ******S* Nov 17 06:57:07 213.37.55.156:1163 -> xxx.yyy.215.212:5554 SYN ******S* Nov 17 06:57:08 213.37.55.156:1838 -> xxx.yyy.215.212:1023 SYN ******S* Nov 17 06:57:10 213.37.55.156:2801 -> xxx.yyy.215.212:9898 SYN ******S* Nov 17 06:57:07 213.37.55.156:1146 -> xxx.yyy.215.210:5554 SYN ******S* Nov 17 06:57:10 213.37.55.156:2795 -> xxx.yyy.215.210:9898 SYN ******S* [...] Nov 17 06:59:27 213.37.55.156:4639 -> xxx.yyy.235.125:1023 SYN ******S* Nov 17 06:59:29 213.37.55.156:1806 -> xxx.yyy.235.125:9898 SYN ******S* Nov 17 06:59:28 213.37.55.156:1227 -> xxx.yyy.235.93:9898 SYN ******S* Nov 17 06:59:28 213.37.55.156:1388 -> xxx.yyy.235.225:5554 SYN ******S* Nov 17 06:59:29 213.37.55.156:1813 -> xxx.yyy.235.225:1023 SYN ******S* Nov 17 06:59:28 213.37.55.156:1387 -> xxx.yyy.235.224:5554 SYN ******S* Nov 17 06:59:29 213.37.55.156:1812 -> xxx.yyy.235.224:1023 SYN ******S* Nov 17 06:59:31 213.37.55.156:2648 -> xxx.yyy.235.225:9898 SYN ******S* Nov 17 06:59:31 213.37.55.156:2649 -> xxx.yyy.235.224:9898 SYN ******S* 14212 [...] 13056 Nov 17 00:00:05 203.88.244.104:3117 -> xxx.yyy.185.240:1433 SYN ******S* Nov 17 00:00:05 203.88.244.104:3110 -> xxx.yyy.185.238:1433 SYN ******S* Nov 17 00:00:05 203.88.244.104:3107 -> xxx.yyy.185.237:1433 SYN ******S* Nov 17 00:00:05 203.88.244.104:3106 -> xxx.yyy.185.236:1433 SYN ******S* Nov 17 00:00:05 203.88.244.104:4119 -> xxx.yyy.186.71:1433 SYN ******S* Nov 17 00:00:06 203.88.244.104:3435 -> xxx.yyy.185.242:1433 SYN ******S* Nov 17 00:00:06 203.88.244.104:3441 -> xxx.yyy.185.245:1433 SYN ******S* Nov 17 00:00:06 203.88.244.104:3430 -> xxx.yyy.185.241:1433 SYN ******S* [...] Nov 17 00:49:56 203.88.244.104:3225 -> xxx.yyy.255.249:1433 SYN ******S* Nov 17 00:49:57 203.88.244.104:3196 -> xxx.yyy.255.244:1433 SYN ******S* Nov 17 00:49:57 203.88.244.104:3220 -> xxx.yyy.255.247:1433 SYN ******S* Nov 17 00:49:57 203.88.244.104:3223 -> xxx.yyy.255.248:1433 SYN ******S* Nov 17 00:49:57 203.88.244.104:4489 -> xxx.yyy.255.251:1433 SYN ******S* Nov 17 00:49:57 203.88.244.104:4284 -> xxx.yyy.255.250:1433 SYN ******S* Nov 17 00:50:00 203.88.244.104:4284 -> xxx.yyy.255.250:1433 SYN ******S* Nov 17 00:50:00 203.88.244.104:4489 -> xxx.yyy.255.251:1433 SYN ******S* 11830 [...] 11079 [...] 9118 Nov 17 15:31:56 132.206.13.59:2427 -> xxx.yyy.74.114:363 SYN ******S* Nov 17 15:31:56 132.206.13.59:2428 -> xxx.yyy.74.114:367 SYN ******S* Nov 17 15:31:56 132.206.13.59:2429 -> xxx.yyy.74.114:371 SYN ******S* Nov 17 15:31:56 132.206.13.59:2430 -> xxx.yyy.74.114:374 SYN ******S* Nov 17 15:31:56 132.206.13.59:2431 -> xxx.yyy.74.114:377 SYN ******S* Nov 17 15:32:02 132.206.13.59:2446 -> xxx.yyy.74.114:374 SYN ******S* Nov 17 15:32:02 132.206.13.59:2447 -> xxx.yyy.74.114:371 SYN ******S* Nov 17 15:32:02 132.206.13.59:2448 -> xxx.yyy.74.114:367 SYN ******S* [...] Nov 17 23:59:53 132.206.13.59:1547 -> xxx.yyy.74.114:371 SYN ******S* Nov 17 23:59:53 132.206.13.59:1580 -> xxx.yyy.74.114:377 SYN ******S* Nov 17 23:59:56 132.206.13.59:1591 -> xxx.yyy.74.114:363 SYN ******S* Nov 17 23:59:56 132.206.13.59:1615 -> xxx.yyy.77.190:228 SYN ******S* Nov 17 23:59:57 132.206.13.59:1618 -> xxx.yyy.77.190:231 SYN ******S* Nov 17 23:59:57 132.206.13.59:1620 -> xxx.yyy.77.190:234 SYN ******S* Nov 17 23:59:59 132.206.13.59:1615 -> xxx.yyy.77.190:228 SYN ******S* Nov 17 23:59:59 132.206.13.59:1633 -> xxx.yyy.74.114:374 SYN ******S* Nov 17 23:59:59 132.206.13.59:1580 -> xxx.yyy.74.114:377 SYN ******S* 9091 [...] 8227 [...] 8193 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions