[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 27 16:15:13 200.72.161.178:1583 -> xxx.yyy.1.1:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1584 -> xxx.yyy.1.2:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1586 -> xxx.yyy.1.3:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1588 -> xxx.yyy.1.4:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1590 -> xxx.yyy.1.5:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1592 -> xxx.yyy.1.6:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1594 -> xxx.yyy.1.7:1433 SYN ******S* Nov 27 16:15:13 200.72.161.178:1596 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 27 18:09:53 200.72.161.178:2890 -> xxx.yyy.255.247:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2894 -> xxx.yyy.255.249:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2892 -> xxx.yyy.255.248:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2903 -> xxx.yyy.255.251:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2902 -> xxx.yyy.255.250:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2913 -> xxx.yyy.255.252:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2914 -> xxx.yyy.255.253:1433 SYN ******S* Nov 27 18:09:53 200.72.161.178:2919 -> xxx.yyy.255.254:1433 SYN ******S* 120956 Nov 27 00:00:20 68.23.102.243:2082 -> xxx.yyy.69.128:10265 SYN ******S* Nov 27 00:00:17 68.23.102.243:2073 -> xxx.yyy.69.128:10262 SYN ******S* Nov 27 00:00:18 68.23.102.243:2099 -> xxx.yyy.69.128:10259 SYN ******S* Nov 27 00:00:19 68.23.102.243:2101 -> xxx.yyy.69.128:10266 SYN ******S* Nov 27 00:00:20 68.23.102.243:2083 -> xxx.yyy.74.57:10250 SYN ******S* Nov 27 00:00:14 68.23.102.243:2069 -> xxx.yyy.74.57:10255 SYN ******S* Nov 27 00:00:19 68.23.102.243:2091 -> xxx.yyy.74.57:10248 SYN ******S* Nov 27 00:00:18 68.23.102.243:2096 -> xxx.yyy.74.57:10253 SYN ******S* [...] Nov 27 23:59:52 68.23.102.243:1425 -> xxx.yyy.74.57:10250 SYN ******S* Nov 27 23:59:53 68.23.102.243:1430 -> xxx.yyy.74.57:10255 SYN ******S* Nov 27 23:59:54 68.23.102.243:1439 -> xxx.yyy.74.57:10248 SYN ******S* Nov 27 23:59:52 68.23.102.243:1426 -> xxx.yyy.69.128:10262 SYN ******S* Nov 27 23:59:53 68.23.102.243:1427 -> xxx.yyy.69.128:10265 SYN ******S* Nov 27 23:59:57 68.23.102.243:1439 -> xxx.yyy.74.57:10248 SYN ******S* Nov 27 23:59:58 68.23.102.243:1425 -> xxx.yyy.74.57:10250 SYN ******S* Nov 27 23:59:57 68.23.102.243:1450 -> xxx.yyy.69.128:10259 SYN ******S* Nov 27 23:59:58 68.23.102.243:1426 -> xxx.yyy.69.128:10262 SYN ******S* 86255 Nov 27 18:34:33 211.222.18.1:62974 -> xxx.yyy.1.1:1433 SYN ******S* Nov 27 18:34:33 211.222.18.1:62977 -> xxx.yyy.1.2:1433 SYN ******S* Nov 27 18:34:30 211.222.18.1:62986 -> xxx.yyy.1.5:1433 SYN ******S* Nov 27 18:34:33 211.222.18.1:62989 -> xxx.yyy.1.6:1433 SYN ******S* Nov 27 18:34:33 211.222.18.1:62992 -> xxx.yyy.1.7:1433 SYN ******S* Nov 27 18:34:33 211.222.18.1:62995 -> xxx.yyy.1.8:1433 SYN ******S* Nov 27 18:34:33 211.222.18.1:62998 -> xxx.yyy.1.9:1433 SYN ******S* Nov 27 18:34:33 211.222.18.1:63001 -> xxx.yyy.1.10:1433 SYN ******S* [...] Nov 27 18:46:38 211.222.18.1:7694 -> xxx.yyy.255.245:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7715 -> xxx.yyy.255.252:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7706 -> xxx.yyy.255.249:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7703 -> xxx.yyy.255.248:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7712 -> xxx.yyy.255.251:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7709 -> xxx.yyy.255.250:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7697 -> xxx.yyy.255.246:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7700 -> xxx.yyy.255.247:1433 SYN ******S* Nov 27 18:46:38 211.222.18.1:7721 -> xxx.yyy.255.254:1433 SYN ******S* 70631 Nov 27 01:07:28 208.57.138.249:4541 -> xxx.yyy.1.1:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4543 -> xxx.yyy.1.2:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4545 -> xxx.yyy.1.3:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4547 -> xxx.yyy.1.4:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4553 -> xxx.yyy.1.7:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4555 -> xxx.yyy.1.8:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4557 -> xxx.yyy.1.9:1433 SYN ******S* Nov 27 01:07:31 208.57.138.249:4559 -> xxx.yyy.1.10:1433 SYN ******S* [...] Nov 27 01:20:33 208.57.138.249:2709 -> xxx.yyy.255.245:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2699 -> xxx.yyy.255.240:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2715 -> xxx.yyy.255.248:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2705 -> xxx.yyy.255.243:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2723 -> xxx.yyy.255.252:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2725 -> xxx.yyy.255.253:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2721 -> xxx.yyy.255.251:1433 SYN ******S* Nov 27 01:20:33 208.57.138.249:2727 -> xxx.yyy.255.254:1433 SYN ******S* 67186 Nov 27 18:09:35 155.246.48.80:3358 -> xxx.yyy.1.1:143 SYN ******S* Nov 27 18:09:35 155.246.48.80:3365 -> xxx.yyy.1.2:143 SYN ******S* Nov 27 18:09:35 155.246.48.80:3373 -> xxx.yyy.1.3:143 SYN ******S* Nov 27 18:09:32 155.246.48.80:3380 -> xxx.yyy.1.4:143 SYN ******S* Nov 27 18:09:32 155.246.48.80:3386 -> xxx.yyy.1.5:143 SYN ******S* Nov 27 18:09:35 155.246.48.80:3392 -> xxx.yyy.1.6:143 SYN ******S* Nov 27 18:09:35 155.246.48.80:3397 -> xxx.yyy.1.7:143 SYN ******S* Nov 27 18:09:35 155.246.48.80:3403 -> xxx.yyy.1.8:143 SYN ******S* [...] Nov 27 18:21:21 155.246.48.80:4544 -> xxx.yyy.255.248:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4539 -> xxx.yyy.255.247:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4556 -> xxx.yyy.255.250:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4549 -> xxx.yyy.255.249:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4573 -> xxx.yyy.255.253:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4561 -> xxx.yyy.255.251:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4578 -> xxx.yyy.255.254:143 SYN ******S* Nov 27 18:21:21 155.246.48.80:4567 -> xxx.yyy.255.252:143 SYN ******S* 62544 Nov 27 03:15:03 195.137.92.138:3998 -> xxx.yyy.1.1:1521 SYN ******S* Nov 27 03:15:03 195.137.92.138:3999 -> xxx.yyy.1.2:1521 SYN ******S* Nov 27 03:15:03 195.137.92.138:4000 -> xxx.yyy.1.3:1521 SYN ******S* Nov 27 03:15:04 195.137.92.138:4001 -> xxx.yyy.1.4:1521 SYN ******S* Nov 27 03:15:04 195.137.92.138:4002 -> xxx.yyy.1.5:1521 SYN ******S* Nov 27 03:15:04 195.137.92.138:4003 -> xxx.yyy.1.6:1521 SYN ******S* Nov 27 03:15:04 195.137.92.138:4004 -> xxx.yyy.1.7:1521 SYN ******S* Nov 27 03:15:04 195.137.92.138:4005 -> xxx.yyy.1.8:1521 SYN ******S* [...] Nov 27 03:28:31 195.137.92.138:3423 -> xxx.yyy.255.250:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3424 -> xxx.yyy.255.251:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3425 -> xxx.yyy.255.252:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3426 -> xxx.yyy.255.253:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3427 -> xxx.yyy.255.254:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3349 -> xxx.yyy.255.177:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3350 -> xxx.yyy.255.178:1521 SYN ******S* Nov 27 03:28:31 195.137.92.138:3388 -> xxx.yyy.255.216:1521 SYN ******S* 61846 Nov 27 00:16:04 211.214.247.164:1413 -> xxx.yyy.169.3:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1412 -> xxx.yyy.169.2:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1418 -> xxx.yyy.169.8:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1417 -> xxx.yyy.169.7:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1411 -> xxx.yyy.169.1:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1427 -> xxx.yyy.169.17:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1437 -> xxx.yyy.169.26:1433 SYN ******S* Nov 27 00:16:04 211.214.247.164:1414 -> xxx.yyy.169.4:1433 SYN ******S* [...] Nov 27 23:41:26 211.214.247.164:2326 -> xxx.yyy.70.227:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2332 -> xxx.yyy.70.233:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2336 -> xxx.yyy.70.237:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2341 -> xxx.yyy.70.242:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2337 -> xxx.yyy.70.238:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2339 -> xxx.yyy.70.240:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2342 -> xxx.yyy.70.243:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2347 -> xxx.yyy.70.248:1433 SYN ******S* Nov 27 23:41:26 211.214.247.164:2352 -> xxx.yyy.70.253:1433 SYN ******S* 46336 Nov 27 07:13:49 143.233.187.252:1770 -> xxx.yyy.1.1:4899 SYN ******S* Nov 27 07:13:49 143.233.187.252:1771 -> xxx.yyy.1.2:4899 SYN ******S* Nov 27 07:13:49 143.233.187.252:1772 -> xxx.yyy.1.3:4899 SYN ******S* Nov 27 07:13:51 143.233.187.252:1773 -> xxx.yyy.1.4:4899 SYN ******S* Nov 27 07:13:51 143.233.187.252:1774 -> xxx.yyy.1.5:4899 SYN ******S* Nov 27 07:13:48 143.233.187.252:1775 -> xxx.yyy.1.6:4899 SYN ******S* Nov 27 07:13:51 143.233.187.252:1776 -> xxx.yyy.1.7:4899 SYN ******S* Nov 27 07:13:51 143.233.187.252:1777 -> xxx.yyy.1.8:4899 SYN ******S* [...] Nov 27 07:25:25 143.233.187.252:2963 -> xxx.yyy.253.11:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:2971 -> xxx.yyy.253.17:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3215 -> xxx.yyy.253.120:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3007 -> xxx.yyy.253.44:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3132 -> xxx.yyy.253.85:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3155 -> xxx.yyy.253.95:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3047 -> xxx.yyy.253.66:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3020 -> xxx.yyy.253.53:4899 SYN ******S* Nov 27 07:25:25 143.233.187.252:3012 -> xxx.yyy.253.47:4899 SYN ******S* 46133 Nov 27 23:36:49 65.210.124.204:1503 -> xxx.yyy.1.2:1433 SYN ******S* Nov 27 23:36:49 65.210.124.204:1502 -> xxx.yyy.1.1:1433 SYN ******S* Nov 27 23:36:50 65.210.124.204:1504 -> xxx.yyy.1.3:1433 SYN ******S* Nov 27 23:36:50 65.210.124.204:1505 -> xxx.yyy.1.4:1433 SYN ******S* Nov 27 23:36:50 65.210.124.204:1506 -> xxx.yyy.1.5:1433 SYN ******S* Nov 27 23:36:50 65.210.124.204:1507 -> xxx.yyy.1.6:1433 SYN ******S* Nov 27 23:36:50 65.210.124.204:1508 -> xxx.yyy.1.7:1433 SYN ******S* Nov 27 23:36:50 65.210.124.204:1509 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 27 23:47:21 65.210.124.204:3928 -> xxx.yyy.255.247:1433 SYN ******S* Nov 27 23:47:21 65.210.124.204:3929 -> xxx.yyy.255.248:1433 SYN ******S* Nov 27 23:47:21 65.210.124.204:3930 -> xxx.yyy.255.249:1433 SYN ******S* Nov 27 23:47:22 65.210.124.204:3931 -> xxx.yyy.255.250:1433 SYN ******S* Nov 27 23:47:22 65.210.124.204:3932 -> xxx.yyy.255.251:1433 SYN ******S* Nov 27 23:47:22 65.210.124.204:3933 -> xxx.yyy.255.252:1433 SYN ******S* Nov 27 23:47:22 65.210.124.204:3934 -> xxx.yyy.255.253:1433 SYN ******S* Nov 27 23:47:22 65.210.124.204:3935 -> xxx.yyy.255.254:1433 SYN ******S* 43288 [...] 41307 Nov 27 00:39:09 64.113.75.99:1470 -> xxx.yyy.74.188:6348 SYN ******S* Nov 27 00:39:09 64.113.75.99:1471 -> xxx.yyy.78.200:6346 SYN ******S* Nov 27 00:39:09 64.113.75.99:1473 -> xxx.yyy.69.175:6348 SYN ******S* Nov 27 00:39:07 64.113.75.99:1477 -> xxx.yyy.72.156:6351 SYN ******S* Nov 27 00:39:11 64.113.75.99:1478 -> xxx.yyy.75.77:6348 SYN ******S* Nov 27 00:39:15 64.113.75.99:1470 -> xxx.yyy.74.188:6348 SYN ******S* Nov 27 00:39:15 64.113.75.99:1471 -> xxx.yyy.78.200:6346 SYN ******S* Nov 27 00:39:15 64.113.75.99:1473 -> xxx.yyy.69.175:6348 SYN ******S* [...] Nov 27 23:59:21 64.113.75.99:3931 -> xxx.yyy.76.238:6348 SYN ******S* Nov 27 23:59:24 64.113.75.99:3931 -> xxx.yyy.76.238:6348 SYN ******S* Nov 27 23:59:24 64.113.75.99:3933 -> xxx.yyy.71.196:6346 SYN ******S* Nov 27 23:59:24 64.113.75.99:3924 -> xxx.yyy.81.249:6349 SYN ******S* Nov 27 23:59:27 64.113.75.99:3930 -> xxx.yyy.72.200:6348 SYN ******S* Nov 27 23:59:27 64.113.75.99:3933 -> xxx.yyy.71.196:6346 SYN ******S* Nov 27 23:59:30 64.113.75.99:3931 -> xxx.yyy.76.238:6348 SYN ******S* Nov 27 23:59:34 64.113.75.99:3936 -> xxx.yyy.75.166:6350 SYN ******S* Nov 27 23:59:33 64.113.75.99:3933 -> xxx.yyy.71.196:6346 SYN ******S* 35586 Nov 27 00:16:39 218.184.132.74:2590 -> xxx.yyy.1.0:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2592 -> xxx.yyy.1.1:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2595 -> xxx.yyy.1.2:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2599 -> xxx.yyy.1.3:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2601 -> xxx.yyy.1.4:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2604 -> xxx.yyy.1.5:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2608 -> xxx.yyy.1.6:1433 SYN ******S* Nov 27 00:16:39 218.184.132.74:2610 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 27 01:38:14 218.184.132.74:1650 -> xxx.yyy.91.114:1433 SYN ******S* Nov 27 01:38:14 218.184.132.74:1413 -> xxx.yyy.91.64:1433 SYN ******S* Nov 27 01:38:14 218.184.132.74:1591 -> xxx.yyy.91.99:1433 SYN ******S* Nov 27 01:38:14 218.184.132.74:1415 -> xxx.yyy.91.66:1433 SYN ******S* Nov 27 01:38:14 218.184.132.74:1414 -> xxx.yyy.91.65:1433 SYN ******S* Nov 27 01:38:15 218.184.132.74:1597 -> xxx.yyy.91.100:1433 SYN ******S* Nov 27 01:38:15 218.184.132.74:1598 -> xxx.yyy.91.101:1433 SYN ******S* Nov 27 01:38:15 218.184.132.74:1458 -> xxx.yyy.91.68:1433 SYN ******S* Nov 27 01:38:15 218.184.132.74:1457 -> xxx.yyy.91.67:1433 SYN ******S* 27301 Nov 27 16:33:08 216.55.133.31:1041 -> xxx.yyy.1.0:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1042 -> xxx.yyy.1.1:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1043 -> xxx.yyy.1.2:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1044 -> xxx.yyy.1.3:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1045 -> xxx.yyy.1.4:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1046 -> xxx.yyy.1.5:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1047 -> xxx.yyy.1.6:143 SYN ******S* Nov 27 16:33:08 216.55.133.31:1048 -> xxx.yyy.1.7:143 SYN ******S* [...] Nov 27 16:33:37 216.55.133.31:1042 -> xxx.yyy.255.231:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1043 -> xxx.yyy.255.232:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1044 -> xxx.yyy.255.233:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1045 -> xxx.yyy.255.234:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1046 -> xxx.yyy.255.235:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1047 -> xxx.yyy.255.236:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1048 -> xxx.yyy.255.237:143 SYN ******S* Nov 27 16:33:37 216.55.133.31:1063 -> xxx.yyy.255.251:143 SYN ******S* 26200 Nov 27 20:39:19 219.130.90.38:3405 -> xxx.yyy.10.235:1433 SYN ******S* Nov 27 20:39:19 219.130.90.38:3417 -> xxx.yyy.10.239:1433 SYN ******S* Nov 27 20:39:19 219.130.90.38:3423 -> xxx.yyy.10.241:1433 SYN ******S* Nov 27 20:39:19 219.130.90.38:3426 -> xxx.yyy.10.242:1433 SYN ******S* Nov 27 20:39:19 219.130.90.38:3432 -> xxx.yyy.10.244:1433 SYN ******S* Nov 27 20:39:20 219.130.90.38:3438 -> xxx.yyy.10.246:1433 SYN ******S* Nov 27 20:39:20 219.130.90.38:3444 -> xxx.yyy.10.248:1433 SYN ******S* Nov 27 20:39:20 219.130.90.38:3441 -> xxx.yyy.10.247:1433 SYN ******S* [...] Nov 27 22:10:06 219.130.90.38:3685 -> xxx.yyy.111.251:1433 SYN ******S* Nov 27 22:10:06 219.130.90.38:3693 -> xxx.yyy.111.252:1433 SYN ******S* Nov 27 22:10:07 219.130.90.38:3700 -> xxx.yyy.111.253:1433 SYN ******S* Nov 27 22:10:11 219.130.90.38:3663 -> xxx.yyy.111.244:1433 SYN ******S* Nov 27 22:10:12 219.130.90.38:3666 -> xxx.yyy.111.245:1433 SYN ******S* Nov 27 22:10:12 219.130.90.38:3671 -> xxx.yyy.111.248:1433 SYN ******S* Nov 27 22:10:12 219.130.90.38:3685 -> xxx.yyy.111.251:1433 SYN ******S* Nov 27 22:10:12 219.130.90.38:3693 -> xxx.yyy.111.252:1433 SYN ******S* Nov 27 22:10:13 219.130.90.38:3700 -> xxx.yyy.111.253:1433 SYN ******S* 16558 Nov 27 12:54:03 69.156.52.188:2761 -> xxx.yyy.195.89:5554 SYN ******S* Nov 27 12:54:04 69.156.52.188:3225 -> xxx.yyy.195.89:1023 SYN ******S* Nov 27 12:54:06 69.156.52.188:4328 -> xxx.yyy.195.89:9898 SYN ******S* Nov 27 12:54:03 69.156.52.188:2760 -> xxx.yyy.195.88:5554 SYN ******S* Nov 27 12:54:04 69.156.52.188:3224 -> xxx.yyy.195.88:1023 SYN ******S* Nov 27 12:54:06 69.156.52.188:4330 -> xxx.yyy.195.88:9898 SYN ******S* Nov 27 12:54:03 69.156.52.188:2762 -> xxx.yyy.195.90:5554 SYN ******S* Nov 27 12:54:04 69.156.52.188:3226 -> xxx.yyy.195.90:1023 SYN ******S* [...] Nov 27 12:54:49 69.156.52.188:3520 -> xxx.yyy.215.115:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3521 -> xxx.yyy.215.116:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3522 -> xxx.yyy.215.117:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3523 -> xxx.yyy.215.118:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3524 -> xxx.yyy.215.119:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3525 -> xxx.yyy.215.120:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3528 -> xxx.yyy.215.122:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3605 -> xxx.yyy.215.171:9898 SYN ******S* Nov 27 12:54:49 69.156.52.188:3604 -> xxx.yyy.215.170:9898 SYN ******S* 14507 Nov 27 00:51:50 65.54.188.52:47926 -> xxx.yyy.233.181:80 SYN ******S* Nov 27 00:51:50 65.54.188.52:48017 -> xxx.yyy.16.8:80 SYN ******S* Nov 27 00:51:50 65.54.188.52:48048 -> xxx.yyy.233.193:80 SYN ******S* Nov 27 00:51:52 65.54.188.52:48214 -> xxx.yyy.220.68:80 SYN ******S* Nov 27 00:51:53 65.54.188.52:48299 -> xxx.yyy.210.5:80 SYN ******S* Nov 27 00:51:54 65.54.188.52:48678 -> xxx.yyy.248.80:80 SYN ******S* Nov 27 00:51:55 65.54.188.52:48758 -> xxx.yyy.12.25:80 SYN ******S* Nov 27 00:51:55 65.54.188.52:48833 -> xxx.yyy.220.98:80 SYN ******S* [...] Nov 27 23:48:27 65.54.188.52:32072 -> xxx.yyy.236.22:80 SYN ******S* Nov 27 23:48:31 65.54.188.52:32259 -> xxx.yyy.241.30:80 SYN ******S* Nov 27 23:48:37 65.54.188.52:32717 -> xxx.yyy.212.103:80 SYN ******S* Nov 27 23:48:40 65.54.188.52:32951 -> xxx.yyy.233.168:80 SYN ******S* Nov 27 23:48:42 65.54.188.52:33455 -> xxx.yyy.241.20:80 SYN ******S* Nov 27 23:48:42 65.54.188.52:33458 -> xxx.yyy.241.255:80 SYN ******S* Nov 27 23:48:42 65.54.188.52:33562 -> xxx.yyy.1.60:80 SYN ******S* Nov 27 23:48:46 65.54.188.52:34100 -> xxx.yyy.1.13:80 SYN ******S* Nov 27 23:48:47 65.54.188.52:34221 -> xxx.yyy.234.52:80 SYN ******S* 14004 Nov 27 22:58:03 220.91.157.58:4108 -> xxx.yyy.194.125:5554 SYN ******S* Nov 27 22:58:04 220.91.157.58:1089 -> xxx.yyy.194.125:1023 SYN ******S* Nov 27 22:58:06 220.91.157.58:2069 -> xxx.yyy.194.125:9898 SYN ******S* Nov 27 22:58:03 220.91.157.58:4114 -> xxx.yyy.194.128:5554 SYN ******S* Nov 27 22:58:04 220.91.157.58:1099 -> xxx.yyy.194.128:1023 SYN ******S* Nov 27 22:58:06 220.91.157.58:2078 -> xxx.yyy.194.128:9898 SYN ******S* Nov 27 22:58:03 220.91.157.58:4107 -> xxx.yyy.194.124:5554 SYN ******S* Nov 27 22:58:04 220.91.157.58:1088 -> xxx.yyy.194.124:1023 SYN ******S* [...] Nov 27 22:58:48 220.91.157.58:2021 -> xxx.yyy.214.225:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2022 -> xxx.yyy.214.224:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2020 -> xxx.yyy.214.226:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2025 -> xxx.yyy.214.223:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2047 -> xxx.yyy.214.221:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2046 -> xxx.yyy.214.228:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2048 -> xxx.yyy.214.220:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2049 -> xxx.yyy.214.219:9898 SYN ******S* Nov 27 22:58:48 220.91.157.58:2057 -> xxx.yyy.214.242:9898 SYN ******S* 13782 Nov 27 23:57:00 221.127.95.61:4614 -> xxx.yyy.154.124:5554 SYN ******S* Nov 27 23:57:01 221.127.95.61:1423 -> xxx.yyy.154.124:1023 SYN ******S* Nov 27 23:57:03 221.127.95.61:2679 -> xxx.yyy.154.124:9898 SYN ******S* Nov 27 23:57:00 221.127.95.61:4617 -> xxx.yyy.154.122:5554 SYN ******S* Nov 27 23:57:01 221.127.95.61:1428 -> xxx.yyy.154.122:1023 SYN ******S* Nov 27 23:57:00 221.127.95.61:4618 -> xxx.yyy.154.121:5554 SYN ******S* Nov 27 23:57:01 221.127.95.61:1429 -> xxx.yyy.154.121:1023 SYN ******S* Nov 27 23:57:03 221.127.95.61:2683 -> xxx.yyy.154.121:9898 SYN ******S* [...] Nov 27 23:57:50 221.127.95.61:2489 -> xxx.yyy.174.216:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2502 -> xxx.yyy.174.210:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2485 -> xxx.yyy.174.215:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2513 -> xxx.yyy.174.219:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2514 -> xxx.yyy.174.217:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2515 -> xxx.yyy.174.207:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2516 -> xxx.yyy.174.208:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2538 -> xxx.yyy.174.211:9898 SYN ******S* Nov 27 23:57:50 221.127.95.61:2541 -> xxx.yyy.174.218:9898 SYN ******S* 13084 Nov 27 22:57:31 221.163.181.239:1080 -> xxx.yyy.195.98:5554 SYN ******S* Nov 27 22:57:34 221.163.181.239:2521 -> xxx.yyy.195.98:9898 SYN ******S* Nov 27 22:57:31 221.163.181.239:1084 -> xxx.yyy.195.95:5554 SYN ******S* Nov 27 22:57:31 221.163.181.239:1083 -> xxx.yyy.195.96:5554 SYN ******S* Nov 27 22:57:31 221.163.181.239:1079 -> xxx.yyy.195.99:5554 SYN ******S* Nov 27 22:57:31 221.163.181.239:1087 -> xxx.yyy.195.91:5554 SYN ******S* Nov 27 22:57:31 221.163.181.239:1091 -> xxx.yyy.195.103:5554 SYN ******S* Nov 27 22:57:31 221.163.181.239:1090 -> xxx.yyy.195.102:5554 SYN ******S* [...] Nov 27 22:58:25 221.163.181.239:1609 -> xxx.yyy.215.152:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1621 -> xxx.yyy.215.162:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1626 -> xxx.yyy.215.166:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1636 -> xxx.yyy.215.174:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1644 -> xxx.yyy.215.165:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1628 -> xxx.yyy.215.180:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1711 -> xxx.yyy.215.197:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1706 -> xxx.yyy.215.191:9898 SYN ******S* Nov 27 22:58:25 221.163.181.239:1740 -> xxx.yyy.215.207:9898 SYN ******S* 12987 Nov 27 22:58:36 168.126.96.149:2565 -> xxx.yyy.153.136:5554 SYN ******S* Nov 27 22:58:37 168.126.96.149:2797 -> xxx.yyy.153.136:1023 SYN ******S* Nov 27 22:58:39 168.126.96.149:3310 -> xxx.yyy.153.136:9898 SYN ******S* Nov 27 22:58:36 168.126.96.149:2567 -> xxx.yyy.153.138:5554 SYN ******S* Nov 27 22:58:37 168.126.96.149:2799 -> xxx.yyy.153.138:1023 SYN ******S* Nov 27 22:58:39 168.126.96.149:3312 -> xxx.yyy.153.138:9898 SYN ******S* Nov 27 22:58:36 168.126.96.149:2569 -> xxx.yyy.153.140:5554 SYN ******S* Nov 27 22:58:37 168.126.96.149:2801 -> xxx.yyy.153.140:1023 SYN ******S* [...] Nov 27 22:59:53 168.126.96.149:1661 -> xxx.yyy.173.242:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1656 -> xxx.yyy.173.237:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1658 -> xxx.yyy.173.239:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1650 -> xxx.yyy.173.231:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1651 -> xxx.yyy.173.232:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1653 -> xxx.yyy.173.234:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1660 -> xxx.yyy.173.241:9898 SYN ******S* Nov 27 22:59:53 168.126.96.149:1677 -> xxx.yyy.173.243:9898 SYN ******S* 12540 Nov 27 23:56:28 221.127.186.105:1215 -> xxx.yyy.236.76:5554 SYN ******S* Nov 27 23:56:29 221.127.186.105:1932 -> xxx.yyy.236.76:1023 SYN ******S* Nov 27 23:56:31 221.127.186.105:3093 -> xxx.yyy.236.76:9898 SYN ******S* Nov 27 23:56:28 221.127.186.105:1218 -> xxx.yyy.236.77:5554 SYN ******S* Nov 27 23:56:29 221.127.186.105:1933 -> xxx.yyy.236.77:1023 SYN ******S* Nov 27 23:56:31 221.127.186.105:3094 -> xxx.yyy.236.77:9898 SYN ******S* Nov 27 23:56:28 221.127.186.105:1219 -> xxx.yyy.236.78:5554 SYN ******S* Nov 27 23:56:29 221.127.186.105:1934 -> xxx.yyy.236.78:1023 SYN ******S* [...] Nov 27 23:57:12 221.127.186.105:4202 -> xxx.yyy.255.239:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4221 -> xxx.yyy.255.241:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4222 -> xxx.yyy.255.240:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4225 -> xxx.yyy.255.242:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4227 -> xxx.yyy.255.243:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4232 -> xxx.yyy.255.244:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4233 -> xxx.yyy.255.245:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4236 -> xxx.yyy.255.246:9898 SYN ******S* Nov 27 23:57:12 221.127.186.105:4243 -> xxx.yyy.255.248:9898 SYN ******S* 11692 [...] 11675 Nov 27 22:55:51 222.98.203.159:2631 -> xxx.yyy.174.223:5554 SYN ******S* Nov 27 22:55:54 222.98.203.159:4624 -> xxx.yyy.174.223:9898 SYN ******S* Nov 27 22:55:51 222.98.203.159:2632 -> xxx.yyy.174.224:5554 SYN ******S* Nov 27 22:55:52 222.98.203.159:3266 -> xxx.yyy.174.224:1023 SYN ******S* Nov 27 22:55:51 222.98.203.159:2630 -> xxx.yyy.174.222:5554 SYN ******S* Nov 27 22:55:54 222.98.203.159:4656 -> xxx.yyy.174.222:9898 SYN ******S* Nov 27 22:55:51 222.98.203.159:2635 -> xxx.yyy.174.227:5554 SYN ******S* Nov 27 22:55:52 222.98.203.159:3269 -> xxx.yyy.174.227:1023 SYN ******S* [...] Nov 27 22:56:36 222.98.203.159:3487 -> xxx.yyy.195.33:9898 SYN ******S* Nov 27 22:56:36 222.98.203.159:3489 -> xxx.yyy.195.35:9898 SYN ******S* Nov 27 22:56:36 222.98.203.159:3490 -> xxx.yyy.195.36:9898 SYN ******S* Nov 27 22:56:36 222.98.203.159:3542 -> xxx.yyy.195.44:9898 SYN ******S* Nov 27 22:56:36 222.98.203.159:3550 -> xxx.yyy.195.45:9898 SYN ******S* Nov 27 22:56:37 222.98.203.159:3580 -> xxx.yyy.195.62:9898 SYN ******S* Nov 27 22:56:37 222.98.203.159:3583 -> xxx.yyy.195.49:9898 SYN ******S* Nov 27 22:56:37 222.98.203.159:3582 -> xxx.yyy.195.48:9898 SYN ******S* Nov 27 22:56:37 222.98.203.159:3581 -> xxx.yyy.195.47:9898 SYN ******S* 9539 Nov 27 22:58:20 61.106.126.30:3481 -> xxx.yyy.71.160:1023 SYN ******S* Nov 27 22:58:22 61.106.126.30:4128 -> xxx.yyy.71.160:9898 SYN ******S* Nov 27 22:58:20 61.106.126.30:3485 -> xxx.yyy.71.164:1023 SYN ******S* Nov 27 22:58:22 61.106.126.30:4129 -> xxx.yyy.71.164:9898 SYN ******S* Nov 27 22:58:20 61.106.126.30:3490 -> xxx.yyy.71.167:1023 SYN ******S* Nov 27 22:58:22 61.106.126.30:4131 -> xxx.yyy.71.167:9898 SYN ******S* Nov 27 22:58:20 61.106.126.30:3508 -> xxx.yyy.71.179:1023 SYN ******S* Nov 27 22:58:22 61.106.126.30:4156 -> xxx.yyy.71.179:9898 SYN ******S* [...] Nov 27 23:00:09 61.106.126.30:3232 -> xxx.yyy.91.243:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3241 -> xxx.yyy.91.247:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3239 -> xxx.yyy.91.246:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3252 -> xxx.yyy.91.251:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3251 -> xxx.yyy.91.250:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3236 -> xxx.yyy.91.244:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3243 -> xxx.yyy.91.248:9898 SYN ******S* Nov 27 23:00:09 61.106.126.30:3249 -> xxx.yyy.91.249:9898 SYN ******S* 9061 Nov 27 20:33:38 220.87.47.112:2160 -> xxx.yyy.214.251:5554 SYN ******S* Nov 27 20:33:39 220.87.47.112:4014 -> xxx.yyy.214.251:1023 SYN ******S* Nov 27 20:33:41 220.87.47.112:2304 -> xxx.yyy.214.251:9898 SYN ******S* Nov 27 20:33:38 220.87.47.112:2177 -> xxx.yyy.214.254:5554 SYN ******S* Nov 27 20:33:39 220.87.47.112:4097 -> xxx.yyy.214.254:1023 SYN ******S* Nov 27 20:33:41 220.87.47.112:2313 -> xxx.yyy.214.254:9898 SYN ******S* Nov 27 20:33:38 220.87.47.112:2211 -> xxx.yyy.215.3:5554 SYN ******S* Nov 27 20:33:39 220.87.47.112:4109 -> xxx.yyy.215.3:1023 SYN ******S* [...] Nov 27 20:34:22 220.87.47.112:3666 -> xxx.yyy.216.173:1023 SYN ******S* Nov 27 20:34:24 220.87.47.112:1108 -> xxx.yyy.216.173:9898 SYN ******S* Nov 27 20:34:22 220.87.47.112:3959 -> xxx.yyy.216.179:1023 SYN ******S* Nov 27 20:34:24 220.87.47.112:1128 -> xxx.yyy.216.179:9898 SYN ******S* Nov 27 20:34:22 220.87.47.112:3961 -> xxx.yyy.216.180:1023 SYN ******S* Nov 27 20:34:24 220.87.47.112:1134 -> xxx.yyy.216.180:9898 SYN ******S* Nov 27 20:34:22 220.87.47.112:3962 -> xxx.yyy.234.228:9898 SYN ******S* Nov 27 20:34:24 220.87.47.112:4865 -> xxx.yyy.235.95:9898 SYN ******S* Nov 27 20:34:24 220.87.47.112:1631 -> xxx.yyy.234.227:9898 SYN ******S* 8348 Nov 27 22:55:57 222.103.253.169:4023 -> xxx.yyy.133.16:5554 SYN ******S* Nov 27 22:55:58 222.103.253.169:4733 -> xxx.yyy.133.16:1023 SYN ******S* Nov 27 22:55:57 222.103.253.169:4039 -> xxx.yyy.133.18:5554 SYN ******S* Nov 27 22:55:58 222.103.253.169:4762 -> xxx.yyy.133.18:1023 SYN ******S* Nov 27 22:55:57 222.103.253.169:4046 -> xxx.yyy.133.19:5554 SYN ******S* Nov 27 22:55:58 222.103.253.169:4782 -> xxx.yyy.133.19:1023 SYN ******S* Nov 27 22:55:57 222.103.253.169:4065 -> xxx.yyy.133.20:5554 SYN ******S* Nov 27 22:55:58 222.103.253.169:1144 -> xxx.yyy.133.20:1023 SYN ******S* [...] Nov 27 22:56:48 222.103.253.169:1773 -> xxx.yyy.152.200:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1774 -> xxx.yyy.152.202:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1793 -> xxx.yyy.152.232:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1795 -> xxx.yyy.152.211:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1797 -> xxx.yyy.152.231:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1788 -> xxx.yyy.152.230:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1814 -> xxx.yyy.152.221:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1839 -> xxx.yyy.152.205:9898 SYN ******S* Nov 27 22:56:48 222.103.253.169:1831 -> xxx.yyy.152.201:9898 SYN ******S* 7868 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions