[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 29 02:51:01 68.104.90.98:1867 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1868 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1869 -> xxx.yyy.1.3:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1870 -> xxx.yyy.1.4:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1871 -> xxx.yyy.1.5:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1872 -> xxx.yyy.1.6:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1873 -> xxx.yyy.1.7:1433 SYN ******S* Nov 29 02:51:01 68.104.90.98:1874 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 29 04:49:04 68.104.90.98:2157 -> xxx.yyy.255.246:1433 SYN ******S* Nov 29 04:49:04 68.104.90.98:2159 -> xxx.yyy.255.248:1433 SYN ******S* Nov 29 04:49:04 68.104.90.98:2161 -> xxx.yyy.255.249:1433 SYN ******S* Nov 29 04:49:04 68.104.90.98:2162 -> xxx.yyy.255.250:1433 SYN ******S* Nov 29 04:49:05 68.104.90.98:2167 -> xxx.yyy.255.251:1433 SYN ******S* Nov 29 04:49:05 68.104.90.98:2168 -> xxx.yyy.255.252:1433 SYN ******S* Nov 29 04:49:05 68.104.90.98:2170 -> xxx.yyy.255.254:1433 SYN ******S* Nov 29 04:49:05 68.104.90.98:2169 -> xxx.yyy.255.253:1433 SYN ******S* 118048 Nov 29 02:55:21 152.6.38.32:1642 -> xxx.yyy.1.0:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1669 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1724 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1744 -> xxx.yyy.1.3:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1806 -> xxx.yyy.1.4:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1808 -> xxx.yyy.1.5:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1814 -> xxx.yyy.1.6:1433 SYN ******S* Nov 29 02:55:22 152.6.38.32:1820 -> xxx.yyy.1.7:1433 SYN ******S* [...] Nov 29 07:45:34 152.6.38.32:2380 -> xxx.yyy.255.245:1433 SYN ******S* Nov 29 07:45:34 152.6.38.32:2473 -> xxx.yyy.255.246:1433 SYN ******S* Nov 29 07:45:34 152.6.38.32:2506 -> xxx.yyy.255.247:1433 SYN ******S* Nov 29 07:45:35 152.6.38.32:2514 -> xxx.yyy.255.248:1433 SYN ******S* Nov 29 07:45:35 152.6.38.32:2632 -> xxx.yyy.255.250:1433 SYN ******S* Nov 29 07:45:36 152.6.38.32:2662 -> xxx.yyy.255.251:1433 SYN ******S* Nov 29 07:45:36 152.6.38.32:2707 -> xxx.yyy.255.252:1433 SYN ******S* Nov 29 07:45:36 152.6.38.32:2719 -> xxx.yyy.255.253:1433 SYN ******S* Nov 29 07:45:36 152.6.38.32:2729 -> xxx.yyy.255.254:1433 SYN ******S* 116971 Nov 29 07:03:56 80.180.45.44:4152 -> xxx.yyy.1.3:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4151 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4150 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4153 -> xxx.yyy.1.4:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4154 -> xxx.yyy.1.5:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4155 -> xxx.yyy.1.6:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4156 -> xxx.yyy.1.7:1433 SYN ******S* Nov 29 07:03:56 80.180.45.44:4157 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 29 08:50:06 80.180.45.44:3495 -> xxx.yyy.255.244:1433 SYN ******S* Nov 29 08:50:06 80.180.45.44:3493 -> xxx.yyy.255.243:1433 SYN ******S* Nov 29 08:50:06 80.180.45.44:3491 -> xxx.yyy.255.242:1433 SYN ******S* Nov 29 08:50:06 80.180.45.44:3503 -> xxx.yyy.255.251:1433 SYN ******S* Nov 29 08:50:06 80.180.45.44:3502 -> xxx.yyy.255.250:1433 SYN ******S* Nov 29 08:50:06 80.180.45.44:3501 -> xxx.yyy.255.249:1433 SYN ******S* Nov 29 08:50:06 80.180.45.44:3505 -> xxx.yyy.255.252:1433 SYN ******S* Nov 29 08:50:07 80.180.45.44:3507 -> xxx.yyy.255.253:1433 SYN ******S* 99168 Nov 29 04:56:32 209.135.97.164:4547 -> xxx.yyy.1.1:25 SYN ******S* Nov 29 04:56:33 209.135.97.164:4548 -> xxx.yyy.1.2:25 SYN ******S* Nov 29 04:56:33 209.135.97.164:4549 -> xxx.yyy.1.3:25 SYN ******S* Nov 29 04:56:32 209.135.97.164:4550 -> xxx.yyy.1.4:25 SYN ******S* Nov 29 04:56:33 209.135.97.164:4551 -> xxx.yyy.1.5:25 SYN ******S* Nov 29 04:56:30 209.135.97.164:4552 -> xxx.yyy.1.6:25 SYN ******S* Nov 29 04:56:33 209.135.97.164:4553 -> xxx.yyy.1.7:25 SYN ******S* Nov 29 04:56:33 209.135.97.164:4554 -> xxx.yyy.1.8:25 SYN ******S* [...] Nov 29 05:07:33 209.135.97.164:3484 -> xxx.yyy.255.238:25 SYN ******S* Nov 29 05:07:33 209.135.97.164:3481 -> xxx.yyy.255.235:25 SYN ******S* Nov 29 05:07:33 209.135.97.164:3478 -> xxx.yyy.255.232:25 SYN ******S* Nov 29 05:07:33 209.135.97.164:3482 -> xxx.yyy.255.236:25 SYN ******S* Nov 29 05:07:33 209.135.97.164:3476 -> xxx.yyy.255.230:25 SYN ******S* Nov 29 05:07:33 209.135.97.164:3483 -> xxx.yyy.255.237:25 SYN ******S* Nov 29 05:07:34 209.135.97.164:3490 -> xxx.yyy.255.244:25 SYN ******S* Nov 29 05:07:34 209.135.97.164:3486 -> xxx.yyy.255.240:25 SYN ******S* 72050 Nov 29 03:28:41 166.61.232.146:3755 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 03:28:38 166.61.232.146:3756 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 03:28:38 166.61.232.146:3757 -> xxx.yyy.1.3:1433 SYN ******S* Nov 29 03:28:41 166.61.232.146:3758 -> xxx.yyy.1.4:1433 SYN ******S* Nov 29 03:28:41 166.61.232.146:3759 -> xxx.yyy.1.5:1433 SYN ******S* Nov 29 03:28:41 166.61.232.146:3760 -> xxx.yyy.1.6:1433 SYN ******S* Nov 29 03:28:41 166.61.232.146:3761 -> xxx.yyy.1.7:1433 SYN ******S* Nov 29 03:28:41 166.61.232.146:3762 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 29 03:40:19 166.61.232.146:2301 -> xxx.yyy.255.247:1433 SYN ******S* Nov 29 03:40:19 166.61.232.146:2298 -> xxx.yyy.255.244:1433 SYN ******S* Nov 29 03:40:19 166.61.232.146:2302 -> xxx.yyy.255.248:1433 SYN ******S* Nov 29 03:40:19 166.61.232.146:2299 -> xxx.yyy.255.245:1433 SYN ******S* Nov 29 03:40:19 166.61.232.146:2306 -> xxx.yyy.255.252:1433 SYN ******S* Nov 29 03:40:19 166.61.232.146:2307 -> xxx.yyy.255.253:1433 SYN ******S* Nov 29 03:40:20 166.61.232.146:2308 -> xxx.yyy.255.254:1433 SYN ******S* Nov 29 03:40:20 166.61.232.146:2305 -> xxx.yyy.255.251:1433 SYN ******S* 67838 Nov 29 14:22:03 195.66.102.4:1878 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 14:22:03 195.66.102.4:1879 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 14:22:03 195.66.102.4:1880 -> xxx.yyy.1.3:1433 SYN ******S* Nov 29 14:22:03 195.66.102.4:1882 -> xxx.yyy.1.5:1433 SYN ******S* Nov 29 14:22:03 195.66.102.4:1886 -> xxx.yyy.1.9:1433 SYN ******S* Nov 29 14:22:03 195.66.102.4:1888 -> xxx.yyy.1.11:1433 SYN ******S* Nov 29 14:22:06 195.66.102.4:1890 -> xxx.yyy.1.13:1433 SYN ******S* Nov 29 14:22:06 195.66.102.4:1891 -> xxx.yyy.1.14:1433 SYN ******S* [...] Nov 29 16:16:24 195.66.102.4:3711 -> xxx.yyy.255.230:1433 SYN ******S* Nov 29 16:16:25 195.66.102.4:3717 -> xxx.yyy.255.232:1433 SYN ******S* Nov 29 16:16:25 195.66.102.4:3728 -> xxx.yyy.255.233:1433 SYN ******S* Nov 29 16:16:25 195.66.102.4:3734 -> xxx.yyy.255.238:1433 SYN ******S* Nov 29 16:16:25 195.66.102.4:3736 -> xxx.yyy.255.240:1433 SYN ******S* Nov 29 16:16:26 195.66.102.4:3741 -> xxx.yyy.255.243:1433 SYN ******S* Nov 29 16:16:26 195.66.102.4:3753 -> xxx.yyy.255.250:1433 SYN ******S* Nov 29 16:16:27 195.66.102.4:3758 -> xxx.yyy.255.253:1433 SYN ******S* 51220 [...] 45652 Nov 29 00:00:15 131.211.20.92:1719 -> xxx.yyy.64.1:2277 SYN ******S* Nov 29 00:00:15 131.211.20.92:1723 -> xxx.yyy.64.5:2277 SYN ******S* Nov 29 00:00:15 131.211.20.92:1724 -> xxx.yyy.64.6:2277 SYN ******S* Nov 29 00:00:15 131.211.20.92:1725 -> xxx.yyy.64.7:2277 SYN ******S* Nov 29 00:00:18 131.211.20.92:1726 -> xxx.yyy.64.8:2277 SYN ******S* Nov 29 00:00:15 131.211.20.92:1728 -> xxx.yyy.64.10:2277 SYN ******S* Nov 29 00:00:18 131.211.20.92:1730 -> xxx.yyy.64.12:2277 SYN ******S* Nov 29 00:00:15 131.211.20.92:1731 -> xxx.yyy.64.13:2277 SYN ******S* [...] Nov 29 00:05:02 131.211.20.92:1700 -> xxx.yyy.255.247:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1696 -> xxx.yyy.255.243:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1702 -> xxx.yyy.255.249:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1703 -> xxx.yyy.255.250:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1704 -> xxx.yyy.255.251:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1697 -> xxx.yyy.255.244:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1699 -> xxx.yyy.255.246:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1698 -> xxx.yyy.255.245:2277 SYN ******S* Nov 29 00:05:02 131.211.20.92:1701 -> xxx.yyy.255.248:2277 SYN ******S* 40021 Nov 29 13:10:26 133.41.38.117:783 -> xxx.yyy.10.2:111 SYN ******S* Nov 29 13:10:23 133.41.38.117:782 -> xxx.yyy.10.1:111 SYN ******S* Nov 29 13:10:26 133.41.38.117:785 -> xxx.yyy.10.4:111 SYN ******S* Nov 29 13:10:23 133.41.38.117:786 -> xxx.yyy.10.5:111 SYN ******S* Nov 29 13:10:23 133.41.38.117:787 -> xxx.yyy.10.6:111 SYN ******S* Nov 29 13:10:26 133.41.38.117:788 -> xxx.yyy.10.7:111 SYN ******S* Nov 29 13:10:26 133.41.38.117:793 -> xxx.yyy.10.12:111 SYN ******S* Nov 29 13:10:26 133.41.38.117:797 -> xxx.yyy.10.15:111 SYN ******S* [...] Nov 29 13:36:40 133.41.38.117:896 -> xxx.yyy.255.234:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:897 -> xxx.yyy.255.235:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:898 -> xxx.yyy.255.236:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:899 -> xxx.yyy.255.237:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:900 -> xxx.yyy.255.238:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:902 -> xxx.yyy.255.240:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:903 -> xxx.yyy.255.241:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:905 -> xxx.yyy.255.243:111 SYN ******S* Nov 29 13:36:40 133.41.38.117:906 -> xxx.yyy.255.244:111 SYN ******S* 39569 Nov 29 04:12:01 222.106.85.233:1314 -> xxx.yyy.1.3:4899 SYN ******S* Nov 29 04:12:01 222.106.85.233:1312 -> xxx.yyy.1.1:4899 SYN ******S* Nov 29 04:12:01 222.106.85.233:1313 -> xxx.yyy.1.2:4899 SYN ******S* Nov 29 04:11:59 222.106.85.233:1315 -> xxx.yyy.1.4:4899 SYN ******S* Nov 29 04:11:59 222.106.85.233:1316 -> xxx.yyy.1.5:4899 SYN ******S* Nov 29 04:11:59 222.106.85.233:1317 -> xxx.yyy.1.6:4899 SYN ******S* Nov 29 04:11:59 222.106.85.233:1319 -> xxx.yyy.1.8:4899 SYN ******S* Nov 29 04:11:59 222.106.85.233:1320 -> xxx.yyy.1.9:4899 SYN ******S* [...] Nov 29 04:16:20 222.106.85.233:1035 -> xxx.yyy.255.221:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1059 -> xxx.yyy.255.244:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1060 -> xxx.yyy.255.245:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1065 -> xxx.yyy.255.250:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1066 -> xxx.yyy.255.251:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1067 -> xxx.yyy.255.252:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1068 -> xxx.yyy.255.253:4899 SYN ******S* Nov 29 04:16:20 222.106.85.233:1069 -> xxx.yyy.255.254:4899 SYN ******S* 39492 Nov 29 23:03:55 195.198.154.164:1311 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 23:03:55 195.198.154.164:1312 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 23:03:55 195.198.154.164:1313 -> xxx.yyy.1.3:1433 SYN ******S* Nov 29 23:03:55 195.198.154.164:1317 -> xxx.yyy.1.6:1433 SYN ******S* Nov 29 23:03:58 195.198.154.164:1319 -> xxx.yyy.1.8:1433 SYN ******S* Nov 29 23:03:55 195.198.154.164:1320 -> xxx.yyy.1.9:1433 SYN ******S* Nov 29 23:03:55 195.198.154.164:1321 -> xxx.yyy.1.10:1433 SYN ******S* Nov 29 23:03:55 195.198.154.164:1322 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 29 23:16:04 195.198.154.164:3839 -> xxx.yyy.255.234:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3851 -> xxx.yyy.255.246:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3852 -> xxx.yyy.255.247:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3850 -> xxx.yyy.255.245:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3849 -> xxx.yyy.255.244:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3848 -> xxx.yyy.255.243:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3847 -> xxx.yyy.255.242:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3853 -> xxx.yyy.255.248:1433 SYN ******S* Nov 29 23:16:05 195.198.154.164:3859 -> xxx.yyy.255.254:1433 SYN ******S* 37108 Nov 29 17:02:37 200.207.115.242:3569 -> xxx.yyy.1.1:1521 SYN ******S* Nov 29 17:02:37 200.207.115.242:3570 -> xxx.yyy.1.2:1521 SYN ******S* Nov 29 17:02:37 200.207.115.242:3573 -> xxx.yyy.1.5:1521 SYN ******S* Nov 29 17:02:40 200.207.115.242:3578 -> xxx.yyy.1.10:1521 SYN ******S* Nov 29 17:02:37 200.207.115.242:3579 -> xxx.yyy.1.11:1521 SYN ******S* Nov 29 17:02:37 200.207.115.242:3580 -> xxx.yyy.1.12:1521 SYN ******S* Nov 29 17:02:39 200.207.115.242:3585 -> xxx.yyy.1.17:1521 SYN ******S* Nov 29 17:02:38 200.207.115.242:3587 -> xxx.yyy.1.19:1521 SYN ******S* [...] Nov 29 17:14:21 200.207.115.242:3763 -> xxx.yyy.255.198:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3760 -> xxx.yyy.255.195:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3784 -> xxx.yyy.255.219:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3790 -> xxx.yyy.255.225:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3804 -> xxx.yyy.255.239:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3798 -> xxx.yyy.255.233:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3817 -> xxx.yyy.255.252:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3819 -> xxx.yyy.255.254:1521 SYN ******S* Nov 29 17:14:21 200.207.115.242:3816 -> xxx.yyy.255.251:1521 SYN ******S* 32612 Nov 29 22:54:07 220.168.7.45:4995 -> xxx.yyy.188.161:1025 SYN ******S* Nov 29 22:54:07 220.168.7.45:1031 -> xxx.yyy.188.161:6129 SYN ******S* Nov 29 22:54:07 220.168.7.45:1056 -> xxx.yyy.188.161:1433 SYN ******S* Nov 29 22:54:07 220.168.7.45:1058 -> xxx.yyy.188.161:5000 SYN ******S* Nov 29 22:54:07 220.168.7.45:1068 -> xxx.yyy.188.161:80 SYN ******S* Nov 29 22:54:07 220.168.7.45:1047 -> xxx.yyy.188.161:3410 SYN ******S* Nov 29 22:54:05 220.168.7.45:4919 -> xxx.yyy.33.38:1433 SYN ******S* Nov 29 22:54:05 220.168.7.45:1230 -> xxx.yyy.33.22:6129 SYN ******S* [...] Nov 30 00:00:00 220.168.7.45:1718 -> xxx.yyy.203.206:5554 SYN ******S* Nov 30 00:00:00 220.168.7.45:1721 -> xxx.yyy.203.206:1433 SYN ******S* Nov 30 00:00:00 220.168.7.45:1722 -> xxx.yyy.203.206:5000 SYN ******S* Nov 30 00:00:00 220.168.7.45:1658 -> xxx.yyy.33.106:1025 SYN ******S* Nov 30 00:00:00 220.168.7.45:1661 -> xxx.yyy.33.106:6129 SYN ******S* Nov 30 00:00:00 220.168.7.45:1673 -> xxx.yyy.33.106:3410 SYN ******S* Nov 30 00:00:00 220.168.7.45:1691 -> xxx.yyy.33.106:5000 SYN ******S* Nov 30 00:00:00 220.168.7.45:1693 -> xxx.yyy.33.106:80 SYN ******S* 25317 Nov 29 14:21:58 200.67.207.246:4887 -> xxx.yyy.1.4:1433 SYN ******S* Nov 29 14:21:56 200.67.207.246:4892 -> xxx.yyy.1.9:1433 SYN ******S* Nov 29 14:21:56 200.67.207.246:4895 -> xxx.yyy.1.12:1433 SYN ******S* Nov 29 14:21:56 200.67.207.246:4897 -> xxx.yyy.1.14:1433 SYN ******S* Nov 29 14:21:56 200.67.207.246:4900 -> xxx.yyy.1.17:1433 SYN ******S* Nov 29 14:21:56 200.67.207.246:4901 -> xxx.yyy.1.18:1433 SYN ******S* Nov 29 14:21:59 200.67.207.246:4903 -> xxx.yyy.1.20:1433 SYN ******S* Nov 29 14:21:59 200.67.207.246:4904 -> xxx.yyy.1.21:1433 SYN ******S* [...] Nov 29 19:22:51 200.67.207.246:3318 -> xxx.yyy.107.253:1433 SYN ******S* Nov 29 19:22:52 200.67.207.246:3246 -> xxx.yyy.107.251:1433 SYN ******S* Nov 29 19:22:54 200.67.207.246:3319 -> xxx.yyy.107.254:1433 SYN ******S* Nov 29 19:22:54 200.67.207.246:3162 -> xxx.yyy.107.247:1433 SYN ******S* Nov 29 19:22:55 200.67.207.246:3165 -> xxx.yyy.107.248:1433 SYN ******S* Nov 29 19:22:57 200.67.207.246:3220 -> xxx.yyy.107.249:1433 SYN ******S* Nov 29 19:23:00 200.67.207.246:3318 -> xxx.yyy.107.253:1433 SYN ******S* Nov 29 19:23:00 200.67.207.246:3319 -> xxx.yyy.107.254:1433 SYN ******S* 14127 Nov 29 00:07:06 211.214.247.160:3217 -> xxx.yyy.249.7:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3215 -> xxx.yyy.249.5:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3213 -> xxx.yyy.249.3:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3221 -> xxx.yyy.249.11:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3219 -> xxx.yyy.249.9:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3220 -> xxx.yyy.249.10:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3216 -> xxx.yyy.249.6:1433 SYN ******S* Nov 29 00:07:06 211.214.247.160:3224 -> xxx.yyy.249.14:1433 SYN ******S* [...] Nov 29 23:30:49 211.214.247.160:4010 -> xxx.yyy.168.240:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:4017 -> xxx.yyy.168.247:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:3975 -> xxx.yyy.168.205:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:3978 -> xxx.yyy.168.208:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:3972 -> xxx.yyy.168.202:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:3984 -> xxx.yyy.168.214:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:3987 -> xxx.yyy.168.217:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:4008 -> xxx.yyy.168.238:1433 SYN ******S* Nov 29 23:30:49 211.214.247.160:4018 -> xxx.yyy.168.248:1433 SYN ******S* 12475 [...] 11742 Nov 29 22:05:04 61.187.8.37:4182 -> xxx.yyy.1.245:6129 SYN ******S* Nov 29 22:05:06 61.187.8.37:4187 -> xxx.yyy.1.245:3410 SYN ******S* Nov 29 22:05:06 61.187.8.37:4219 -> xxx.yyy.1.245:5554 SYN ******S* Nov 29 22:05:04 61.187.8.37:4221 -> xxx.yyy.1.245:5000 SYN ******S* Nov 29 22:05:06 61.187.8.37:4234 -> xxx.yyy.1.245:80 SYN ******S* Nov 29 22:05:04 61.187.8.37:4296 -> xxx.yyy.1.25:5554 SYN ******S* Nov 29 22:05:06 61.187.8.37:4295 -> xxx.yyy.1.25:3410 SYN ******S* Nov 29 22:05:04 61.187.8.37:4300 -> xxx.yyy.107.27:1025 SYN ******S* [...] Nov 29 23:59:55 61.187.8.37:2181 -> xxx.yyy.184.117:1025 SYN ******S* Nov 29 23:59:55 61.187.8.37:2400 -> xxx.yyy.1.195:1025 SYN ******S* Nov 29 23:59:56 61.187.8.37:2405 -> xxx.yyy.1.110:1025 SYN ******S* Nov 30 00:00:00 61.187.8.37:2394 -> xxx.yyy.66.170:1025 SYN ******S* Nov 30 00:00:00 61.187.8.37:2396 -> xxx.yyy.66.170:6129 SYN ******S* Nov 29 23:59:58 61.187.8.37:2189 -> xxx.yyy.157.49:1025 SYN ******S* Nov 29 23:59:59 61.187.8.37:2452 -> xxx.yyy.1.144:1025 SYN ******S* Nov 30 00:00:00 61.187.8.37:2303 -> xxx.yyy.171.66:6129 SYN ******S* Nov 30 00:00:00 61.187.8.37:2300 -> xxx.yyy.171.66:1025 SYN ******S* 11702 Nov 29 22:28:32 220.167.7.45:1378 -> xxx.yyy.33.54:3410 SYN ******S* Nov 29 22:28:35 220.167.7.45:1411 -> xxx.yyy.33.201:1025 SYN ******S* Nov 29 22:28:35 220.167.7.45:1415 -> xxx.yyy.33.201:6129 SYN ******S* Nov 29 22:28:35 220.167.7.45:1420 -> xxx.yyy.33.201:3410 SYN ******S* Nov 29 22:28:35 220.167.7.45:1426 -> xxx.yyy.33.201:5554 SYN ******S* Nov 29 22:28:32 220.167.7.45:1427 -> xxx.yyy.33.201:1433 SYN ******S* Nov 29 22:28:35 220.167.7.45:1279 -> xxx.yyy.138.19:6129 SYN ******S* Nov 29 22:28:35 220.167.7.45:1302 -> xxx.yyy.138.19:3410 SYN ******S* [...] Nov 29 22:53:59 220.167.7.45:3109 -> xxx.yyy.182.148:3410 SYN ******S* Nov 29 22:53:59 220.167.7.45:3114 -> xxx.yyy.182.148:5554 SYN ******S* Nov 29 22:53:59 220.167.7.45:3128 -> xxx.yyy.182.148:5000 SYN ******S* Nov 29 22:53:59 220.167.7.45:3476 -> xxx.yyy.244.21:1025 SYN ******S* Nov 29 22:53:59 220.167.7.45:3459 -> xxx.yyy.33.23:6129 SYN ******S* Nov 29 22:53:59 220.167.7.45:3468 -> xxx.yyy.33.23:3410 SYN ******S* Nov 29 22:53:59 220.167.7.45:3469 -> xxx.yyy.33.23:5554 SYN ******S* Nov 29 22:54:02 220.167.7.45:3488 -> xxx.yyy.231.244:1025 SYN ******S* 10631 Nov 29 00:06:13 65.54.188.52:19059 -> xxx.yyy.248.80:80 SYN ******S* Nov 29 00:06:13 65.54.188.52:19111 -> xxx.yyy.248.45:80 SYN ******S* Nov 29 00:06:13 65.54.188.52:19235 -> xxx.yyy.233.168:80 SYN ******S* Nov 29 00:06:13 65.54.188.52:19243 -> xxx.yyy.248.4:80 SYN ******S* Nov 29 00:06:13 65.54.188.52:18360 -> xxx.yyy.228.159:80 SYN ******S* Nov 29 00:06:23 65.54.188.52:19693 -> xxx.yyy.241.30:80 SYN ******S* Nov 29 00:06:26 65.54.188.52:20682 -> xxx.yyy.241.20:80 SYN ******S* Nov 29 00:06:25 65.54.188.52:20371 -> xxx.yyy.1.13:80 SYN ******S* [...] Nov 29 23:47:12 65.54.188.52:52608 -> xxx.yyy.210.5:80 SYN ******S* Nov 29 23:49:23 65.54.188.52:58863 -> xxx.yyy.212.75:80 SYN ******S* Nov 29 23:49:23 65.54.188.52:58998 -> xxx.yyy.1.13:80 SYN ******S* Nov 29 23:49:24 65.54.188.52:59254 -> xxx.yyy.1.60:80 SYN ******S* Nov 29 23:49:25 65.54.188.52:59699 -> xxx.yyy.12.25:80 SYN ******S* Nov 29 23:49:25 65.54.188.52:59758 -> xxx.yyy.248.4:80 SYN ******S* Nov 29 23:49:27 65.54.188.52:60497 -> xxx.yyy.241.255:80 SYN ******S* Nov 29 23:49:28 65.54.188.52:60561 -> xxx.yyy.234.52:80 SYN ******S* Nov 29 23:49:31 65.54.188.52:60990 -> xxx.yyy.210.5:80 SYN ******S* 8558 Nov 29 23:56:19 221.201.184.157:1515 -> xxx.yyy.71.162:5554 SYN ******S* Nov 29 23:56:20 221.201.184.157:2545 -> xxx.yyy.71.162:1023 SYN ******S* Nov 29 23:56:19 221.201.184.157:1529 -> xxx.yyy.71.187:5554 SYN ******S* Nov 29 23:56:20 221.201.184.157:2511 -> xxx.yyy.71.187:1023 SYN ******S* Nov 29 23:56:19 221.201.184.157:1571 -> xxx.yyy.71.196:5554 SYN ******S* Nov 29 23:56:20 221.201.184.157:2590 -> xxx.yyy.71.196:1023 SYN ******S* Nov 29 23:56:19 221.201.184.157:1578 -> xxx.yyy.71.197:5554 SYN ******S* Nov 29 23:56:19 221.201.184.157:1588 -> xxx.yyy.71.199:5554 SYN ******S* [...] Nov 29 23:57:07 221.201.184.157:4924 -> xxx.yyy.92.3:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:4936 -> xxx.yyy.92.2:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1039 -> xxx.yyy.92.4:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1059 -> xxx.yyy.92.9:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1075 -> xxx.yyy.92.7:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1087 -> xxx.yyy.92.8:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1112 -> xxx.yyy.92.10:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1170 -> xxx.yyy.92.13:9898 SYN ******S* Nov 29 23:57:07 221.201.184.157:1173 -> xxx.yyy.92.12:9898 SYN ******S* 7641 Nov 29 22:54:39 60.34.168.24:4822 -> xxx.yyy.235.117:5554 SYN ******S* Nov 29 22:54:39 60.34.168.24:4825 -> xxx.yyy.235.118:5554 SYN ******S* Nov 29 22:54:39 60.34.168.24:4828 -> xxx.yyy.235.121:5554 SYN ******S* Nov 29 22:54:40 60.34.168.24:2641 -> xxx.yyy.235.121:1023 SYN ******S* Nov 29 22:54:39 60.34.168.24:4838 -> xxx.yyy.235.125:5554 SYN ******S* Nov 29 22:54:40 60.34.168.24:2651 -> xxx.yyy.235.125:1023 SYN ******S* Nov 29 22:54:39 60.34.168.24:4879 -> xxx.yyy.235.132:5554 SYN ******S* Nov 29 22:54:39 60.34.168.24:4819 -> xxx.yyy.235.115:5554 SYN ******S* [...] Nov 29 22:55:30 60.34.168.24:4731 -> xxx.yyy.255.197:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:4798 -> xxx.yyy.255.180:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:4801 -> xxx.yyy.255.190:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:4923 -> xxx.yyy.255.202:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:1059 -> xxx.yyy.255.206:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:1162 -> xxx.yyy.255.207:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:1163 -> xxx.yyy.255.212:9898 SYN ******S* Nov 29 22:55:30 60.34.168.24:1593 -> xxx.yyy.255.234:9898 SYN ******S* 6146 [...] 6132 Nov 29 23:56:44 221.193.44.76:4806 -> xxx.yyy.72.130:5554 SYN ******S* Nov 29 23:56:44 221.193.44.76:4819 -> xxx.yyy.72.134:5554 SYN ******S* Nov 29 23:56:44 221.193.44.76:4804 -> xxx.yyy.72.128:5554 SYN ******S* Nov 29 23:56:44 221.193.44.76:4807 -> xxx.yyy.72.131:5554 SYN ******S* Nov 29 23:56:44 221.193.44.76:4800 -> xxx.yyy.72.124:5554 SYN ******S* Nov 29 23:56:45 221.193.44.76:1476 -> xxx.yyy.72.124:1023 SYN ******S* Nov 29 23:56:44 221.193.44.76:4824 -> xxx.yyy.72.135:5554 SYN ******S* Nov 29 23:56:45 221.193.44.76:1484 -> xxx.yyy.72.135:1023 SYN ******S* [...] Nov 29 23:58:08 221.193.44.76:2886 -> xxx.yyy.73.125:9898 SYN ******S* Nov 29 23:58:07 221.193.44.76:2492 -> xxx.yyy.73.127:5554 SYN ******S* Nov 29 23:58:08 221.193.44.76:3016 -> xxx.yyy.73.127:1023 SYN ******S* Nov 29 23:58:10 221.193.44.76:4098 -> xxx.yyy.73.127:9898 SYN ******S* Nov 29 23:58:08 221.193.44.76:3015 -> xxx.yyy.73.126:1023 SYN ******S* Nov 29 23:58:10 221.193.44.76:4097 -> xxx.yyy.73.126:9898 SYN ******S* Nov 29 23:58:08 221.193.44.76:3017 -> xxx.yyy.73.128:1023 SYN ******S* Nov 29 23:58:10 221.193.44.76:4099 -> xxx.yyy.73.128:9898 SYN ******S* 6020 Nov 29 22:54:25 221.147.187.183:2232 -> xxx.yyy.236.85:5554 SYN ******S* Nov 29 22:54:26 221.147.187.183:2622 -> xxx.yyy.236.85:1023 SYN ******S* Nov 29 22:54:28 221.147.187.183:3385 -> xxx.yyy.236.85:9898 SYN ******S* Nov 29 22:54:25 221.147.187.183:2233 -> xxx.yyy.236.86:5554 SYN ******S* Nov 29 22:54:26 221.147.187.183:2623 -> xxx.yyy.236.86:1023 SYN ******S* Nov 29 22:54:28 221.147.187.183:3386 -> xxx.yyy.236.86:9898 SYN ******S* Nov 29 22:54:25 221.147.187.183:2244 -> xxx.yyy.236.89:5554 SYN ******S* Nov 29 22:54:26 221.147.187.183:2642 -> xxx.yyy.236.89:1023 SYN ******S* [...] Nov 29 22:55:22 221.147.187.183:1473 -> xxx.yyy.255.220:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1475 -> xxx.yyy.255.222:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1496 -> xxx.yyy.255.226:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1534 -> xxx.yyy.255.233:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1558 -> xxx.yyy.255.242:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1546 -> xxx.yyy.255.238:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1524 -> xxx.yyy.255.230:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1581 -> xxx.yyy.255.248:9898 SYN ******S* Nov 29 22:55:22 221.147.187.183:1561 -> xxx.yyy.255.243:9898 SYN ******S* 6019 Nov 29 22:56:18 220.85.252.243:1154 -> xxx.yyy.71.165:5554 SYN ******S* Nov 29 22:56:18 220.85.252.243:1156 -> xxx.yyy.71.167:5554 SYN ******S* Nov 29 22:56:18 220.85.252.243:1176 -> xxx.yyy.71.184:5554 SYN ******S* Nov 29 22:56:21 220.85.252.243:1177 -> xxx.yyy.71.184:1023 SYN ******S* Nov 29 22:56:18 220.85.252.243:1195 -> xxx.yyy.71.186:5554 SYN ******S* Nov 29 22:56:18 220.85.252.243:1203 -> xxx.yyy.71.191:5554 SYN ******S* Nov 29 22:56:21 220.85.252.243:1183 -> xxx.yyy.71.191:1023 SYN ******S* Nov 29 22:56:18 220.85.252.243:1208 -> xxx.yyy.71.192:5554 SYN ******S* [...] Nov 29 22:58:57 220.85.252.243:1177 -> xxx.yyy.91.84:9898 SYN ******S* Nov 29 22:58:57 220.85.252.243:1025 -> xxx.yyy.91.164:9898 SYN ******S* Nov 29 22:58:57 220.85.252.243:1139 -> xxx.yyy.91.205:9898 SYN ******S* Nov 29 22:58:57 220.85.252.243:1164 -> xxx.yyy.91.207:9898 SYN ******S* Nov 29 22:58:58 220.85.252.243:1119 -> xxx.yyy.91.215:9898 SYN ******S* Nov 29 22:58:58 220.85.252.243:1124 -> xxx.yyy.91.208:9898 SYN ******S* Nov 29 22:58:58 220.85.252.243:1186 -> xxx.yyy.91.55:9898 SYN ******S* Nov 29 22:59:01 220.85.252.243:1989 -> xxx.yyy.92.9:9898 SYN ******S* Nov 29 22:59:02 220.85.252.243:2230 -> xxx.yyy.92.6:9898 SYN ******S* 5977 Nov 29 07:11:35 200.141.134.49:3798 -> xxx.yyy.1.0:1433 SYN ******S* Nov 29 07:11:32 200.141.134.49:3907 -> xxx.yyy.1.1:1433 SYN ******S* Nov 29 07:11:35 200.141.134.49:3909 -> xxx.yyy.1.2:1433 SYN ******S* Nov 29 07:11:35 200.141.134.49:4550 -> xxx.yyy.1.6:1433 SYN ******S* Nov 29 07:11:36 200.141.134.49:4579 -> xxx.yyy.1.7:1433 SYN ******S* Nov 29 07:11:36 200.141.134.49:4590 -> xxx.yyy.1.9:1433 SYN ******S* Nov 29 07:11:36 200.141.134.49:4598 -> xxx.yyy.1.10:1433 SYN ******S* Nov 29 07:11:36 200.141.134.49:4604 -> xxx.yyy.1.11:1433 SYN ******S* [...] Nov 29 07:41:25 200.141.134.49:3289 -> xxx.yyy.33.238:1433 SYN ******S* Nov 29 07:41:25 200.141.134.49:3348 -> xxx.yyy.33.239:1433 SYN ******S* Nov 29 07:41:26 200.141.134.49:3419 -> xxx.yyy.33.241:1433 SYN ******S* Nov 29 07:41:26 200.141.134.49:3426 -> xxx.yyy.33.240:1433 SYN ******S* Nov 29 07:41:26 200.141.134.49:3546 -> xxx.yyy.33.245:1433 SYN ******S* Nov 29 07:41:27 200.141.134.49:3854 -> xxx.yyy.33.249:1433 SYN ******S* Nov 29 07:41:27 200.141.134.49:3886 -> xxx.yyy.33.250:1433 SYN ******S* Nov 29 07:41:27 200.141.134.49:4008 -> xxx.yyy.33.251:1433 SYN ******S* Nov 29 07:41:28 200.141.134.49:4059 -> xxx.yyy.33.253:1433 SYN ******S* 5789 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions