[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Nov 30 03:07:28 65.107.99.135:4879 -> xxx.yyy.1.1:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4880 -> xxx.yyy.1.2:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4881 -> xxx.yyy.1.3:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4883 -> xxx.yyy.1.4:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4884 -> xxx.yyy.1.5:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4885 -> xxx.yyy.1.6:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4886 -> xxx.yyy.1.7:1433 SYN ******S* Nov 30 03:07:31 65.107.99.135:4887 -> xxx.yyy.1.8:1433 SYN ******S* [...] Nov 30 03:20:38 65.107.99.135:2629 -> xxx.yyy.255.241:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2636 -> xxx.yyy.255.248:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2633 -> xxx.yyy.255.245:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2630 -> xxx.yyy.255.242:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2640 -> xxx.yyy.255.252:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2641 -> xxx.yyy.255.253:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2638 -> xxx.yyy.255.250:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2639 -> xxx.yyy.255.251:1433 SYN ******S* Nov 30 03:20:38 65.107.99.135:2642 -> xxx.yyy.255.254:1433 SYN ******S* 69109 [...] 48168 Nov 30 09:09:40 211.144.105.189:29979 -> xxx.yyy.1.0:8081 SYN ******S* Nov 30 09:09:40 211.144.105.189:29982 -> xxx.yyy.1.2:8081 SYN ******S* Nov 30 09:09:40 211.144.105.189:29984 -> xxx.yyy.1.4:8081 SYN ******S* Nov 30 09:09:43 211.144.105.189:29991 -> xxx.yyy.1.8:8081 SYN ******S* Nov 30 09:09:40 211.144.105.189:29992 -> xxx.yyy.1.9:8081 SYN ******S* Nov 30 09:09:40 211.144.105.189:30004 -> xxx.yyy.1.16:8081 SYN ******S* Nov 30 09:09:43 211.144.105.189:30008 -> xxx.yyy.1.19:8081 SYN ******S* Nov 30 09:09:43 211.144.105.189:30014 -> xxx.yyy.1.23:8081 SYN ******S* [...] Nov 30 10:43:48 211.144.105.189:2706 -> xxx.yyy.255.200:8081 SYN ******S* Nov 30 10:43:48 211.144.105.189:2725 -> xxx.yyy.255.206:8081 SYN ******S* Nov 30 10:43:48 211.144.105.189:2702 -> xxx.yyy.255.197:8081 SYN ******S* Nov 30 10:43:48 211.144.105.189:2707 -> xxx.yyy.255.201:8081 SYN ******S* Nov 30 10:43:48 211.144.105.189:2704 -> xxx.yyy.255.198:8081 SYN ******S* Nov 30 10:43:48 211.144.105.189:2709 -> xxx.yyy.255.202:8081 SYN ******S* Nov 30 10:43:48 211.144.105.189:2727 -> xxx.yyy.255.208:8081 SYN ******S* Nov 30 10:43:49 211.144.105.189:2773 -> xxx.yyy.255.230:8081 SYN ******S* Nov 30 10:43:49 211.144.105.189:2807 -> xxx.yyy.255.253:8081 SYN ******S* 43069 Nov 30 18:23:02 24.2.3.36:1472 -> xxx.yyy.1.6:20168 SYN ******S* Nov 30 18:22:59 24.2.3.36:1471 -> xxx.yyy.1.5:20168 SYN ******S* Nov 30 18:23:02 24.2.3.36:1473 -> xxx.yyy.1.7:20168 SYN ******S* Nov 30 18:23:02 24.2.3.36:1474 -> xxx.yyy.1.8:20168 SYN ******S* Nov 30 18:22:59 24.2.3.36:1475 -> xxx.yyy.1.9:20168 SYN ******S* Nov 30 18:23:02 24.2.3.36:1478 -> xxx.yyy.1.12:20168 SYN ******S* Nov 30 18:23:00 24.2.3.36:1480 -> xxx.yyy.1.14:20168 SYN ******S* Nov 30 18:23:00 24.2.3.36:1482 -> xxx.yyy.1.16:20168 SYN ******S* [...] Nov 30 18:34:51 24.2.3.36:3286 -> xxx.yyy.255.231:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3314 -> xxx.yyy.255.245:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3310 -> xxx.yyy.255.243:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3320 -> xxx.yyy.255.248:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3322 -> xxx.yyy.255.249:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3316 -> xxx.yyy.255.246:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3306 -> xxx.yyy.255.241:20168 SYN ******S* Nov 30 18:34:51 24.2.3.36:3312 -> xxx.yyy.255.244:20168 SYN ******S* 42451 Nov 30 15:06:04 200.104.126.40:3403 -> xxx.yyy.1.9:1433 SYN ******S* Nov 30 15:06:04 200.104.126.40:3404 -> xxx.yyy.1.10:1433 SYN ******S* Nov 30 15:06:01 200.104.126.40:3405 -> xxx.yyy.1.11:1433 SYN ******S* Nov 30 15:06:04 200.104.126.40:3408 -> xxx.yyy.1.14:1433 SYN ******S* Nov 30 15:06:01 200.104.126.40:3411 -> xxx.yyy.1.17:1433 SYN ******S* Nov 30 15:06:04 200.104.126.40:3414 -> xxx.yyy.1.20:1433 SYN ******S* Nov 30 15:06:01 200.104.126.40:3415 -> xxx.yyy.1.21:1433 SYN ******S* Nov 30 15:06:04 200.104.126.40:3417 -> xxx.yyy.1.23:1433 SYN ******S* [...] Nov 30 15:18:43 200.104.126.40:4384 -> xxx.yyy.255.214:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4391 -> xxx.yyy.255.221:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4399 -> xxx.yyy.255.229:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4395 -> xxx.yyy.255.225:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4408 -> xxx.yyy.255.238:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4421 -> xxx.yyy.255.251:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4419 -> xxx.yyy.255.249:1433 SYN ******S* Nov 30 15:18:43 200.104.126.40:4417 -> xxx.yyy.255.247:1433 SYN ******S* 38349 Nov 30 20:12:58 61.41.138.131:3171 -> xxx.yyy.1.3:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3180 -> xxx.yyy.1.12:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3181 -> xxx.yyy.1.13:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3188 -> xxx.yyy.1.20:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3190 -> xxx.yyy.1.22:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3192 -> xxx.yyy.1.24:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3194 -> xxx.yyy.1.26:1433 SYN ******S* Nov 30 20:12:58 61.41.138.131:3195 -> xxx.yyy.1.27:1433 SYN ******S* [...] Nov 30 20:24:39 61.41.138.131:2289 -> xxx.yyy.255.239:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2287 -> xxx.yyy.255.237:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2282 -> xxx.yyy.255.232:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2296 -> xxx.yyy.255.246:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2294 -> xxx.yyy.255.244:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2292 -> xxx.yyy.255.242:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2302 -> xxx.yyy.255.252:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2303 -> xxx.yyy.255.253:1433 SYN ******S* Nov 30 20:24:39 61.41.138.131:2301 -> xxx.yyy.255.251:1433 SYN ******S* 37240 Nov 30 07:29:00 200.47.28.194:24786 -> xxx.yyy.1.8:4899 SYN ******S* Nov 30 07:29:00 200.47.28.194:24789 -> xxx.yyy.1.11:4899 SYN ******S* Nov 30 07:29:00 200.47.28.194:24791 -> xxx.yyy.1.13:4899 SYN ******S* Nov 30 07:29:00 200.47.28.194:24792 -> xxx.yyy.1.14:4899 SYN ******S* Nov 30 07:29:00 200.47.28.194:24793 -> xxx.yyy.1.15:4899 SYN ******S* Nov 30 07:29:02 200.47.28.194:24795 -> xxx.yyy.1.17:4899 SYN ******S* Nov 30 07:29:00 200.47.28.194:24798 -> xxx.yyy.1.20:4899 SYN ******S* Nov 30 07:29:00 200.47.28.194:24796 -> xxx.yyy.1.18:4899 SYN ******S* [...] Nov 30 07:35:02 200.47.28.194:25495 -> xxx.yyy.255.246:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25498 -> xxx.yyy.255.249:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25497 -> xxx.yyy.255.248:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25500 -> xxx.yyy.255.251:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25496 -> xxx.yyy.255.247:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25499 -> xxx.yyy.255.250:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25501 -> xxx.yyy.255.252:4899 SYN ******S* Nov 30 07:35:02 200.47.28.194:25503 -> xxx.yyy.255.254:4899 SYN ******S* 35510 Nov 30 09:02:55 67.132.241.122:1910 -> xxx.yyy.1.1:4000 SYN ******S* Nov 30 09:02:55 67.132.241.122:1911 -> xxx.yyy.1.2:4000 SYN ******S* Nov 30 09:02:57 67.132.241.122:1932 -> xxx.yyy.1.23:4000 SYN ******S* Nov 30 09:02:54 67.132.241.122:1933 -> xxx.yyy.1.24:4000 SYN ******S* Nov 30 09:02:57 67.132.241.122:1934 -> xxx.yyy.1.25:4000 SYN ******S* Nov 30 09:02:55 67.132.241.122:1935 -> xxx.yyy.1.26:4000 SYN ******S* Nov 30 09:02:55 67.132.241.122:1942 -> xxx.yyy.1.33:4000 SYN ******S* Nov 30 09:02:57 67.132.241.122:1952 -> xxx.yyy.1.43:4000 SYN ******S* [...] Nov 30 09:13:51 67.132.241.122:4831 -> xxx.yyy.255.219:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4836 -> xxx.yyy.255.222:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4833 -> xxx.yyy.255.220:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4838 -> xxx.yyy.255.224:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4883 -> xxx.yyy.255.234:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4874 -> xxx.yyy.255.233:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4909 -> xxx.yyy.255.236:4000 SYN ******S* Nov 30 09:13:51 67.132.241.122:4885 -> xxx.yyy.255.235:4000 SYN ******S* 35309 Nov 30 21:22:18 207.251.143.194:1224 -> xxx.yyy.1.1:3306 SYN ******S* Nov 30 21:22:17 207.251.143.194:1225 -> xxx.yyy.1.2:3306 SYN ******S* Nov 30 21:22:18 207.251.143.194:1226 -> xxx.yyy.1.3:3306 SYN ******S* Nov 30 21:22:20 207.251.143.194:1227 -> xxx.yyy.1.4:3306 SYN ******S* Nov 30 21:22:20 207.251.143.194:1229 -> xxx.yyy.1.6:3306 SYN ******S* Nov 30 21:22:20 207.251.143.194:1230 -> xxx.yyy.1.7:3306 SYN ******S* Nov 30 21:22:17 207.251.143.194:1232 -> xxx.yyy.1.9:3306 SYN ******S* Nov 30 21:22:17 207.251.143.194:1233 -> xxx.yyy.1.10:3306 SYN ******S* [...] Nov 30 21:34:13 207.251.143.194:1630 -> xxx.yyy.255.229:3306 SYN ******S* Nov 30 21:34:13 207.251.143.194:1631 -> xxx.yyy.255.230:3306 SYN ******S* Nov 30 21:34:13 207.251.143.194:1629 -> xxx.yyy.255.228:3306 SYN ******S* Nov 30 21:34:14 207.251.143.194:1639 -> xxx.yyy.255.238:3306 SYN ******S* Nov 30 21:34:14 207.251.143.194:1649 -> xxx.yyy.255.248:3306 SYN ******S* Nov 30 21:34:14 207.251.143.194:1646 -> xxx.yyy.255.245:3306 SYN ******S* Nov 30 21:34:14 207.251.143.194:1650 -> xxx.yyy.255.249:3306 SYN ******S* Nov 30 21:34:14 207.251.143.194:1648 -> xxx.yyy.255.247:3306 SYN ******S* Nov 30 21:34:14 207.251.143.194:1656 -> xxx.yyy.255.254:3306 SYN ******S* 34114 Nov 30 11:12:09 203.221.91.249:3756 -> xxx.yyy.1.5:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3757 -> xxx.yyy.1.6:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3759 -> xxx.yyy.1.8:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3760 -> xxx.yyy.1.9:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3761 -> xxx.yyy.1.10:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3762 -> xxx.yyy.1.11:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3763 -> xxx.yyy.1.12:1433 SYN ******S* Nov 30 11:12:09 203.221.91.249:3764 -> xxx.yyy.1.13:1433 SYN ******S* [...] Nov 30 11:23:53 203.221.91.249:2873 -> xxx.yyy.255.237:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2870 -> xxx.yyy.255.234:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2881 -> xxx.yyy.255.245:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2878 -> xxx.yyy.255.242:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2882 -> xxx.yyy.255.246:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2879 -> xxx.yyy.255.243:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2876 -> xxx.yyy.255.240:1433 SYN ******S* Nov 30 11:23:53 203.221.91.249:2886 -> xxx.yyy.255.250:1433 SYN ******S* 29922 Nov 30 00:00:05 220.168.7.45:2919 -> xxx.yyy.158.55:6129 SYN ******S* Nov 30 00:00:05 220.168.7.45:2923 -> xxx.yyy.158.55:3410 SYN ******S* Nov 30 00:00:05 220.168.7.45:2927 -> xxx.yyy.158.55:5554 SYN ******S* Nov 30 00:00:05 220.168.7.45:2911 -> xxx.yyy.158.55:1025 SYN ******S* Nov 30 00:00:05 220.168.7.45:2928 -> xxx.yyy.158.55:1433 SYN ******S* Nov 30 00:00:05 220.168.7.45:2931 -> xxx.yyy.158.55:5000 SYN ******S* Nov 30 00:00:06 220.168.7.45:1375 -> xxx.yyy.33.145:1025 SYN ******S* Nov 30 00:00:07 220.168.7.45:1541 -> xxx.yyy.33.109:6129 SYN ******S* [...] Nov 30 22:18:31 220.168.7.45:1043 -> xxx.yyy.242.133:1433 SYN ******S* Nov 30 22:18:31 220.168.7.45:1031 -> xxx.yyy.242.133:1025 SYN ******S* Nov 30 22:18:31 220.168.7.45:1127 -> xxx.yyy.167.231:1025 SYN ******S* Nov 30 22:18:31 220.168.7.45:1134 -> xxx.yyy.210.186:6129 SYN ******S* Nov 30 22:18:32 220.168.7.45:1218 -> xxx.yyy.33.144:1433 SYN ******S* Nov 30 22:18:32 220.168.7.45:1209 -> xxx.yyy.33.144:3410 SYN ******S* Nov 30 22:18:32 220.168.7.45:1206 -> xxx.yyy.33.144:6129 SYN ******S* Nov 30 22:18:32 220.168.7.45:1203 -> xxx.yyy.33.144:1025 SYN ******S* 28024 Nov 30 00:57:35 61.136.144.194:1540 -> xxx.yyy.1.6:1433 SYN ******S* Nov 30 00:57:33 61.136.144.194:1532 -> xxx.yyy.1.1:1433 SYN ******S* Nov 30 00:57:35 61.136.144.194:1542 -> xxx.yyy.1.7:1433 SYN ******S* Nov 30 00:57:33 61.136.144.194:1538 -> xxx.yyy.1.5:1433 SYN ******S* Nov 30 00:57:33 61.136.144.194:1548 -> xxx.yyy.1.10:1433 SYN ******S* Nov 30 00:57:33 61.136.144.194:1559 -> xxx.yyy.1.18:1433 SYN ******S* Nov 30 00:57:33 61.136.144.194:1560 -> xxx.yyy.1.19:1433 SYN ******S* Nov 30 00:57:36 61.136.144.194:1585 -> xxx.yyy.1.30:1433 SYN ******S* [...] Nov 30 03:06:53 61.136.144.194:1444 -> xxx.yyy.145.23:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1447 -> xxx.yyy.145.26:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1446 -> xxx.yyy.145.25:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1448 -> xxx.yyy.145.27:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1451 -> xxx.yyy.145.30:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1452 -> xxx.yyy.145.31:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1455 -> xxx.yyy.145.34:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1454 -> xxx.yyy.145.33:1433 SYN ******S* Nov 30 03:06:53 61.136.144.194:1453 -> xxx.yyy.145.32:1433 SYN ******S* 21854 Nov 30 19:00:06 211.232.64.130:1510 -> xxx.yyy.1.2:1433 SYN ******S* Nov 30 19:00:06 211.232.64.130:1513 -> xxx.yyy.1.5:1433 SYN ******S* Nov 30 19:00:06 211.232.64.130:1517 -> xxx.yyy.1.9:1433 SYN ******S* Nov 30 19:00:03 211.232.64.130:1511 -> xxx.yyy.1.3:1433 SYN ******S* Nov 30 19:00:03 211.232.64.130:1512 -> xxx.yyy.1.4:1433 SYN ******S* Nov 30 19:00:03 211.232.64.130:1514 -> xxx.yyy.1.6:1433 SYN ******S* Nov 30 19:00:06 211.232.64.130:1523 -> xxx.yyy.1.14:1433 SYN ******S* Nov 30 19:00:03 211.232.64.130:1526 -> xxx.yyy.1.18:1433 SYN ******S* [...] Nov 30 19:03:58 211.232.64.130:1997 -> xxx.yyy.255.221:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:2007 -> xxx.yyy.255.230:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:1995 -> xxx.yyy.255.219:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:1994 -> xxx.yyy.255.217:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:1996 -> xxx.yyy.255.220:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:2014 -> xxx.yyy.255.236:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:2011 -> xxx.yyy.255.235:1433 SYN ******S* Nov 30 19:03:58 211.232.64.130:2024 -> xxx.yyy.255.247:1433 SYN ******S* 16050 [...] 14260 Nov 30 05:02:47 211.214.247.164:2408 -> xxx.yyy.192.4:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2407 -> xxx.yyy.192.3:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2410 -> xxx.yyy.192.6:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2417 -> xxx.yyy.192.13:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2414 -> xxx.yyy.192.10:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2421 -> xxx.yyy.192.17:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2412 -> xxx.yyy.192.8:1433 SYN ******S* Nov 30 05:02:47 211.214.247.164:2424 -> xxx.yyy.192.20:1433 SYN ******S* [...] Nov 30 23:41:18 211.214.247.164:1855 -> xxx.yyy.11.205:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1900 -> xxx.yyy.11.250:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1903 -> xxx.yyy.11.253:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1861 -> xxx.yyy.11.211:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1897 -> xxx.yyy.11.247:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1865 -> xxx.yyy.11.215:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1870 -> xxx.yyy.11.220:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1887 -> xxx.yyy.11.237:1433 SYN ******S* Nov 30 23:41:18 211.214.247.164:1888 -> xxx.yyy.11.238:1433 SYN ******S* 10817 [...] 10592 Nov 30 00:00:06 61.187.8.37:2540 -> xxx.yyy.169.237:6129 SYN ******S* Nov 30 00:00:06 61.187.8.37:2542 -> xxx.yyy.169.237:3410 SYN ******S* Nov 30 00:00:06 61.187.8.37:2538 -> xxx.yyy.169.237:1025 SYN ******S* Nov 30 00:00:09 61.187.8.37:2627 -> xxx.yyy.1.81:1025 SYN ******S* Nov 30 00:00:07 61.187.8.37:2523 -> xxx.yyy.204.197:1025 SYN ******S* Nov 30 00:00:08 61.187.8.37:2460 -> xxx.yyy.1.229:1025 SYN ******S* Nov 30 00:00:08 61.187.8.37:2607 -> xxx.yyy.167.209:1025 SYN ******S* Nov 30 00:00:08 61.187.8.37:2660 -> xxx.yyy.1.180:1025 SYN ******S* [...] Nov 30 01:21:00 61.187.8.37:2612 -> xxx.yyy.181.58:80 SYN ******S* Nov 30 01:21:00 61.187.8.37:2607 -> xxx.yyy.181.58:3410 SYN ******S* Nov 30 01:21:00 61.187.8.37:2608 -> xxx.yyy.181.58:5554 SYN ******S* Nov 30 01:21:00 61.187.8.37:2525 -> xxx.yyy.89.90:1433 SYN ******S* Nov 30 01:21:01 61.187.8.37:2651 -> xxx.yyy.70.196:1025 SYN ******S* Nov 30 01:21:01 61.187.8.37:2361 -> xxx.yyy.183.91:6129 SYN ******S* Nov 30 01:21:02 61.187.8.37:2644 -> xxx.yyy.226.230:1025 SYN ******S* Nov 30 01:21:03 61.187.8.37:2367 -> xxx.yyy.250.57:1025 SYN ******S* Nov 30 01:21:03 61.187.8.37:2373 -> xxx.yyy.250.57:5554 SYN ******S* 8934 [...] 8689 Nov 30 12:55:49 66.130.253.174:4786 -> xxx.yyy.71.161:5554 SYN ******S* Nov 30 12:55:50 66.130.253.174:1507 -> xxx.yyy.71.161:1023 SYN ******S* Nov 30 12:55:49 66.130.253.174:4801 -> xxx.yyy.71.165:5554 SYN ******S* Nov 30 12:55:50 66.130.253.174:1525 -> xxx.yyy.71.165:1023 SYN ******S* Nov 30 12:55:49 66.130.253.174:4804 -> xxx.yyy.71.166:5554 SYN ******S* Nov 30 12:55:50 66.130.253.174:1532 -> xxx.yyy.71.166:1023 SYN ******S* Nov 30 12:55:49 66.130.253.174:4811 -> xxx.yyy.71.167:5554 SYN ******S* Nov 30 12:55:50 66.130.253.174:1546 -> xxx.yyy.71.167:1023 SYN ******S* [...] Nov 30 12:57:44 66.130.253.174:2121 -> xxx.yyy.91.222:9898 SYN ******S* Nov 30 12:57:44 66.130.253.174:2126 -> xxx.yyy.91.223:9898 SYN ******S* Nov 30 12:57:44 66.130.253.174:2128 -> xxx.yyy.91.224:9898 SYN ******S* Nov 30 12:57:44 66.130.253.174:2476 -> xxx.yyy.91.255:9898 SYN ******S* Nov 30 12:57:45 66.130.253.174:2498 -> xxx.yyy.92.4:9898 SYN ******S* Nov 30 12:57:45 66.130.253.174:2556 -> xxx.yyy.92.21:9898 SYN ******S* Nov 30 12:57:45 66.130.253.174:2579 -> xxx.yyy.92.24:9898 SYN ******S* Nov 30 12:57:45 66.130.253.174:2565 -> xxx.yyy.92.15:9898 SYN ******S* Nov 30 12:57:45 66.130.253.174:2577 -> xxx.yyy.92.26:9898 SYN ******S* 6924 Nov 30 22:54:16 220.121.105.247:4438 -> xxx.yyy.215.5:5554 SYN ******S* Nov 30 22:54:16 220.121.105.247:4437 -> xxx.yyy.215.6:5554 SYN ******S* Nov 30 22:54:19 220.121.105.247:2225 -> xxx.yyy.215.6:9898 SYN ******S* Nov 30 22:54:16 220.121.105.247:4440 -> xxx.yyy.215.3:5554 SYN ******S* Nov 30 22:54:17 220.121.105.247:1243 -> xxx.yyy.215.3:1023 SYN ******S* Nov 30 22:54:19 220.121.105.247:2229 -> xxx.yyy.215.3:9898 SYN ******S* Nov 30 22:54:16 220.121.105.247:4441 -> xxx.yyy.215.2:5554 SYN ******S* Nov 30 22:54:16 220.121.105.247:4436 -> xxx.yyy.215.8:5554 SYN ******S* [...] Nov 30 22:55:03 220.121.105.247:3246 -> xxx.yyy.235.62:9898 SYN ******S* Nov 30 22:55:03 220.121.105.247:3242 -> xxx.yyy.235.55:9898 SYN ******S* Nov 30 22:55:03 220.121.105.247:3362 -> xxx.yyy.235.88:9898 SYN ******S* Nov 30 22:55:04 220.121.105.247:3507 -> xxx.yyy.235.101:9898 SYN ******S* Nov 30 22:55:04 220.121.105.247:3501 -> xxx.yyy.235.99:9898 SYN ******S* Nov 30 22:55:04 220.121.105.247:3512 -> xxx.yyy.235.97:9898 SYN ******S* Nov 30 22:55:04 220.121.105.247:3584 -> xxx.yyy.235.106:9898 SYN ******S* Nov 30 22:55:04 220.121.105.247:3592 -> xxx.yyy.235.111:9898 SYN ******S* Nov 30 22:55:04 220.121.105.247:3588 -> xxx.yyy.235.109:9898 SYN ******S* 6397 [...] 5725 Nov 30 00:01:36 65.54.188.52:35029 -> xxx.yyy.236.21:80 SYN ******S* Nov 30 00:01:37 65.54.188.52:35270 -> xxx.yyy.225.190:80 SYN ******S* Nov 30 00:01:38 65.54.188.52:35279 -> xxx.yyy.14.23:80 SYN ******S* Nov 30 00:01:38 65.54.188.52:36064 -> xxx.yyy.232.143:80 SYN ******S* Nov 30 00:01:38 65.54.188.52:36097 -> xxx.yyy.241.98:80 SYN ******S* Nov 30 00:01:41 65.54.188.52:36800 -> xxx.yyy.225.122:206 SYN ******S* Nov 30 00:01:44 65.54.188.52:36800 -> xxx.yyy.225.122:206 SYN ******S* Nov 30 00:01:48 65.54.188.52:36469 -> xxx.yyy.227.252:80 SYN ******S* [...] Nov 30 23:49:36 65.54.188.52:31823 -> xxx.yyy.241.29:80 SYN ******S* Nov 30 23:49:36 65.54.188.52:31846 -> xxx.yyy.241.98:80 SYN ******S* Nov 30 23:49:36 65.54.188.52:32016 -> xxx.yyy.241.30:80 SYN ******S* Nov 30 23:49:37 65.54.188.52:32271 -> xxx.yyy.241.179:80 SYN ******S* Nov 30 23:49:40 65.54.188.52:33206 -> xxx.yyy.240.117:80 SYN ******S* Nov 30 23:49:41 65.54.188.52:33449 -> xxx.yyy.241.179:80 SYN ******S* Nov 30 23:49:43 65.54.188.52:33974 -> xxx.yyy.241.255:80 SYN ******S* Nov 30 23:49:43 65.54.188.52:34147 -> xxx.yyy.241.20:80 SYN ******S* Nov 30 23:49:46 65.54.188.52:35030 -> xxx.yyy.241.255:80 SYN ******S* 5530 Nov 30 22:55:34 60.41.193.180:1028 -> xxx.yyy.215.218:5554 SYN ******S* Nov 30 22:55:37 60.41.193.180:3062 -> xxx.yyy.215.218:9898 SYN ******S* Nov 30 22:55:34 60.41.193.180:1036 -> xxx.yyy.215.223:5554 SYN ******S* Nov 30 22:55:35 60.41.193.180:1728 -> xxx.yyy.215.223:1023 SYN ******S* Nov 30 22:55:37 60.41.193.180:3088 -> xxx.yyy.215.223:9898 SYN ******S* Nov 30 22:55:34 60.41.193.180:4998 -> xxx.yyy.215.212:5554 SYN ******S* Nov 30 22:55:35 60.41.193.180:1716 -> xxx.yyy.215.212:1023 SYN ******S* Nov 30 22:55:37 60.41.193.180:3079 -> xxx.yyy.215.212:9898 SYN ******S* [...] Nov 30 22:56:16 60.41.193.180:2072 -> xxx.yyy.236.33:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2171 -> xxx.yyy.236.48:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2166 -> xxx.yyy.236.46:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2178 -> xxx.yyy.236.51:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2182 -> xxx.yyy.236.54:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2199 -> xxx.yyy.236.56:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2221 -> xxx.yyy.236.60:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2303 -> xxx.yyy.236.72:9898 SYN ******S* Nov 30 22:56:16 60.41.193.180:2455 -> xxx.yyy.216.24:9898 SYN ******S* 5418 [...] 5178 Nov 30 06:56:15 80.130.63.116:2796 -> xxx.yyy.133.15:5554 SYN ******S* Nov 30 06:56:15 80.130.63.116:2847 -> xxx.yyy.133.16:5554 SYN ******S* Nov 30 06:56:16 80.130.63.116:3378 -> xxx.yyy.133.16:1023 SYN ******S* Nov 30 06:56:18 80.130.63.116:4737 -> xxx.yyy.133.16:9898 SYN ******S* Nov 30 06:56:15 80.130.63.116:2856 -> xxx.yyy.133.20:5554 SYN ******S* Nov 30 06:56:16 80.130.63.116:3394 -> xxx.yyy.133.20:1023 SYN ******S* Nov 30 06:56:18 80.130.63.116:4765 -> xxx.yyy.133.20:9898 SYN ******S* Nov 30 06:56:15 80.130.63.116:2857 -> xxx.yyy.133.21:5554 SYN ******S* [...] Nov 30 06:57:02 80.130.63.116:2342 -> xxx.yyy.153.93:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2343 -> xxx.yyy.153.94:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2365 -> xxx.yyy.153.99:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2366 -> xxx.yyy.153.100:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2410 -> xxx.yyy.153.107:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2413 -> xxx.yyy.153.110:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2414 -> xxx.yyy.153.111:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2445 -> xxx.yyy.153.127:9898 SYN ******S* Nov 30 06:57:02 80.130.63.116:2471 -> xxx.yyy.153.131:9898 SYN ******S* 4849 Nov 30 02:06:50 61.166.144.94:4373 -> xxx.yyy.1.3:1433 SYN ******S* Nov 30 02:06:53 61.166.144.94:4380 -> xxx.yyy.1.8:1433 SYN ******S* Nov 30 02:06:50 61.166.144.94:4374 -> xxx.yyy.1.4:1433 SYN ******S* Nov 30 02:06:50 61.166.144.94:4376 -> xxx.yyy.1.6:1433 SYN ******S* Nov 30 02:06:53 61.166.144.94:4390 -> xxx.yyy.1.16:1433 SYN ******S* Nov 30 02:06:53 61.166.144.94:4393 -> xxx.yyy.1.19:1433 SYN ******S* Nov 30 02:06:50 61.166.144.94:4365 -> xxx.yyy.1.0:1433 SYN ******S* Nov 30 02:06:50 61.166.144.94:4388 -> xxx.yyy.1.15:1433 SYN ******S* [...] Nov 30 02:55:52 61.166.144.94:4290 -> xxx.yyy.157.82:1433 SYN ******S* Nov 30 02:55:52 61.166.144.94:4284 -> xxx.yyy.157.80:1433 SYN ******S* Nov 30 02:55:52 61.166.144.94:4229 -> xxx.yyy.157.62:1433 SYN ******S* Nov 30 02:55:52 61.166.144.94:4275 -> xxx.yyy.157.77:1433 SYN ******S* Nov 30 02:55:52 61.166.144.94:4287 -> xxx.yyy.157.81:1433 SYN ******S* Nov 30 02:55:53 61.166.144.94:4070 -> xxx.yyy.157.9:1433 SYN ******S* Nov 30 02:55:53 61.166.144.94:4160 -> xxx.yyy.157.39:1433 SYN ******S* Nov 30 02:55:53 61.166.144.94:4208 -> xxx.yyy.157.55:1433 SYN ******S* Nov 30 02:55:53 61.166.144.94:4211 -> xxx.yyy.157.56:1433 SYN ******S* 4685 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions