RE: [LOGS] Summary of large-scale portscanning detects
"jure crncec" <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
>From: [email protected] >Reply-To: "Intrusions List (GCIA Practicals)" <[email protected]> >To: [email protected] >Subject: [Intrusions] [LOGS] Summary of large-scale portscanning detects >Date: Wed, 26 Jan 2005 10:29:28 -0600 (CST) > >The following extracts show the beginning and ending of scan activity >was detected on my network. The number following each set is the total >number of probes for that source. Timestamps are GMT-0600. > >[...] >82064 > >Jan 25 04:23:32 216.38.192.230:3533 -> xxx.yyy.1.1:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3537 -> xxx.yyy.1.2:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3539 -> xxx.yyy.1.3:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3540 -> xxx.yyy.1.4:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3541 -> xxx.yyy.1.5:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3543 -> xxx.yyy.1.6:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3544 -> xxx.yyy.1.7:42 SYN ******S* >Jan 25 04:23:32 216.38.192.230:3546 -> xxx.yyy.1.8:42 SYN ******S* >[...] >Jan 25 04:27:00 216.38.192.230:1425 -> xxx.yyy.255.237:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1426 -> xxx.yyy.255.239:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1410 -> xxx.yyy.255.223:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1402 -> xxx.yyy.255.215:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1405 -> xxx.yyy.255.218:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1438 -> xxx.yyy.255.250:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1418 -> xxx.yyy.255.231:42 SYN ******S* >Jan 25 04:27:00 216.38.192.230:1414 -> xxx.yyy.255.228:42 SYN ******S* >70127 > >Jan 25 19:04:49 144.118.170.243:3366 -> xxx.yyy.1.0:6101 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3367 -> xxx.yyy.1.0:6129 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3368 -> xxx.yyy.1.0:1433 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3369 -> xxx.yyy.1.0:4000 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3370 -> xxx.yyy.1.1:6101 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3371 -> xxx.yyy.1.1:6129 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3372 -> xxx.yyy.1.1:1433 SYN ******S* >Jan 25 19:04:49 144.118.170.243:3373 -> xxx.yyy.1.1:4000 SYN ******S* >[...] >Jan 25 19:09:17 144.118.170.243:3392 -> xxx.yyy.255.249:6101 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3393 -> xxx.yyy.255.249:6129 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3394 -> xxx.yyy.255.249:1433 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3395 -> xxx.yyy.255.249:4000 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3403 -> xxx.yyy.255.251:4000 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3404 -> xxx.yyy.255.252:6101 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3405 -> xxx.yyy.255.252:6129 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3411 -> xxx.yyy.255.253:4000 SYN ******S* >Jan 25 19:09:17 144.118.170.243:3412 -> xxx.yyy.255.254:6101 SYN ******S* >67950 > >Jan 25 08:47:30 68.167.246.245:2850 -> xxx.yyy.1.1:20168 SYN ******S* >Jan 25 08:47:29 68.167.246.245:2853 -> xxx.yyy.1.4:20168 SYN ******S* >Jan 25 08:47:32 68.167.246.245:2854 -> xxx.yyy.1.5:20168 SYN ******S* >Jan 25 08:47:29 68.167.246.245:2855 -> xxx.yyy.1.6:20168 SYN ******S* >Jan 25 08:47:31 68.167.246.245:2863 -> xxx.yyy.1.14:20168 SYN ******S* >Jan 25 08:47:30 68.167.246.245:2867 -> xxx.yyy.1.18:20168 SYN ******S* >Jan 25 08:47:31 68.167.246.245:2879 -> xxx.yyy.1.30:20168 SYN ******S* >Jan 25 08:47:30 68.167.246.245:2880 -> xxx.yyy.1.31:20168 SYN ******S* >[...] >Jan 25 08:52:06 68.167.246.245:4171 -> xxx.yyy.255.198:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4220 -> xxx.yyy.255.247:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4225 -> xxx.yyy.255.252:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4221 -> xxx.yyy.255.248:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4222 -> xxx.yyy.255.249:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4218 -> xxx.yyy.255.245:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4227 -> xxx.yyy.255.254:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4223 -> xxx.yyy.255.250:20168 SYN ******S* >Jan 25 08:52:06 68.167.246.245:4219 -> xxx.yyy.255.246:20168 SYN ******S* >53569 > >Jan 25 09:45:21 131.128.196.244:3050 -> xxx.yyy.1.2:4000 SYN ******S* >Jan 25 09:45:20 131.128.196.244:3051 -> xxx.yyy.1.3:4000 SYN ******S* >Jan 25 09:45:23 131.128.196.244:3053 -> xxx.yyy.1.5:4000 SYN ******S* >Jan 25 09:45:23 131.128.196.244:3054 -> xxx.yyy.1.6:4000 SYN ******S* >Jan 25 09:45:23 131.128.196.244:3055 -> xxx.yyy.1.7:4000 SYN ******S* >Jan 25 09:45:21 131.128.196.244:3056 -> xxx.yyy.1.8:4000 SYN ******S* >Jan 25 09:45:20 131.128.196.244:3058 -> xxx.yyy.1.10:4000 SYN ******S* >Jan 25 09:45:20 131.128.196.244:3059 -> xxx.yyy.1.11:4000 SYN ******S* >[...] >Jan 25 10:06:40 131.128.196.244:3466 -> xxx.yyy.255.242:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3471 -> xxx.yyy.255.247:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3470 -> xxx.yyy.255.246:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3472 -> xxx.yyy.255.248:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3473 -> xxx.yyy.255.249:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3477 -> xxx.yyy.255.253:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3478 -> xxx.yyy.255.254:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3476 -> xxx.yyy.255.252:4000 SYN ******S* >Jan 25 10:06:40 131.128.196.244:3475 -> xxx.yyy.255.251:4000 SYN ******S* >50072 > >Jan 25 12:20:16 213.180.210.35:50926 -> xxx.yyy.233.25:1080 SYN ******S* >Jan 25 12:20:16 213.180.210.35:59343 -> xxx.yyy.233.25:1075 SYN ******S* >Jan 25 12:20:16 213.180.210.35:53291 -> xxx.yyy.233.25:81 SYN ******S* >Jan 25 12:20:16 213.180.210.35:49770 -> xxx.yyy.233.25:80 SYN ******S* >Jan 25 12:20:16 213.180.210.35:62033 -> xxx.yyy.233.25:8081 SYN ******S* >Jan 25 12:20:16 213.180.210.35:40611 -> xxx.yyy.233.25:8080 SYN ******S* >Jan 25 12:20:13 213.180.210.35:49169 -> xxx.yyy.233.25:5490 SYN ******S* >Jan 25 12:20:16 213.180.210.35:61094 -> xxx.yyy.233.25:8090 SYN ******S* >[...] >Jan 25 20:45:52 213.180.210.35:52713 -> xxx.yyy.1.41:9 SYN ******S* >Jan 25 20:45:52 213.180.210.35:42865 -> xxx.yyy.1.41:11 SYN ******S* >Jan 25 20:45:52 213.180.210.35:37582 -> xxx.yyy.1.41:13 SYN ******S* >Jan 25 20:45:52 213.180.210.35:43290 -> xxx.yyy.1.41:22 SYN ******S* >Jan 25 20:45:52 213.180.210.35:38128 -> xxx.yyy.1.41:25 SYN ******S* >Jan 25 20:45:52 213.180.210.35:60951 -> xxx.yyy.1.41:37 SYN ******S* >Jan 25 20:45:52 213.180.210.35:31272 -> xxx.yyy.1.41:443 SYN ******S* >Jan 25 20:45:52 213.180.210.35:35180 -> xxx.yyy.1.41:465 SYN ******S* >Jan 25 20:45:52 213.180.210.35:45859 -> xxx.yyy.1.41:599 SYN ******S* >47621 > >Jan 25 12:41:07 198.237.94.70:2571 -> xxx.yyy.1.2:6101 SYN ******S* >Jan 25 12:41:10 198.237.94.70:2575 -> xxx.yyy.1.6:6101 SYN ******S* >Jan 25 12:41:10 198.237.94.70:2577 -> xxx.yyy.1.8:6101 SYN ******S* >Jan 25 12:41:07 198.237.94.70:2580 -> xxx.yyy.1.11:6101 SYN ******S* >Jan 25 12:41:07 198.237.94.70:2584 -> xxx.yyy.1.15:6101 SYN ******S* >Jan 25 12:41:10 198.237.94.70:2585 -> xxx.yyy.1.16:6101 SYN ******S* >Jan 25 12:41:10 198.237.94.70:2586 -> xxx.yyy.1.17:6101 SYN ******S* >Jan 25 12:41:07 198.237.94.70:2587 -> xxx.yyy.1.18:6101 SYN ******S* >[...] >Jan 25 12:52:49 198.237.94.70:1210 -> xxx.yyy.255.228:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1217 -> xxx.yyy.255.235:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1211 -> xxx.yyy.255.229:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1225 -> xxx.yyy.255.243:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1220 -> xxx.yyy.255.238:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1226 -> xxx.yyy.255.244:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1235 -> xxx.yyy.255.253:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1232 -> xxx.yyy.255.250:6101 SYN ******S* >Jan 25 12:52:49 198.237.94.70:1229 -> xxx.yyy.255.247:6101 SYN ******S* >38045 > >Jan 25 21:30:47 24.228.4.1:1794 -> xxx.yyy.1.3:1433 SYN ******S* >Jan 25 21:30:47 24.228.4.1:1798 -> xxx.yyy.1.5:1433 SYN ******S* >Jan 25 21:30:47 24.228.4.1:1806 -> xxx.yyy.1.9:1433 SYN ******S* >Jan 25 21:30:47 24.228.4.1:1802 -> xxx.yyy.1.7:1433 SYN ******S* >Jan 25 21:30:44 24.228.4.1:1800 -> xxx.yyy.1.6:1433 SYN ******S* >Jan 25 21:30:47 24.228.4.1:1804 -> xxx.yyy.1.8:1433 SYN ******S* >Jan 25 21:30:47 24.228.4.1:1808 -> xxx.yyy.1.10:1433 SYN ******S* >Jan 25 21:30:44 24.228.4.1:1812 -> xxx.yyy.1.12:1433 SYN ******S* >[...] >Jan 25 21:38:16 24.228.4.1:1723 -> xxx.yyy.255.243:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1727 -> xxx.yyy.255.245:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1721 -> xxx.yyy.255.242:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1725 -> xxx.yyy.255.244:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1719 -> xxx.yyy.255.241:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1717 -> xxx.yyy.255.240:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1735 -> xxx.yyy.255.249:1433 SYN ******S* >Jan 25 21:38:16 24.228.4.1:1729 -> xxx.yyy.255.246:1433 SYN ******S* >36034 > >Jan 25 00:00:06 24.227.33.253:3547 -> xxx.yyy.111.54:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3579 -> xxx.yyy.111.86:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3563 -> xxx.yyy.111.70:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3576 -> xxx.yyy.111.83:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3544 -> xxx.yyy.111.51:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3557 -> xxx.yyy.111.64:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3573 -> xxx.yyy.111.80:1433 SYN ******S* >Jan 25 00:00:06 24.227.33.253:3577 -> xxx.yyy.111.84:1433 SYN ******S* >[...] >Jan 25 00:22:13 24.227.33.253:1924 -> xxx.yyy.255.241:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1937 -> xxx.yyy.255.254:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1935 -> xxx.yyy.255.252:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1931 -> xxx.yyy.255.248:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1930 -> xxx.yyy.255.247:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1934 -> xxx.yyy.255.251:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1925 -> xxx.yyy.255.242:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1928 -> xxx.yyy.255.245:1433 SYN ******S* >Jan 25 00:22:13 24.227.33.253:1922 -> xxx.yyy.255.239:1433 SYN ******S* >35310 > >Jan 25 15:19:03 63.98.3.5:2940 -> xxx.yyy.1.2:6101 SYN ******S* >Jan 25 15:19:06 63.98.3.5:2941 -> xxx.yyy.1.3:6101 SYN ******S* >Jan 25 15:19:03 63.98.3.5:2942 -> xxx.yyy.1.4:6101 SYN ******S* >Jan 25 15:19:06 63.98.3.5:2943 -> xxx.yyy.1.5:6101 SYN ******S* >Jan 25 15:19:03 63.98.3.5:2948 -> xxx.yyy.1.10:6101 SYN ******S* >Jan 25 15:19:03 63.98.3.5:2958 -> xxx.yyy.1.20:6101 SYN ******S* >Jan 25 15:19:06 63.98.3.5:2960 -> xxx.yyy.1.22:6101 SYN ******S* >Jan 25 15:19:06 63.98.3.5:2966 -> xxx.yyy.1.28:6101 SYN ******S* >[...] >Jan 25 15:27:58 63.98.3.5:1541 -> xxx.yyy.255.224:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1538 -> xxx.yyy.255.221:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1522 -> xxx.yyy.255.205:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1567 -> xxx.yyy.255.250:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1535 -> xxx.yyy.255.218:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1519 -> xxx.yyy.255.202:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1536 -> xxx.yyy.255.219:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1521 -> xxx.yyy.255.204:6101 SYN ******S* >Jan 25 15:27:58 63.98.3.5:1547 -> xxx.yyy.255.230:6101 SYN ******S* >28922 > >Jan 25 20:53:07 164.77.201.91:2864 -> xxx.yyy.1.3:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2865 -> xxx.yyy.1.4:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2866 -> xxx.yyy.1.5:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2867 -> xxx.yyy.1.6:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2869 -> xxx.yyy.1.8:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2873 -> xxx.yyy.1.12:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2874 -> xxx.yyy.1.13:1433 SYN ******S* >Jan 25 20:53:07 164.77.201.91:2875 -> xxx.yyy.1.14:1433 SYN ******S* >[...] >Jan 25 21:04:54 164.77.201.91:1792 -> xxx.yyy.255.214:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1790 -> xxx.yyy.255.212:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1804 -> xxx.yyy.255.226:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1802 -> xxx.yyy.255.224:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1805 -> xxx.yyy.255.227:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1814 -> xxx.yyy.255.236:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1808 -> xxx.yyy.255.230:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1832 -> xxx.yyy.255.254:1433 SYN ******S* >Jan 25 21:04:54 164.77.201.91:1829 -> xxx.yyy.255.251:1433 SYN ******S* >28680 > >Jan 25 21:17:41 61.175.244.203:63808 -> xxx.yyy.1.4:1433 SYN ******S* >Jan 25 21:17:44 61.175.244.203:63809 -> xxx.yyy.1.5:1433 SYN ******S* >Jan 25 21:17:44 61.175.244.203:63826 -> xxx.yyy.1.22:1433 SYN ******S* >Jan 25 21:17:44 61.175.244.203:63827 -> xxx.yyy.1.23:1433 SYN ******S* >Jan 25 21:17:41 61.175.244.203:63828 -> xxx.yyy.1.24:1433 SYN ******S* >Jan 25 21:17:44 61.175.244.203:63844 -> xxx.yyy.1.40:1433 SYN ******S* >Jan 25 21:17:41 61.175.244.203:63845 -> xxx.yyy.1.41:1433 SYN ******S* >Jan 25 21:17:44 61.175.244.203:63851 -> xxx.yyy.1.47:1433 SYN ******S* >[...] >Jan 25 21:29:22 61.175.244.203:4946 -> xxx.yyy.255.174:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4970 -> xxx.yyy.255.198:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4945 -> xxx.yyy.255.173:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4895 -> xxx.yyy.255.123:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4793 -> xxx.yyy.255.21:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4769 -> xxx.yyy.254.251:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4972 -> xxx.yyy.255.200:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4819 -> xxx.yyy.255.47:1433 SYN ******S* >Jan 25 21:29:22 61.175.244.203:4947 -> xxx.yyy.255.175:1433 SYN ******S* >27391 > >Jan 25 13:49:15 80.117.237.106:2442 -> xxx.yyy.1.2:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2443 -> xxx.yyy.1.3:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2444 -> xxx.yyy.1.4:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2445 -> xxx.yyy.1.5:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2447 -> xxx.yyy.1.7:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2448 -> xxx.yyy.1.8:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2449 -> xxx.yyy.1.9:7100 SYN ******S* >Jan 25 13:49:15 80.117.237.106:2451 -> xxx.yyy.1.11:7100 SYN ******S* >[...] >Jan 25 13:54:21 80.117.237.106:2441 -> xxx.yyy.255.231:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2442 -> xxx.yyy.255.232:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2443 -> xxx.yyy.255.233:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2451 -> xxx.yyy.255.241:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2405 -> xxx.yyy.255.245:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2406 -> xxx.yyy.255.246:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2407 -> xxx.yyy.255.247:7100 SYN ******S* >Jan 25 13:54:21 80.117.237.106:2408 -> xxx.yyy.255.248:7100 SYN ******S* >21462 > >Jan 25 18:52:38 217.141.75.77:2115 -> xxx.yyy.1.3:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2118 -> xxx.yyy.1.6:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2119 -> xxx.yyy.1.7:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2120 -> xxx.yyy.1.8:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2121 -> xxx.yyy.1.9:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2122 -> xxx.yyy.1.10:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2124 -> xxx.yyy.1.12:42 SYN ******S* >Jan 25 18:52:38 217.141.75.77:2123 -> xxx.yyy.1.11:42 SYN ******S* >[...] >Jan 25 19:11:56 217.141.75.77:1834 -> xxx.yyy.255.186:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1847 -> xxx.yyy.255.199:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1825 -> xxx.yyy.255.177:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1883 -> xxx.yyy.255.235:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1877 -> xxx.yyy.255.229:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1829 -> xxx.yyy.255.181:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1813 -> xxx.yyy.255.165:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1797 -> xxx.yyy.255.149:42 SYN ******S* >Jan 25 19:11:56 217.141.75.77:1890 -> xxx.yyy.255.242:42 SYN ******S* >18810 > >Jan 25 04:51:02 210.68.8.169:54056 -> xxx.yyy.10.2:22 SYN ******S* >Jan 25 04:51:02 210.68.8.169:54058 -> xxx.yyy.10.3:22 SYN ******S* >Jan 25 04:51:02 210.68.8.169:54064 -> xxx.yyy.10.4:22 SYN ******S* >Jan 25 04:51:02 210.68.8.169:54065 -> xxx.yyy.10.1:22 SYN ******S* >Jan 25 04:51:03 210.68.8.169:54068 -> xxx.yyy.104.246:22 SYN ******S* >Jan 25 04:51:03 210.68.8.169:54069 -> xxx.yyy.10.5:22 SYN ******S* >Jan 25 04:51:06 210.68.8.169:54460 -> xxx.yyy.1.111:22 SYN ******S* >Jan 25 04:51:03 210.68.8.169:54076 -> xxx.yyy.1.16:22 SYN ******S* >[...] >Jan 25 05:12:14 210.68.8.169:35959 -> xxx.yyy.241.106:22 SYN ******S* >Jan 25 05:12:16 210.68.8.169:36077 -> xxx.yyy.236.24:22 SYN ******S* >Jan 25 05:12:18 210.68.8.169:36315 -> xxx.yyy.224.141:22 SYN ******S* >Jan 25 05:12:19 210.68.8.169:36384 -> xxx.yyy.241.106:22 SYN ******S* >Jan 25 05:12:22 210.68.8.169:36729 -> xxx.yyy.224.141:22 SYN ******S* >Jan 25 05:12:23 210.68.8.169:36804 -> xxx.yyy.241.106:22 SYN ******S* >Jan 25 05:12:25 210.68.8.169:36946 -> xxx.yyy.224.141:22 SYN ******S* >Jan 25 05:12:29 210.68.8.169:37353 -> xxx.yyy.224.141:22 SYN ******S* >Jan 25 05:12:28 210.68.8.169:37238 -> xxx.yyy.241.106:22 SYN ******S* >17411 > >[...] >13916 > >[...] >9728 > >Jan 25 00:00:02 221.202.211.44:3353 -> xxx.yyy.177.198:5554 SYN ******S* >Jan 25 00:00:05 221.202.211.44:4800 -> xxx.yyy.177.198:9898 SYN ******S* >Jan 25 00:00:04 221.202.211.44:4289 -> xxx.yyy.178.169:5554 SYN ******S* >Jan 25 00:00:05 221.202.211.44:4652 -> xxx.yyy.178.169:1023 SYN ******S* >Jan 25 00:00:04 221.202.211.44:4290 -> xxx.yyy.178.185:5554 SYN ******S* >Jan 25 00:00:05 221.202.211.44:4668 -> xxx.yyy.178.185:1023 SYN ******S* >Jan 25 00:00:07 221.202.211.44:1702 -> xxx.yyy.178.185:9898 SYN ******S* >Jan 25 00:00:04 221.202.211.44:4292 -> xxx.yyy.178.172:5554 SYN ******S* >[...] >Jan 25 00:00:51 221.202.211.44:3231 -> xxx.yyy.176.46:9898 SYN ******S* >Jan 25 00:00:51 221.202.211.44:3232 -> xxx.yyy.176.47:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3247 -> xxx.yyy.176.34:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3244 -> xxx.yyy.176.31:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3249 -> xxx.yyy.176.36:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3250 -> xxx.yyy.176.40:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3248 -> xxx.yyy.176.35:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3251 -> xxx.yyy.176.54:9898 SYN ******S* >Jan 25 00:00:52 221.202.211.44:3252 -> xxx.yyy.176.42:9898 SYN ******S* >8707 > >Jan 25 22:55:29 220.83.189.173:1559 -> xxx.yyy.71.207:5554 SYN ******S* >Jan 25 22:55:29 220.83.189.173:1581 -> xxx.yyy.71.202:5554 SYN ******S* >Jan 25 22:55:31 220.83.189.173:2035 -> xxx.yyy.71.202:1023 SYN ******S* >Jan 25 22:55:29 220.83.189.173:1583 -> xxx.yyy.71.200:5554 SYN ******S* >Jan 25 22:55:30 220.83.189.173:1578 -> xxx.yyy.71.206:5554 SYN ******S* >Jan 25 22:55:31 220.83.189.173:2032 -> xxx.yyy.71.206:1023 SYN ******S* >Jan 25 22:55:30 220.83.189.173:1587 -> xxx.yyy.71.196:5554 SYN ******S* >Jan 25 22:55:31 220.83.189.173:2041 -> xxx.yyy.71.196:1023 SYN ******S* >[...] >Jan 25 22:56:18 220.83.189.173:2103 -> xxx.yyy.91.215:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2125 -> xxx.yyy.91.236:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2175 -> xxx.yyy.91.241:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2188 -> xxx.yyy.91.244:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2215 -> xxx.yyy.92.13:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2166 -> xxx.yyy.92.26:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2168 -> xxx.yyy.92.25:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2222 -> xxx.yyy.92.16:9898 SYN ******S* >Jan 25 22:56:18 220.83.189.173:2335 -> xxx.yyy.71.205:9898 SYN ******S* >5972 > >Jan 25 22:56:45 60.35.172.156:3253 -> xxx.yyy.195.88:5554 SYN ******S* >Jan 25 22:56:49 60.35.172.156:3833 -> xxx.yyy.195.88:9898 SYN ******S* >Jan 25 22:56:45 60.35.172.156:3254 -> xxx.yyy.195.90:5554 SYN ******S* >Jan 25 22:56:46 60.35.172.156:3401 -> xxx.yyy.196.176:5554 SYN ******S* >Jan 25 22:56:46 60.35.172.156:3402 -> xxx.yyy.196.177:5554 SYN ******S* >Jan 25 22:56:46 60.35.172.156:3405 -> xxx.yyy.196.180:5554 SYN ******S* >Jan 25 22:56:46 60.35.172.156:3410 -> xxx.yyy.196.185:5554 SYN ******S* >Jan 25 22:56:47 60.35.172.156:3564 -> xxx.yyy.196.185:1023 SYN ******S* >[...] >Jan 25 22:59:15 60.35.172.156:1220 -> xxx.yyy.196.146:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1230 -> xxx.yyy.196.156:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1231 -> xxx.yyy.196.157:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1236 -> xxx.yyy.196.162:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1245 -> xxx.yyy.196.100:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1260 -> xxx.yyy.196.101:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1397 -> xxx.yyy.195.219:9898 SYN ******S* >Jan 25 22:59:15 60.35.172.156:1392 -> xxx.yyy.196.163:9898 SYN ******S* >Jan 25 22:59:16 60.35.172.156:1465 -> xxx.yyy.196.164:9898 SYN ******S* >5794 > >Jan 25 23:56:57 220.173.28.241:2551 -> xxx.yyy.236.79:5554 SYN ******S* >Jan 25 23:57:01 220.173.28.241:4002 -> xxx.yyy.236.79:9898 SYN ******S* >Jan 25 23:56:58 220.173.28.241:2570 -> xxx.yyy.236.80:5554 SYN ******S* >Jan 25 23:57:01 220.173.28.241:3973 -> xxx.yyy.236.80:9898 SYN ******S* >Jan 25 23:56:58 220.173.28.241:2675 -> xxx.yyy.236.112:5554 SYN ******S* >Jan 25 23:56:58 220.173.28.241:2693 -> xxx.yyy.236.114:5554 SYN ******S* >Jan 25 23:56:58 220.173.28.241:2725 -> xxx.yyy.236.124:5554 SYN ******S* >Jan 25 23:57:01 220.173.28.241:4125 -> xxx.yyy.236.124:9898 SYN ******S* >[...] >Jan 25 23:58:02 220.173.28.241:3217 -> xxx.yyy.255.246:9898 SYN ******S* >Jan 25 23:58:02 220.173.28.241:3259 -> xxx.yyy.255.224:9898 SYN ******S* >Jan 25 23:58:02 220.173.28.241:3246 -> xxx.yyy.255.212:9898 SYN ******S* >Jan 25 23:58:02 220.173.28.241:3264 -> xxx.yyy.255.216:9898 SYN ******S* >Jan 25 23:58:02 220.173.28.241:3263 -> xxx.yyy.255.214:9898 SYN ******S* >Jan 25 23:58:03 220.173.28.241:3540 -> xxx.yyy.255.254:9898 SYN ******S* >Jan 25 23:58:03 220.173.28.241:3545 -> xxx.yyy.255.253:9898 SYN ******S* >Jan 25 23:58:03 220.173.28.241:3584 -> xxx.yyy.255.252:9898 SYN ******S* >5791 > >Jan 25 22:57:32 220.79.152.220:3563 -> xxx.yyy.235.118:5554 SYN ******S* >Jan 25 22:57:32 220.79.152.220:3745 -> xxx.yyy.235.124:5554 SYN ******S* >Jan 25 22:57:32 220.79.152.220:3811 -> xxx.yyy.235.129:5554 SYN ******S* >Jan 25 22:57:32 220.79.152.220:3809 -> xxx.yyy.235.127:5554 SYN ******S* >Jan 25 22:57:35 220.79.152.220:3832 -> xxx.yyy.235.127:9898 SYN ******S* >Jan 25 22:57:32 220.79.152.220:3606 -> xxx.yyy.235.122:5554 SYN ******S* >Jan 25 22:57:35 220.79.152.220:3699 -> xxx.yyy.235.122:9898 SYN ******S* >Jan 25 22:57:32 220.79.152.220:3810 -> xxx.yyy.235.128:5554 SYN ******S* >[...] >Jan 25 22:58:16 220.79.152.220:4269 -> xxx.yyy.255.219:9898 SYN ******S* >Jan 25 22:58:16 220.79.152.220:4278 -> xxx.yyy.255.223:9898 SYN ******S* >Jan 25 22:58:16 220.79.152.220:4275 -> xxx.yyy.255.221:9898 SYN ******S* >Jan 25 22:58:16 220.79.152.220:4277 -> xxx.yyy.255.222:9898 SYN ******S* >Jan 25 22:58:16 220.79.152.220:4360 -> xxx.yyy.255.234:9898 SYN ******S* >Jan 25 22:58:17 220.79.152.220:4252 -> xxx.yyy.255.216:9898 SYN ******S* >Jan 25 22:58:17 220.79.152.220:4280 -> xxx.yyy.255.225:9898 SYN ******S* >Jan 25 22:58:17 220.79.152.220:4328 -> xxx.yyy.255.227:9898 SYN ******S* >5612 > >Jan 25 23:56:45 221.201.42.84:1849 -> xxx.yyy.215.213:5554 SYN ******S* >Jan 25 23:56:46 221.201.42.84:2345 -> xxx.yyy.215.213:1023 SYN ******S* >Jan 25 23:56:48 221.201.42.84:3380 -> xxx.yyy.215.213:9898 SYN ******S* >Jan 25 23:56:45 221.201.42.84:1850 -> xxx.yyy.215.214:5554 SYN ******S* >Jan 25 23:56:46 221.201.42.84:2346 -> xxx.yyy.215.214:1023 SYN ******S* >Jan 25 23:56:45 221.201.42.84:1848 -> xxx.yyy.215.212:5554 SYN ******S* >Jan 25 23:56:48 221.201.42.84:3378 -> xxx.yyy.215.212:9898 SYN ******S* >Jan 25 23:56:45 221.201.42.84:1852 -> xxx.yyy.215.216:5554 SYN ******S* >[...] >Jan 25 23:57:29 221.201.42.84:3014 -> xxx.yyy.236.46:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3025 -> xxx.yyy.236.49:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3034 -> xxx.yyy.236.50:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3133 -> xxx.yyy.236.62:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3154 -> xxx.yyy.236.63:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3160 -> xxx.yyy.236.64:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3181 -> xxx.yyy.236.69:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3191 -> xxx.yyy.236.71:9898 SYN ******S* >Jan 25 23:57:29 221.201.42.84:3204 -> xxx.yyy.236.76:9898 SYN ******S* >5538 > >Jan 25 23:56:43 61.55.106.69:1576 -> xxx.yyy.195.101:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1581 -> xxx.yyy.195.104:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1582 -> xxx.yyy.195.105:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1578 -> xxx.yyy.195.102:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1583 -> xxx.yyy.195.106:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1580 -> xxx.yyy.195.103:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1600 -> xxx.yyy.195.96:5554 SYN ******S* >Jan 25 23:56:43 61.55.106.69:1602 -> xxx.yyy.195.97:5554 SYN ******S* >[...] >Jan 25 23:57:33 61.55.106.69:2939 -> xxx.yyy.215.199:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2933 -> xxx.yyy.215.184:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2937 -> xxx.yyy.215.191:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2936 -> xxx.yyy.215.190:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2955 -> xxx.yyy.215.193:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2963 -> xxx.yyy.215.186:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2964 -> xxx.yyy.215.189:9898 SYN ******S* >Jan 25 23:57:33 61.55.106.69:2991 -> xxx.yyy.215.210:9898 SYN ******S* >5513 > >Jan 25 23:56:30 219.144.14.52:3686 -> xxx.yyy.215.23:5554 SYN ******S* >Jan 25 23:56:33 219.144.14.52:1761 -> xxx.yyy.215.23:9898 SYN ******S* >Jan 25 23:56:30 219.144.14.52:3670 -> xxx.yyy.215.9:5554 SYN ******S* >Jan 25 23:56:31 219.144.14.52:4257 -> xxx.yyy.215.9:1023 SYN ******S* >Jan 25 23:56:30 219.144.14.52:3666 -> xxx.yyy.215.7:5554 SYN ******S* >Jan 25 23:56:33 219.144.14.52:1778 -> xxx.yyy.215.7:9898 SYN ******S* >Jan 25 23:56:30 219.144.14.52:3671 -> xxx.yyy.215.10:5554 SYN ******S* >Jan 25 23:56:31 219.144.14.52:4253 -> xxx.yyy.215.10:1023 SYN ******S* >[...] >Jan 25 23:57:16 219.144.14.52:1406 -> xxx.yyy.235.58:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1427 -> xxx.yyy.235.70:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1443 -> xxx.yyy.235.73:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1512 -> xxx.yyy.235.86:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1519 -> xxx.yyy.235.82:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1531 -> xxx.yyy.235.79:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1539 -> xxx.yyy.235.92:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1564 -> xxx.yyy.235.100:9898 SYN ******S* >Jan 25 23:57:16 219.144.14.52:1522 -> xxx.yyy.235.91:9898 SYN ******S* >5106 > >[...] >4969 > >-- >- Ken >=========================================================================== >Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services >University of Northern Iowa Cedar Falls, IA 50614-0121 >email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 >_______________________________________________ >Intrusions mailing list >[email protected] >http://www.dshield.org/mailman/listinfo/intrusions Look moran if i get one more spam mail like this i will hack in ur network. _________________________________________________________________ FREE pop-up blocking with the new MSN Toolbar - get it now! http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/ _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions