[LOGS] Summary of large-scale portscanning detects
[email protected] Fri, 04 Feb 2005 08:21:20 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 3 02:42:14 64.132.205.69:1788 -> xxx.yyy.1.0:4128 SYN ******S* Feb 3 02:42:14 64.132.205.69:2916 -> xxx.yyy.1.1:4128 SYN ******S* Feb 3 02:42:13 64.132.205.69:2937 -> xxx.yyy.1.2:4128 SYN ******S* Feb 3 02:42:14 64.132.205.69:2952 -> xxx.yyy.1.3:4128 SYN ******S* Feb 3 02:42:16 64.132.205.69:2973 -> xxx.yyy.1.4:4128 SYN ******S* Feb 3 02:42:16 64.132.205.69:2981 -> xxx.yyy.1.5:4128 SYN ******S* Feb 3 02:42:16 64.132.205.69:3003 -> xxx.yyy.1.6:4128 SYN ******S* Feb 3 02:42:16 64.132.205.69:3094 -> xxx.yyy.1.7:4128 SYN ******S* [...] Feb 3 02:55:13 64.132.205.69:4540 -> xxx.yyy.255.244:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:1376 -> xxx.yyy.255.248:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:4585 -> xxx.yyy.255.246:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:4561 -> xxx.yyy.255.245:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:1393 -> xxx.yyy.255.250:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:4913 -> xxx.yyy.255.254:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:1386 -> xxx.yyy.255.249:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:4665 -> xxx.yyy.255.251:4128 SYN ******S* Feb 3 02:55:13 64.132.205.69:4679 -> xxx.yyy.255.252:4128 SYN ******S* 97734 Feb 3 03:01:18 212.60.65.202:1817 -> xxx.yyy.1.0:1433 SYN ******S* Feb 3 03:01:15 212.60.65.202:1818 -> xxx.yyy.1.1:1433 SYN ******S* Feb 3 03:01:15 212.60.65.202:1819 -> xxx.yyy.1.2:1433 SYN ******S* Feb 3 03:01:15 212.60.65.202:1820 -> xxx.yyy.1.3:1433 SYN ******S* Feb 3 03:01:18 212.60.65.202:1821 -> xxx.yyy.1.4:1433 SYN ******S* Feb 3 03:01:18 212.60.65.202:1822 -> xxx.yyy.1.5:1433 SYN ******S* Feb 3 03:01:18 212.60.65.202:1823 -> xxx.yyy.1.6:1433 SYN ******S* Feb 3 03:01:18 212.60.65.202:1824 -> xxx.yyy.1.7:1433 SYN ******S* [...] Feb 3 09:01:38 212.60.65.202:4465 -> xxx.yyy.255.234:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4464 -> xxx.yyy.255.233:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4517 -> xxx.yyy.255.236:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4536 -> xxx.yyy.255.238:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4575 -> xxx.yyy.255.246:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4574 -> xxx.yyy.255.245:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4572 -> xxx.yyy.255.243:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4573 -> xxx.yyy.255.244:1433 SYN ******S* Feb 3 09:01:38 212.60.65.202:4588 -> xxx.yyy.255.250:1433 SYN ******S* 95279 Feb 3 08:14:48 82.125.132.83:3531 -> xxx.yyy.1.1:21 SYN ******S* Feb 3 08:14:48 82.125.132.83:3536 -> xxx.yyy.1.2:21 SYN ******S* Feb 3 08:14:48 82.125.132.83:3538 -> xxx.yyy.1.3:21 SYN ******S* Feb 3 08:14:48 82.125.132.83:3539 -> xxx.yyy.1.4:21 SYN ******S* Feb 3 08:14:48 82.125.132.83:3547 -> xxx.yyy.1.8:21 SYN ******S* Feb 3 08:14:48 82.125.132.83:3550 -> xxx.yyy.1.9:21 SYN ******S* Feb 3 08:14:45 82.125.132.83:3551 -> xxx.yyy.1.10:21 SYN ******S* Feb 3 08:14:48 82.125.132.83:3555 -> xxx.yyy.1.11:21 SYN ******S* [...] Feb 3 08:39:09 82.125.132.83:3321 -> xxx.yyy.255.18:21 SYN ******S* Feb 3 08:39:09 82.125.132.83:3325 -> xxx.yyy.255.238:21 SYN ******S* Feb 3 08:39:10 82.125.132.83:3331 -> xxx.yyy.255.253:21 SYN ******S* Feb 3 08:39:10 82.125.132.83:3329 -> xxx.yyy.255.249:21 SYN ******S* Feb 3 08:39:11 82.125.132.83:3371 -> xxx.yyy.254.153:21 SYN ******S* Feb 3 08:39:12 82.125.132.83:3484 -> xxx.yyy.254.218:21 SYN ******S* Feb 3 08:39:12 82.125.132.83:3830 -> xxx.yyy.254.222:21 SYN ******S* Feb 3 08:39:14 82.125.132.83:3709 -> xxx.yyy.255.64:21 SYN ******S* Feb 3 08:39:18 82.125.132.83:3830 -> xxx.yyy.254.222:21 SYN ******S* 65510 Feb 3 01:11:42 192.116.217.99:4544 -> xxx.yyy.1.1:4000 SYN ******S* Feb 3 01:11:41 192.116.217.99:4556 -> xxx.yyy.1.6:4000 SYN ******S* Feb 3 01:11:44 192.116.217.99:4550 -> xxx.yyy.1.4:4000 SYN ******S* Feb 3 01:11:42 192.116.217.99:4548 -> xxx.yyy.1.3:4000 SYN ******S* Feb 3 01:11:42 192.116.217.99:4547 -> xxx.yyy.1.2:4000 SYN ******S* Feb 3 01:11:41 192.116.217.99:4554 -> xxx.yyy.1.5:4000 SYN ******S* Feb 3 01:11:44 192.116.217.99:4562 -> xxx.yyy.1.7:4000 SYN ******S* Feb 3 01:11:41 192.116.217.99:4571 -> xxx.yyy.1.10:4000 SYN ******S* [...] Feb 3 01:22:37 192.116.217.99:3745 -> xxx.yyy.255.238:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3732 -> xxx.yyy.255.234:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3729 -> xxx.yyy.255.233:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3758 -> xxx.yyy.255.243:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3772 -> xxx.yyy.255.249:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3764 -> xxx.yyy.255.246:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3762 -> xxx.yyy.255.245:4000 SYN ******S* Feb 3 01:22:37 192.116.217.99:3754 -> xxx.yyy.255.241:4000 SYN ******S* 58028 Feb 3 00:00:08 172.165.49.3:2300 -> xxx.yyy.157.208:1433 SYN ******S* Feb 3 00:00:08 172.165.49.3:2308 -> xxx.yyy.157.212:1433 SYN ******S* Feb 3 00:00:05 172.165.49.3:2307 -> xxx.yyy.157.211:1433 SYN ******S* Feb 3 00:00:05 172.165.49.3:2245 -> xxx.yyy.157.191:1433 SYN ******S* Feb 3 00:00:05 172.165.49.3:2316 -> xxx.yyy.157.213:1433 SYN ******S* Feb 3 00:00:08 172.165.49.3:2320 -> xxx.yyy.157.215:1433 SYN ******S* Feb 3 00:00:05 172.165.49.3:2318 -> xxx.yyy.157.214:1433 SYN ******S* Feb 3 00:00:06 172.165.49.3:2333 -> xxx.yyy.157.217:1433 SYN ******S* [...] Feb 3 01:28:09 172.165.49.3:2554 -> xxx.yyy.255.246:1433 SYN ******S* Feb 3 01:28:09 172.165.49.3:2560 -> xxx.yyy.255.247:1433 SYN ******S* Feb 3 01:28:09 172.165.49.3:2566 -> xxx.yyy.255.248:1433 SYN ******S* Feb 3 01:28:09 172.165.49.3:2570 -> xxx.yyy.255.249:1433 SYN ******S* Feb 3 01:28:09 172.165.49.3:2575 -> xxx.yyy.255.250:1433 SYN ******S* Feb 3 01:28:09 172.165.49.3:2578 -> xxx.yyy.255.251:1433 SYN ******S* Feb 3 01:28:10 172.165.49.3:2597 -> xxx.yyy.255.253:1433 SYN ******S* Feb 3 01:28:10 172.165.49.3:2604 -> xxx.yyy.255.254:1433 SYN ******S* 51457 Feb 3 21:46:19 128.164.34.186:1197 -> xxx.yyy.1.1:1433 SYN ******S* Feb 3 21:46:19 128.164.34.186:1200 -> xxx.yyy.1.4:1433 SYN ******S* Feb 3 21:46:22 128.164.34.186:1202 -> xxx.yyy.1.6:1433 SYN ******S* Feb 3 21:46:22 128.164.34.186:1206 -> xxx.yyy.1.10:1433 SYN ******S* Feb 3 21:46:22 128.164.34.186:1207 -> xxx.yyy.1.11:1433 SYN ******S* Feb 3 21:46:22 128.164.34.186:1208 -> xxx.yyy.1.12:1433 SYN ******S* Feb 3 21:46:22 128.164.34.186:1209 -> xxx.yyy.1.13:1433 SYN ******S* Feb 3 21:46:22 128.164.34.186:1210 -> xxx.yyy.1.14:1433 SYN ******S* [...] Feb 3 21:57:17 128.164.34.186:4033 -> xxx.yyy.255.252:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4030 -> xxx.yyy.255.249:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4034 -> xxx.yyy.255.253:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4031 -> xxx.yyy.255.250:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4028 -> xxx.yyy.255.247:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4035 -> xxx.yyy.255.254:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4032 -> xxx.yyy.255.251:1433 SYN ******S* Feb 3 21:57:17 128.164.34.186:4029 -> xxx.yyy.255.248:1433 SYN ******S* 41908 Feb 3 22:26:31 80.171.6.16:3522 -> xxx.yyy.1.2:3306 SYN ******S* Feb 3 22:26:28 80.171.6.16:3526 -> xxx.yyy.1.6:3306 SYN ******S* Feb 3 22:26:28 80.171.6.16:3527 -> xxx.yyy.1.7:3306 SYN ******S* Feb 3 22:26:28 80.171.6.16:3534 -> xxx.yyy.1.14:3306 SYN ******S* Feb 3 22:26:28 80.171.6.16:3535 -> xxx.yyy.1.15:3306 SYN ******S* Feb 3 22:26:28 80.171.6.16:3536 -> xxx.yyy.1.16:3306 SYN ******S* Feb 3 22:26:31 80.171.6.16:3537 -> xxx.yyy.1.17:3306 SYN ******S* Feb 3 22:26:31 80.171.6.16:3538 -> xxx.yyy.1.18:3306 SYN ******S* [...] Feb 3 22:38:12 80.171.6.16:2059 -> xxx.yyy.255.228:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2058 -> xxx.yyy.255.227:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2060 -> xxx.yyy.255.229:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2061 -> xxx.yyy.255.230:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2066 -> xxx.yyy.255.235:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2069 -> xxx.yyy.255.238:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2075 -> xxx.yyy.255.244:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2079 -> xxx.yyy.255.248:3306 SYN ******S* Feb 3 22:38:12 80.171.6.16:2080 -> xxx.yyy.255.249:3306 SYN ******S* 41393 Feb 3 18:38:00 62.93.183.202:3221 -> xxx.yyy.1.2:1433 SYN ******S* Feb 3 18:38:00 62.93.183.202:3222 -> xxx.yyy.1.3:1433 SYN ******S* Feb 3 18:38:00 62.93.183.202:3223 -> xxx.yyy.1.4:1433 SYN ******S* Feb 3 18:38:03 62.93.183.202:3224 -> xxx.yyy.1.5:1433 SYN ******S* Feb 3 18:38:00 62.93.183.202:3225 -> xxx.yyy.1.6:1433 SYN ******S* Feb 3 18:38:00 62.93.183.202:3227 -> xxx.yyy.1.8:1433 SYN ******S* Feb 3 18:38:00 62.93.183.202:3228 -> xxx.yyy.1.9:1433 SYN ******S* Feb 3 18:38:03 62.93.183.202:3229 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 3 18:49:41 62.93.183.202:1841 -> xxx.yyy.255.219:1433 SYN ******S* Feb 3 18:49:41 62.93.183.202:1838 -> xxx.yyy.255.216:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1848 -> xxx.yyy.255.226:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1852 -> xxx.yyy.255.230:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1864 -> xxx.yyy.255.242:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1861 -> xxx.yyy.255.239:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1858 -> xxx.yyy.255.236:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1859 -> xxx.yyy.255.237:1433 SYN ******S* Feb 3 18:49:42 62.93.183.202:1867 -> xxx.yyy.255.245:1433 SYN ******S* 39005 [...] 37811 Feb 3 10:37:59 61.97.116.152:3933 -> xxx.yyy.1.1:3306 SYN ******S* Feb 3 10:37:59 61.97.116.152:3934 -> xxx.yyy.1.2:3306 SYN ******S* Feb 3 10:38:02 61.97.116.152:3935 -> xxx.yyy.1.3:3306 SYN ******S* Feb 3 10:37:59 61.97.116.152:3936 -> xxx.yyy.1.4:3306 SYN ******S* Feb 3 10:37:59 61.97.116.152:3937 -> xxx.yyy.1.5:3306 SYN ******S* Feb 3 10:37:59 61.97.116.152:3938 -> xxx.yyy.1.6:3306 SYN ******S* Feb 3 10:38:02 61.97.116.152:3939 -> xxx.yyy.1.7:3306 SYN ******S* Feb 3 10:37:59 61.97.116.152:3940 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 3 10:49:53 61.97.116.152:2509 -> xxx.yyy.255.218:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2518 -> xxx.yyy.255.227:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2515 -> xxx.yyy.255.224:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2516 -> xxx.yyy.255.225:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2517 -> xxx.yyy.255.226:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2524 -> xxx.yyy.255.233:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2528 -> xxx.yyy.255.237:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2534 -> xxx.yyy.255.243:3306 SYN ******S* Feb 3 10:49:53 61.97.116.152:2533 -> xxx.yyy.255.242:3306 SYN ******S* 34982 Feb 3 11:42:43 210.91.230.2:2178 -> xxx.yyy.1.5:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2174 -> xxx.yyy.1.1:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2175 -> xxx.yyy.1.2:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2176 -> xxx.yyy.1.3:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2185 -> xxx.yyy.1.12:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2186 -> xxx.yyy.1.13:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2187 -> xxx.yyy.1.14:3306 SYN ******S* Feb 3 11:42:43 210.91.230.2:2181 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 3 11:46:54 210.91.230.2:4738 -> xxx.yyy.255.215:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4734 -> xxx.yyy.255.211:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4750 -> xxx.yyy.255.227:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4731 -> xxx.yyy.255.208:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4767 -> xxx.yyy.255.243:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4770 -> xxx.yyy.255.247:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4753 -> xxx.yyy.255.230:3306 SYN ******S* Feb 3 11:46:54 210.91.230.2:4762 -> xxx.yyy.255.239:3306 SYN ******S* 33783 Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.2:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.4:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.5:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.7:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.1:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.3:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.11:42 SYN ******S* Feb 3 06:43:07 220.87.178.87:80 -> xxx.yyy.1.6:42 SYN ******S* [...] Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.237:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.241:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.239:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.242:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.243:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.200:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.240:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.227:42 SYN ******S* Feb 3 06:43:38 220.87.178.87:80 -> xxx.yyy.255.229:42 SYN ******S* 26804 Feb 3 11:09:45 81.76.67.58:1149 -> xxx.yyy.1.1:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1150 -> xxx.yyy.1.2:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1151 -> xxx.yyy.1.3:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1152 -> xxx.yyy.1.4:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1154 -> xxx.yyy.1.6:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1155 -> xxx.yyy.1.7:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1156 -> xxx.yyy.1.8:42 SYN ******S* Feb 3 11:09:45 81.76.67.58:1163 -> xxx.yyy.1.15:42 SYN ******S* [...] Feb 3 11:13:00 81.76.67.58:2898 -> xxx.yyy.255.212:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2899 -> xxx.yyy.255.213:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2900 -> xxx.yyy.255.214:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2901 -> xxx.yyy.255.215:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2902 -> xxx.yyy.255.216:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2904 -> xxx.yyy.255.218:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2905 -> xxx.yyy.255.219:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2910 -> xxx.yyy.255.224:42 SYN ******S* Feb 3 11:13:00 81.76.67.58:2912 -> xxx.yyy.255.226:42 SYN ******S* 20725 Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.2:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.5:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.15:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.16:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.17:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.21:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.18:42 SYN ******S* Feb 3 01:22:54 218.62.17.86:80 -> xxx.yyy.1.22:42 SYN ******S* [...] Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.226:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.221:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.220:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.227:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.216:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.234:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.244:42 SYN ******S* Feb 3 01:23:23 218.62.17.86:80 -> xxx.yyy.255.246:42 SYN ******S* 18359 Feb 3 09:44:17 221.231.3.188:1485 -> xxx.yyy.1.10:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1484 -> xxx.yyy.1.9:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1487 -> xxx.yyy.1.12:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1486 -> xxx.yyy.1.11:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1489 -> xxx.yyy.1.14:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1495 -> xxx.yyy.1.20:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1496 -> xxx.yyy.1.21:42 SYN ******S* Feb 3 09:44:17 221.231.3.188:1504 -> xxx.yyy.1.29:42 SYN ******S* [...] Feb 3 09:45:00 221.231.3.188:2465 -> xxx.yyy.255.244:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2466 -> xxx.yyy.255.245:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2467 -> xxx.yyy.255.246:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2468 -> xxx.yyy.255.247:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2469 -> xxx.yyy.255.248:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2470 -> xxx.yyy.255.249:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2471 -> xxx.yyy.255.250:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2472 -> xxx.yyy.255.251:42 SYN ******S* Feb 3 09:45:00 221.231.3.188:2475 -> xxx.yyy.255.254:42 SYN ******S* 13885 [...] 13173 [...] 12970 Feb 3 06:56:35 217.184.96.88:2702 -> xxx.yyy.235.112:5554 SYN ******S* Feb 3 06:56:36 217.184.96.88:4661 -> xxx.yyy.235.112:1023 SYN ******S* Feb 3 06:56:35 217.184.96.88:2703 -> xxx.yyy.235.113:5554 SYN ******S* Feb 3 06:56:36 217.184.96.88:4662 -> xxx.yyy.235.113:1023 SYN ******S* Feb 3 06:56:35 217.184.96.88:2724 -> xxx.yyy.235.114:5554 SYN ******S* Feb 3 06:56:36 217.184.96.88:4667 -> xxx.yyy.235.114:1023 SYN ******S* Feb 3 06:56:35 217.184.96.88:2725 -> xxx.yyy.235.115:5554 SYN ******S* Feb 3 06:56:36 217.184.96.88:4668 -> xxx.yyy.235.115:1023 SYN ******S* [...] Feb 3 06:58:01 217.184.96.88:3388 -> xxx.yyy.255.174:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4314 -> xxx.yyy.255.216:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4347 -> xxx.yyy.255.226:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4351 -> xxx.yyy.255.227:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4352 -> xxx.yyy.255.228:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4353 -> xxx.yyy.255.229:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4360 -> xxx.yyy.255.230:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4362 -> xxx.yyy.255.231:9898 SYN ******S* Feb 3 06:58:01 217.184.96.88:4430 -> xxx.yyy.255.232:9898 SYN ******S* 8234 Feb 3 22:51:15 218.217.201.121:1374 -> xxx.yyy.133.235:5554 SYN ******S* Feb 3 22:51:15 218.217.201.121:1378 -> xxx.yyy.133.239:5554 SYN ******S* Feb 3 22:51:15 218.217.201.121:1372 -> xxx.yyy.134.87:5554 SYN ******S* Feb 3 22:51:15 218.217.201.121:1380 -> xxx.yyy.133.241:5554 SYN ******S* Feb 3 22:51:17 218.217.201.121:1854 -> xxx.yyy.133.241:1023 SYN ******S* Feb 3 22:51:15 218.217.201.121:1375 -> xxx.yyy.133.236:5554 SYN ******S* Feb 3 22:51:15 218.217.201.121:1379 -> xxx.yyy.133.240:5554 SYN ******S* Feb 3 22:51:15 218.217.201.121:1390 -> xxx.yyy.133.251:5554 SYN ******S* [...] Feb 3 22:53:44 218.217.201.121:3995 -> xxx.yyy.134.36:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:3996 -> xxx.yyy.134.34:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:3997 -> xxx.yyy.134.38:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:3998 -> xxx.yyy.134.37:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:4001 -> xxx.yyy.134.43:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:4002 -> xxx.yyy.134.51:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:4011 -> xxx.yyy.134.73:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:4015 -> xxx.yyy.134.77:9898 SYN ******S* Feb 3 22:53:44 218.217.201.121:4022 -> xxx.yyy.134.40:9898 SYN ******S* 8231 Feb 3 23:55:01 218.74.226.215:1775 -> xxx.yyy.72.132:5554 SYN ******S* Feb 3 23:55:04 218.74.226.215:2631 -> xxx.yyy.72.132:9898 SYN ******S* Feb 3 23:55:01 218.74.226.215:1797 -> xxx.yyy.72.134:5554 SYN ******S* Feb 3 23:55:02 218.74.226.215:2088 -> xxx.yyy.72.134:1023 SYN ******S* Feb 3 23:55:04 218.74.226.215:2633 -> xxx.yyy.72.134:9898 SYN ******S* Feb 3 23:55:01 218.74.226.215:1799 -> xxx.yyy.72.135:5554 SYN ******S* Feb 3 23:55:02 218.74.226.215:2089 -> xxx.yyy.72.135:1023 SYN ******S* Feb 3 23:55:04 218.74.226.215:2635 -> xxx.yyy.72.135:9898 SYN ******S* [...] Feb 3 23:56:41 218.74.226.215:2968 -> xxx.yyy.92.204:9898 SYN ******S* Feb 3 23:56:41 218.74.226.215:2969 -> xxx.yyy.92.205:9898 SYN ******S* Feb 3 23:56:41 218.74.226.215:2970 -> xxx.yyy.92.206:9898 SYN ******S* Feb 3 23:56:41 218.74.226.215:2975 -> xxx.yyy.92.209:9898 SYN ******S* Feb 3 23:56:41 218.74.226.215:2976 -> xxx.yyy.92.210:9898 SYN ******S* Feb 3 23:56:41 218.74.226.215:2979 -> xxx.yyy.92.211:9898 SYN ******S* Feb 3 23:56:42 218.74.226.215:2991 -> xxx.yyy.92.219:9898 SYN ******S* Feb 3 23:56:42 218.74.226.215:2993 -> xxx.yyy.92.221:9898 SYN ******S* Feb 3 23:56:42 218.74.226.215:2994 -> xxx.yyy.92.222:9898 SYN ******S* 8131 Feb 3 23:57:06 220.191.243.134:4079 -> xxx.yyy.154.100:5554 SYN ******S* Feb 3 23:57:07 220.191.243.134:4438 -> xxx.yyy.154.100:1023 SYN ******S* Feb 3 23:57:09 220.191.243.134:1275 -> xxx.yyy.154.100:9898 SYN ******S* Feb 3 23:57:06 220.191.243.134:4084 -> xxx.yyy.154.103:5554 SYN ******S* Feb 3 23:57:07 220.191.243.134:4476 -> xxx.yyy.154.103:1023 SYN ******S* Feb 3 23:57:09 220.191.243.134:1321 -> xxx.yyy.154.103:9898 SYN ******S* Feb 3 23:57:06 220.191.243.134:4089 -> xxx.yyy.154.105:5554 SYN ******S* Feb 3 23:57:06 220.191.243.134:4093 -> xxx.yyy.154.107:5554 SYN ******S* [...] Feb 3 23:59:08 220.191.243.134:4092 -> xxx.yyy.174.169:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4124 -> xxx.yyy.174.182:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4129 -> xxx.yyy.174.176:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4130 -> xxx.yyy.174.183:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4253 -> xxx.yyy.174.196:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4320 -> xxx.yyy.174.202:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4382 -> xxx.yyy.174.210:9898 SYN ******S* Feb 3 23:59:09 220.191.243.134:4468 -> xxx.yyy.174.219:9898 SYN ******S* Feb 3 23:59:10 220.191.243.134:4494 -> xxx.yyy.174.222:9898 SYN ******S* 7481 Feb 3 23:56:18 220.163.72.242:3416 -> xxx.yyy.71.167:5554 SYN ******S* Feb 3 23:56:19 220.163.72.242:3949 -> xxx.yyy.71.167:1023 SYN ******S* Feb 3 23:56:18 220.163.72.242:3409 -> xxx.yyy.71.160:5554 SYN ******S* Feb 3 23:56:19 220.163.72.242:3942 -> xxx.yyy.71.160:1023 SYN ******S* Feb 3 23:56:21 220.163.72.242:1518 -> xxx.yyy.71.160:9898 SYN ******S* Feb 3 23:56:18 220.163.72.242:3411 -> xxx.yyy.71.162:5554 SYN ******S* Feb 3 23:56:19 220.163.72.242:3944 -> xxx.yyy.71.162:1023 SYN ******S* Feb 3 23:56:18 220.163.72.242:3413 -> xxx.yyy.71.164:5554 SYN ******S* [...] Feb 3 23:57:36 220.163.72.242:3495 -> xxx.yyy.91.208:9898 SYN ******S* Feb 3 23:57:36 220.163.72.242:3725 -> xxx.yyy.91.201:9898 SYN ******S* Feb 3 23:57:36 220.163.72.242:3727 -> xxx.yyy.91.239:9898 SYN ******S* Feb 3 23:57:36 220.163.72.242:3344 -> xxx.yyy.91.124:9898 SYN ******S* Feb 3 23:57:36 220.163.72.242:3733 -> xxx.yyy.91.180:9898 SYN ******S* Feb 3 23:57:36 220.163.72.242:3745 -> xxx.yyy.91.213:9898 SYN ******S* Feb 3 23:57:36 220.163.72.242:3768 -> xxx.yyy.91.222:9898 SYN ******S* Feb 3 23:57:37 220.163.72.242:3900 -> xxx.yyy.92.2:9898 SYN ******S* Feb 3 23:57:37 220.163.72.242:3962 -> xxx.yyy.91.254:9898 SYN ******S* 6848 Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.19:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.21:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.25:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.22:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.23:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.24:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.26:42 SYN ******S* Feb 3 01:28:25 193.137.8.165:80 -> xxx.yyy.1.27:42 SYN ******S* [...] Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.213:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.215:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.216:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.217:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.218:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.219:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.223:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.224:42 SYN ******S* Feb 3 01:28:34 193.137.8.165:80 -> xxx.yyy.255.226:42 SYN ******S* 6428 Feb 3 22:55:53 60.42.82.187:4718 -> xxx.yyy.133.15:5554 SYN ******S* Feb 3 22:55:54 60.42.82.187:1393 -> xxx.yyy.133.15:1023 SYN ******S* Feb 3 22:55:56 60.42.82.187:2426 -> xxx.yyy.133.15:9898 SYN ******S* Feb 3 22:55:53 60.42.82.187:4724 -> xxx.yyy.133.17:5554 SYN ******S* Feb 3 22:55:56 60.42.82.187:2440 -> xxx.yyy.133.17:9898 SYN ******S* Feb 3 22:55:53 60.42.82.187:4725 -> xxx.yyy.133.18:5554 SYN ******S* Feb 3 22:55:56 60.42.82.187:2441 -> xxx.yyy.133.18:9898 SYN ******S* Feb 3 22:55:53 60.42.82.187:4727 -> xxx.yyy.133.19:5554 SYN ******S* [...] Feb 3 22:56:41 60.42.82.187:1607 -> xxx.yyy.153.101:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1638 -> xxx.yyy.153.110:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1655 -> xxx.yyy.153.115:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1656 -> xxx.yyy.153.116:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1667 -> xxx.yyy.153.119:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1680 -> xxx.yyy.153.126:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1683 -> xxx.yyy.153.127:9898 SYN ******S* Feb 3 22:56:41 60.42.82.187:1685 -> xxx.yyy.153.135:9898 SYN ******S* 5984 Feb 3 22:56:57 220.79.32.105:3710 -> xxx.yyy.215.237:5554 SYN ******S* Feb 3 22:56:57 220.79.32.105:3714 -> xxx.yyy.215.239:5554 SYN ******S* Feb 3 22:56:57 220.79.32.105:3726 -> xxx.yyy.215.245:5554 SYN ******S* Feb 3 22:56:57 220.79.32.105:3732 -> xxx.yyy.215.247:5554 SYN ******S* Feb 3 22:56:57 220.79.32.105:3840 -> xxx.yyy.216.22:5554 SYN ******S* Feb 3 22:56:57 220.79.32.105:3811 -> xxx.yyy.216.14:5554 SYN ******S* Feb 3 22:56:58 220.79.32.105:4492 -> xxx.yyy.216.14:1023 SYN ******S* Feb 3 22:57:00 220.79.32.105:1772 -> xxx.yyy.216.14:9898 SYN ******S* [...] Feb 3 22:58:34 220.79.32.105:3734 -> xxx.yyy.236.19:9898 SYN ******S* Feb 3 22:58:34 220.79.32.105:3750 -> xxx.yyy.236.28:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:3892 -> xxx.yyy.236.32:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:3954 -> xxx.yyy.236.40:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:4456 -> xxx.yyy.236.59:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:4459 -> xxx.yyy.236.60:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:4496 -> xxx.yyy.236.63:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:4508 -> xxx.yyy.236.67:9898 SYN ******S* Feb 3 22:58:35 220.79.32.105:4541 -> xxx.yyy.236.74:9898 SYN ******S* 5966 Feb 3 22:56:53 220.88.144.246:2653 -> xxx.yyy.195.88:1023 SYN ******S* Feb 3 22:56:53 220.88.144.246:2660 -> xxx.yyy.195.89:1023 SYN ******S* Feb 3 22:56:55 220.88.144.246:3634 -> xxx.yyy.195.89:9898 SYN ******S* Feb 3 22:56:53 220.88.144.246:2666 -> xxx.yyy.195.90:1023 SYN ******S* Feb 3 22:56:53 220.88.144.246:2668 -> xxx.yyy.195.91:1023 SYN ******S* Feb 3 22:56:53 220.88.144.246:2669 -> xxx.yyy.195.92:1023 SYN ******S* Feb 3 22:56:53 220.88.144.246:2682 -> xxx.yyy.195.160:5554 SYN ******S* Feb 3 22:56:54 220.88.144.246:3270 -> xxx.yyy.195.160:1023 SYN ******S* [...] Feb 3 22:58:35 220.88.144.246:1286 -> xxx.yyy.215.199:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1283 -> xxx.yyy.215.197:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1287 -> xxx.yyy.215.200:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1288 -> xxx.yyy.215.201:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1289 -> xxx.yyy.215.202:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1290 -> xxx.yyy.215.203:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1293 -> xxx.yyy.215.205:9898 SYN ******S* Feb 3 22:58:35 220.88.144.246:1276 -> xxx.yyy.215.193:9898 SYN ******S* 5735 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions