[LOGS] Summary of large-scale portscanning detects
[email protected] Sun, 06 Feb 2005 07:49:59 -0600 (CST)
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0600. Feb 5 02:21:10 222.121.163.33:3238 -> xxx.yyy.1.1:3632 SYN ******S* Feb 5 02:21:12 222.121.163.33:3244 -> xxx.yyy.1.4:3632 SYN ******S* Feb 5 02:21:10 222.121.163.33:3240 -> xxx.yyy.1.2:3632 SYN ******S* Feb 5 02:21:12 222.121.163.33:3246 -> xxx.yyy.1.5:3632 SYN ******S* Feb 5 02:21:10 222.121.163.33:3242 -> xxx.yyy.1.3:3632 SYN ******S* Feb 5 02:21:12 222.121.163.33:3248 -> xxx.yyy.1.6:3632 SYN ******S* Feb 5 02:21:09 222.121.163.33:3250 -> xxx.yyy.1.7:3632 SYN ******S* Feb 5 02:21:10 222.121.163.33:3252 -> xxx.yyy.1.8:3632 SYN ******S* [...] Feb 5 02:33:26 222.121.163.33:4954 -> xxx.yyy.255.248:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4967 -> xxx.yyy.255.249:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4941 -> xxx.yyy.255.245:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4977 -> xxx.yyy.255.251:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4979 -> xxx.yyy.255.252:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4951 -> xxx.yyy.255.247:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4973 -> xxx.yyy.255.250:3632 SYN ******S* Feb 5 02:33:26 222.121.163.33:4944 -> xxx.yyy.255.246:3632 SYN ******S* 132505 Feb 5 02:17:38 66.62.24.5:1340 -> xxx.yyy.1.1:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1342 -> xxx.yyy.1.2:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1344 -> xxx.yyy.1.3:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1346 -> xxx.yyy.1.4:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1348 -> xxx.yyy.1.5:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1350 -> xxx.yyy.1.6:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1352 -> xxx.yyy.1.7:34 SYN ******S* Feb 5 02:17:41 66.62.24.5:1354 -> xxx.yyy.1.8:34 SYN ******S* [...] Feb 5 02:29:12 66.62.24.5:4507 -> xxx.yyy.255.242:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4527 -> xxx.yyy.255.245:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4486 -> xxx.yyy.255.240:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4596 -> xxx.yyy.255.254:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4578 -> xxx.yyy.255.251:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4592 -> xxx.yyy.255.253:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4573 -> xxx.yyy.255.250:2129 SYN ******S* Feb 5 02:29:12 66.62.24.5:4582 -> xxx.yyy.255.252:2129 SYN ******S* 129488 Feb 5 11:59:08 63.200.36.15:1685 -> xxx.yyy.1.1:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1688 -> xxx.yyy.1.2:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1689 -> xxx.yyy.1.3:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1693 -> xxx.yyy.1.4:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1697 -> xxx.yyy.1.6:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1698 -> xxx.yyy.1.7:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1699 -> xxx.yyy.1.8:1433 SYN ******S* Feb 5 11:59:11 63.200.36.15:1701 -> xxx.yyy.1.10:1433 SYN ******S* [...] Feb 5 13:53:38 63.200.36.15:3640 -> xxx.yyy.255.242:1433 SYN ******S* Feb 5 13:53:38 63.200.36.15:3644 -> xxx.yyy.255.245:1433 SYN ******S* Feb 5 13:53:38 63.200.36.15:3653 -> xxx.yyy.255.248:1433 SYN ******S* Feb 5 13:53:38 63.200.36.15:3650 -> xxx.yyy.255.246:1433 SYN ******S* Feb 5 13:53:38 63.200.36.15:3655 -> xxx.yyy.255.250:1433 SYN ******S* Feb 5 13:53:39 63.200.36.15:3667 -> xxx.yyy.255.254:1433 SYN ******S* Feb 5 13:53:39 63.200.36.15:3665 -> xxx.yyy.255.252:1433 SYN ******S* Feb 5 13:53:39 63.200.36.15:3663 -> xxx.yyy.255.251:1433 SYN ******S* 101859 Feb 5 07:51:16 66.210.192.99:39825 -> xxx.yyy.1.0:4512 SYN ******S* Feb 5 07:51:16 66.210.192.99:39826 -> xxx.yyy.1.1:4512 SYN ******S* Feb 5 07:51:16 66.210.192.99:39827 -> xxx.yyy.1.2:4512 SYN ******S* Feb 5 07:51:16 66.210.192.99:39828 -> xxx.yyy.1.3:4512 SYN ******S* Feb 5 07:51:18 66.210.192.99:39830 -> xxx.yyy.1.5:4512 SYN ******S* Feb 5 07:51:18 66.210.192.99:39831 -> xxx.yyy.1.6:4512 SYN ******S* Feb 5 07:51:18 66.210.192.99:39832 -> xxx.yyy.1.7:4512 SYN ******S* Feb 5 07:51:16 66.210.192.99:39833 -> xxx.yyy.1.8:4512 SYN ******S* [...] Feb 5 08:08:24 66.210.192.99:46657 -> xxx.yyy.255.238:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46658 -> xxx.yyy.255.239:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46659 -> xxx.yyy.255.240:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46660 -> xxx.yyy.255.241:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46661 -> xxx.yyy.255.242:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46662 -> xxx.yyy.255.243:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46663 -> xxx.yyy.255.244:4512 SYN ******S* Feb 5 08:08:24 66.210.192.99:46664 -> xxx.yyy.255.245:4512 SYN ******S* 75169 Feb 5 09:39:44 65.17.94.35:1718 -> xxx.yyy.1.1:3306 SYN ******S* Feb 5 09:39:41 65.17.94.35:1719 -> xxx.yyy.1.2:3306 SYN ******S* Feb 5 09:39:45 65.17.94.35:1720 -> xxx.yyy.1.3:3306 SYN ******S* Feb 5 09:39:45 65.17.94.35:1721 -> xxx.yyy.1.4:3306 SYN ******S* Feb 5 09:39:45 65.17.94.35:1722 -> xxx.yyy.1.5:3306 SYN ******S* Feb 5 09:39:45 65.17.94.35:1724 -> xxx.yyy.1.6:3306 SYN ******S* Feb 5 09:39:45 65.17.94.35:1725 -> xxx.yyy.1.7:3306 SYN ******S* Feb 5 09:39:45 65.17.94.35:1726 -> xxx.yyy.1.8:3306 SYN ******S* [...] Feb 5 10:03:57 65.17.94.35:1924 -> xxx.yyy.zzz.244:3306 SYN ******S* Feb 5 10:03:57 65.17.94.35:1931 -> xxx.yyy.zzz.251:3306 SYN ******S* Feb 5 10:03:57 65.17.94.35:1928 -> xxx.yyy.zzz.248:3306 SYN ******S* Feb 5 10:03:57 65.17.94.35:1925 -> xxx.yyy.zzz.245:3306 SYN ******S* Feb 5 10:03:57 65.17.94.35:1926 -> xxx.yyy.zzz.246:3306 SYN ******S* Feb 5 10:03:57 65.17.94.35:1923 -> xxx.yyy.zzz.243:3306 SYN ******S* Feb 5 10:03:57 65.17.94.35:1930 -> xxx.yyy.zzz.250:3306 SYN ******S* Feb 5 10:03:58 65.17.94.35:1934 -> xxx.yyy.zzz.254:3306 SYN ******S* Feb 5 10:03:58 65.17.94.35:1933 -> xxx.yyy.zzz.253:3306 SYN ******S* 71508 Feb 5 18:11:54 82.39.34.226:4591 -> xxx.yyy.1.0:1433 SYN ******S* Feb 5 18:11:54 82.39.34.226:4592 -> xxx.yyy.1.1:1433 SYN ******S* Feb 5 18:11:54 82.39.34.226:4594 -> xxx.yyy.1.2:1433 SYN ******S* Feb 5 18:11:55 82.39.34.226:4595 -> xxx.yyy.1.3:1433 SYN ******S* Feb 5 18:11:54 82.39.34.226:4596 -> xxx.yyy.1.4:1433 SYN ******S* Feb 5 18:11:54 82.39.34.226:4597 -> xxx.yyy.1.5:1433 SYN ******S* Feb 5 18:11:54 82.39.34.226:4598 -> xxx.yyy.1.6:1433 SYN ******S* Feb 5 18:11:55 82.39.34.226:4599 -> xxx.yyy.1.7:1433 SYN ******S* [...] Feb 5 21:08:01 82.39.34.226:2161 -> xxx.yyy.194.3:1433 SYN ******S* Feb 5 21:08:01 82.39.34.226:2162 -> xxx.yyy.194.4:1433 SYN ******S* Feb 5 21:08:01 82.39.34.226:2163 -> xxx.yyy.194.5:1433 SYN ******S* Feb 5 21:08:02 82.39.34.226:2169 -> xxx.yyy.194.9:1433 SYN ******S* Feb 5 21:08:02 82.39.34.226:2026 -> xxx.yyy.193.214:1433 SYN ******S* Feb 5 21:08:02 82.39.34.226:2029 -> xxx.yyy.193.215:1433 SYN ******S* Feb 5 21:08:02 82.39.34.226:2030 -> xxx.yyy.193.216:1433 SYN ******S* Feb 5 21:08:02 82.39.34.226:2033 -> xxx.yyy.193.217:1433 SYN ******S* 64601 Feb 5 22:57:49 61.219.199.62:4237 -> xxx.yyy.1.37:119 SYN ******S* Feb 5 22:57:49 61.219.199.62:4242 -> xxx.yyy.1.40:119 SYN ******S* Feb 5 22:57:47 61.219.199.62:4243 -> xxx.yyy.1.41:119 SYN ******S* Feb 5 22:57:50 61.219.199.62:4253 -> xxx.yyy.1.43:119 SYN ******S* Feb 5 22:57:50 61.219.199.62:4322 -> xxx.yyy.1.68:119 SYN ******S* Feb 5 22:57:50 61.219.199.62:4327 -> xxx.yyy.1.71:119 SYN ******S* Feb 5 22:57:50 61.219.199.62:4328 -> xxx.yyy.1.72:119 SYN ******S* Feb 5 22:57:47 61.219.199.62:4329 -> xxx.yyy.1.73:119 SYN ******S* [...] Feb 5 23:06:03 61.219.199.62:1638 -> xxx.yyy.255.212:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1645 -> xxx.yyy.255.218:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1635 -> xxx.yyy.255.209:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1670 -> xxx.yyy.255.240:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1660 -> xxx.yyy.255.231:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1667 -> xxx.yyy.255.237:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1681 -> xxx.yyy.255.250:119 SYN ******S* Feb 5 23:06:03 61.219.199.62:1657 -> xxx.yyy.255.228:119 SYN ******S* 55066 Feb 5 10:36:41 212.33.102.36:2064 -> xxx.yyy.1.70:1433 SYN ******S* Feb 5 10:36:41 212.33.102.36:2066 -> xxx.yyy.1.71:1433 SYN ******S* Feb 5 10:36:44 212.33.102.36:1995 -> xxx.yyy.1.36:1433 SYN ******S* Feb 5 10:36:41 212.33.102.36:2127 -> xxx.yyy.1.101:1433 SYN ******S* Feb 5 10:36:41 212.33.102.36:1971 -> xxx.yyy.1.24:1433 SYN ******S* Feb 5 10:36:41 212.33.102.36:1993 -> xxx.yyy.1.35:1433 SYN ******S* Feb 5 10:36:41 212.33.102.36:2159 -> xxx.yyy.1.117:1433 SYN ******S* Feb 5 10:36:42 212.33.102.36:1969 -> xxx.yyy.1.23:1433 SYN ******S* [...] Feb 5 10:48:24 212.33.102.36:3478 -> xxx.yyy.255.240:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3484 -> xxx.yyy.255.243:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3486 -> xxx.yyy.255.244:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3504 -> xxx.yyy.255.253:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3494 -> xxx.yyy.255.248:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3498 -> xxx.yyy.255.250:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3496 -> xxx.yyy.255.249:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3502 -> xxx.yyy.255.252:1433 SYN ******S* Feb 5 10:48:24 212.33.102.36:3500 -> xxx.yyy.255.251:1433 SYN ******S* 46446 [...] 22068 Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.1.105:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.1.236:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.10.28:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.10.159:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.11.165:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.12.40:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.11.34:6129 SYN ******S* Feb 5 02:45:10 144.13.47.47:3001 -> xxx.yyy.12.171:6129 SYN ******S* [...] Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.252.85:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.252.216:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.253.91:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.253.222:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.254.97:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.254.228:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.255.103:6129 SYN ******S* Feb 5 03:43:53 144.13.47.47:3001 -> xxx.yyy.255.234:6129 SYN ******S* 20039 Feb 5 03:10:38 67.18.110.51:1652 -> xxx.yyy.1.0:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1653 -> xxx.yyy.1.1:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1654 -> xxx.yyy.1.2:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1655 -> xxx.yyy.1.3:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1656 -> xxx.yyy.1.4:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1657 -> xxx.yyy.1.5:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1658 -> xxx.yyy.1.6:3306 SYN ******S* Feb 5 03:10:38 67.18.110.51:1659 -> xxx.yyy.1.7:3306 SYN ******S* [...] Feb 5 03:10:59 67.18.110.51:1654 -> xxx.yyy.255.232:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1655 -> xxx.yyy.255.233:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1669 -> xxx.yyy.255.247:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1670 -> xxx.yyy.255.248:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1671 -> xxx.yyy.255.249:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1674 -> xxx.yyy.255.252:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1675 -> xxx.yyy.255.253:3306 SYN ******S* Feb 5 03:10:59 67.18.110.51:1676 -> xxx.yyy.255.254:3306 SYN ******S* 19054 Feb 5 22:54:25 148.221.67.123:3415 -> xxx.yyy.15.194:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:3414 -> xxx.yyy.15.193:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:3419 -> xxx.yyy.15.195:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:3420 -> xxx.yyy.15.196:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.189:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.191:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.190:1433 SYN ******S* Feb 5 22:54:28 148.221.67.123:1025 -> xxx.yyy.15.192:1433 SYN ******S* [...] Feb 6 00:00:00 148.221.67.123:3491 -> xxx.yyy.87.230:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3492 -> xxx.yyy.87.231:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3499 -> xxx.yyy.87.235:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3500 -> xxx.yyy.87.236:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3501 -> xxx.yyy.87.237:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3502 -> xxx.yyy.87.238:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3503 -> xxx.yyy.87.239:1433 SYN ******S* Feb 6 00:00:00 148.221.67.123:3504 -> xxx.yyy.87.240:1433 SYN ******S* Feb 6 00:00:01 148.221.67.123:3512 -> xxx.yyy.87.248:1433 SYN ******S* 18051 [...] 16197 Feb 5 01:25:58 222.82.236.254:2855 -> xxx.yyy.1.3:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2867 -> xxx.yyy.1.9:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2847 -> xxx.yyy.1.1:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2846 -> xxx.yyy.1.0:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2857 -> xxx.yyy.1.5:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2858 -> xxx.yyy.1.6:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2868 -> xxx.yyy.1.10:42 SYN ******S* Feb 5 01:25:58 222.82.236.254:2940 -> xxx.yyy.1.46:42 SYN ******S* [...] Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.255:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.254:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.226:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.232:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.233:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.240:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.242:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.244:42 SYN ******S* Feb 5 18:58:09 222.82.236.254:6000 -> xxx.yyy.zzz.249:42 SYN ******S* 15111 Feb 5 21:54:29 84.58.0.9:3962 -> xxx.yyy.1.5:1433 SYN ******S* Feb 5 21:54:32 84.58.0.9:3797 -> xxx.yyy.1.6:1433 SYN ******S* Feb 5 21:54:33 84.58.0.9:3871 -> xxx.yyy.1.30:1433 SYN ******S* Feb 5 21:54:33 84.58.0.9:3599 -> xxx.yyy.1.38:1433 SYN ******S* Feb 5 21:54:33 84.58.0.9:3981 -> xxx.yyy.1.43:1433 SYN ******S* Feb 5 21:54:30 84.58.0.9:3108 -> xxx.yyy.1.48:1433 SYN ******S* Feb 5 21:54:33 84.58.0.9:3478 -> xxx.yyy.1.51:1433 SYN ******S* Feb 5 21:54:33 84.58.0.9:3982 -> xxx.yyy.1.55:1433 SYN ******S* [...] Feb 5 22:29:35 84.58.0.9:3026 -> xxx.yyy.255.163:1433 SYN ******S* Feb 5 22:29:35 84.58.0.9:4448 -> xxx.yyy.255.177:1433 SYN ******S* Feb 5 22:29:36 84.58.0.9:4963 -> xxx.yyy.255.199:1433 SYN ******S* Feb 5 22:29:36 84.58.0.9:4965 -> xxx.yyy.255.197:1433 SYN ******S* Feb 5 22:29:36 84.58.0.9:3045 -> xxx.yyy.255.216:1433 SYN ******S* Feb 5 22:29:36 84.58.0.9:3883 -> xxx.yyy.255.212:1433 SYN ******S* Feb 5 22:29:36 84.58.0.9:3622 -> xxx.yyy.255.211:1433 SYN ******S* Feb 5 22:29:37 84.58.0.9:3115 -> xxx.yyy.255.242:1433 SYN ******S* Feb 5 22:29:37 84.58.0.9:3820 -> xxx.yyy.255.250:1433 SYN ******S* 14703 Feb 5 06:56:49 81.192.139.93:3661 -> xxx.yyy.72.124:5554 SYN ******S* Feb 5 06:56:50 81.192.139.93:4465 -> xxx.yyy.72.124:1023 SYN ******S* Feb 5 06:56:52 81.192.139.93:2096 -> xxx.yyy.72.124:9898 SYN ******S* Feb 5 06:56:49 81.192.139.93:3662 -> xxx.yyy.72.125:5554 SYN ******S* Feb 5 06:56:50 81.192.139.93:4466 -> xxx.yyy.72.125:1023 SYN ******S* Feb 5 06:56:52 81.192.139.93:2097 -> xxx.yyy.72.125:9898 SYN ******S* Feb 5 06:56:49 81.192.139.93:3663 -> xxx.yyy.72.126:5554 SYN ******S* Feb 5 06:56:50 81.192.139.93:4467 -> xxx.yyy.72.126:1023 SYN ******S* [...] Feb 5 06:57:35 81.192.139.93:1778 -> xxx.yyy.92.155:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1779 -> xxx.yyy.92.156:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1780 -> xxx.yyy.92.157:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1781 -> xxx.yyy.92.158:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1782 -> xxx.yyy.92.159:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1783 -> xxx.yyy.92.160:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1784 -> xxx.yyy.92.161:9898 SYN ******S* Feb 5 06:57:35 81.192.139.93:1785 -> xxx.yyy.92.165:9898 SYN ******S* 14280 Feb 5 08:52:54 222.99.190.175:2390 -> xxx.yyy.154.104:5554 SYN ******S* Feb 5 08:52:55 222.99.190.175:2903 -> xxx.yyy.154.104:1023 SYN ******S* Feb 5 08:52:57 222.99.190.175:3919 -> xxx.yyy.154.104:9898 SYN ******S* Feb 5 08:52:54 222.99.190.175:2391 -> xxx.yyy.154.105:5554 SYN ******S* Feb 5 08:52:55 222.99.190.175:2928 -> xxx.yyy.154.105:1023 SYN ******S* Feb 5 08:52:57 222.99.190.175:3989 -> xxx.yyy.154.105:9898 SYN ******S* Feb 5 08:52:54 222.99.190.175:2392 -> xxx.yyy.154.106:5554 SYN ******S* Feb 5 08:52:55 222.99.190.175:2904 -> xxx.yyy.154.106:1023 SYN ******S* [...] Feb 5 08:53:38 222.99.190.175:3505 -> xxx.yyy.174.219:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3493 -> xxx.yyy.174.210:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3495 -> xxx.yyy.174.212:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3518 -> xxx.yyy.174.220:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3520 -> xxx.yyy.174.222:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3497 -> xxx.yyy.174.213:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3498 -> xxx.yyy.174.214:9898 SYN ******S* Feb 5 08:53:38 222.99.190.175:3519 -> xxx.yyy.174.221:9898 SYN ******S* 14279 [...] 12478 [...] 12323 Feb 5 05:02:45 60.22.10.71:1693 -> xxx.yyy.133.14:5554 SYN ******S* Feb 5 05:02:46 60.22.10.71:2199 -> xxx.yyy.133.14:1023 SYN ******S* Feb 5 05:02:45 60.22.10.71:1694 -> xxx.yyy.133.15:5554 SYN ******S* Feb 5 05:02:46 60.22.10.71:2200 -> xxx.yyy.133.15:1023 SYN ******S* Feb 5 05:02:45 60.22.10.71:1697 -> xxx.yyy.133.16:5554 SYN ******S* Feb 5 05:02:46 60.22.10.71:2204 -> xxx.yyy.133.16:1023 SYN ******S* Feb 5 05:02:45 60.22.10.71:1700 -> xxx.yyy.133.19:5554 SYN ******S* Feb 5 05:02:46 60.22.10.71:2206 -> xxx.yyy.133.19:1023 SYN ******S* [...] Feb 5 05:03:31 60.22.10.71:2871 -> xxx.yyy.153.73:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2903 -> xxx.yyy.153.98:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2922 -> xxx.yyy.153.115:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2931 -> xxx.yyy.153.125:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2945 -> xxx.yyy.153.114:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2948 -> xxx.yyy.153.111:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2959 -> xxx.yyy.153.112:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2972 -> xxx.yyy.153.134:9898 SYN ******S* Feb 5 05:03:31 60.22.10.71:2983 -> xxx.yyy.153.135:9898 SYN ******S* 11966 [...] 11660 Feb 5 22:58:51 220.221.182.247:3178 -> xxx.yyy.153.140:5554 SYN ******S* Feb 5 22:58:52 220.221.182.247:3414 -> xxx.yyy.153.140:1023 SYN ******S* Feb 5 22:58:54 220.221.182.247:3822 -> xxx.yyy.153.140:9898 SYN ******S* Feb 5 22:58:51 220.221.182.247:3173 -> xxx.yyy.153.136:5554 SYN ******S* Feb 5 22:58:52 220.221.182.247:3410 -> xxx.yyy.153.136:1023 SYN ******S* Feb 5 22:58:54 220.221.182.247:3814 -> xxx.yyy.153.136:9898 SYN ******S* Feb 5 22:58:51 220.221.182.247:3174 -> xxx.yyy.153.137:5554 SYN ******S* Feb 5 22:58:51 220.221.182.247:3177 -> xxx.yyy.153.139:5554 SYN ******S* [...] Feb 5 23:00:23 220.221.182.247:2235 -> xxx.yyy.173.252:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2229 -> xxx.yyy.173.246:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2237 -> xxx.yyy.173.254:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2238 -> xxx.yyy.173.255:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2233 -> xxx.yyy.173.250:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2234 -> xxx.yyy.173.251:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2239 -> xxx.yyy.174.0:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2241 -> xxx.yyy.174.1:9898 SYN ******S* Feb 5 23:00:23 220.221.182.247:2242 -> xxx.yyy.174.2:9898 SYN ******S* 11078 Feb 5 12:45:41 218.65.251.180:2374 -> xxx.yyy.1.23:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2376 -> xxx.yyy.1.25:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2372 -> xxx.yyy.1.21:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2391 -> xxx.yyy.1.66:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2382 -> xxx.yyy.1.43:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2384 -> xxx.yyy.1.45:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2397 -> xxx.yyy.1.72:4899 SYN ******S* Feb 5 12:45:41 218.65.251.180:2403 -> xxx.yyy.1.78:4899 SYN ******S* [...] Feb 5 12:45:55 218.65.251.180:1320 -> xxx.yyy.255.216:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1244 -> xxx.yyy.255.137:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1267 -> xxx.yyy.255.163:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1342 -> xxx.yyy.255.238:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1326 -> xxx.yyy.255.222:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1334 -> xxx.yyy.255.230:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1344 -> xxx.yyy.255.240:4899 SYN ******S* Feb 5 12:45:55 218.65.251.180:1357 -> xxx.yyy.255.254:4899 SYN ******S* 10376 [...] 10192 Feb 5 23:56:43 60.176.254.225:4730 -> xxx.yyy.72.127:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4731 -> xxx.yyy.72.128:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4736 -> xxx.yyy.72.133:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4732 -> xxx.yyy.72.129:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4737 -> xxx.yyy.72.134:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4733 -> xxx.yyy.72.130:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4734 -> xxx.yyy.72.131:5554 SYN ******S* Feb 5 23:56:43 60.176.254.225:4738 -> xxx.yyy.72.135:5554 SYN ******S* [...] Feb 5 23:57:33 60.176.254.225:3881 -> xxx.yyy.92.241:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3882 -> xxx.yyy.92.240:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3828 -> xxx.yyy.92.216:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3886 -> xxx.yyy.92.238:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3761 -> xxx.yyy.92.219:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3893 -> xxx.yyy.92.221:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3823 -> xxx.yyy.92.245:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3831 -> xxx.yyy.92.239:9898 SYN ******S* Feb 5 23:57:33 60.176.254.225:3879 -> xxx.yyy.92.243:9898 SYN ******S* 10154 Feb 5 22:58:11 220.100.204.135:2307 -> xxx.yyy.133.234:5554 SYN ******S* Feb 5 22:58:12 220.100.204.135:2506 -> xxx.yyy.133.234:1023 SYN ******S* Feb 5 22:58:14 220.100.204.135:2860 -> xxx.yyy.133.234:9898 SYN ******S* Feb 5 22:58:11 220.100.204.135:2334 -> xxx.yyy.134.5:5554 SYN ******S* Feb 5 22:58:11 220.100.204.135:2335 -> xxx.yyy.134.6:5554 SYN ******S* Feb 5 22:58:11 220.100.204.135:2337 -> xxx.yyy.134.8:5554 SYN ******S* Feb 5 22:58:12 220.100.204.135:2587 -> xxx.yyy.134.8:1023 SYN ******S* Feb 5 22:58:11 220.100.204.135:2338 -> xxx.yyy.134.9:5554 SYN ******S* [...] Feb 5 22:59:54 220.100.204.135:4853 -> xxx.yyy.154.85:9898 SYN ******S* Feb 5 22:59:52 220.100.204.135:4371 -> xxx.yyy.154.89:1023 SYN ******S* Feb 5 22:59:54 220.100.204.135:4858 -> xxx.yyy.154.89:9898 SYN ******S* Feb 5 22:59:52 220.100.204.135:4373 -> xxx.yyy.154.91:1023 SYN ******S* Feb 5 22:59:54 220.100.204.135:4860 -> xxx.yyy.154.91:9898 SYN ******S* Feb 5 22:59:53 220.100.204.135:4514 -> xxx.yyy.154.12:9898 SYN ******S* Feb 5 22:59:53 220.100.204.135:4541 -> xxx.yyy.154.16:9898 SYN ******S* Feb 5 22:59:54 220.100.204.135:4822 -> xxx.yyy.154.71:9898 SYN ******S* Feb 5 22:59:54 220.100.204.135:4826 -> xxx.yyy.154.73:9898 SYN ******S* 9846 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions