[prev in list] [next in list] [prev in thread] [next in thread] 

List:       intrusions
Subject:    [Intrusions] [LOGS] Summary of large-scale portscanning detects
From:       Ken.Connelly () uni ! edu
Date:       2004-04-06 14:09:09
Message-ID: 01L8LRSOLLKK8WWIGX () uni ! edu
[Download RAW message or body]

The following extracts show the beginning and ending of scan activity
was detected on my network.  The number following each set is the total
number of probes for that source.  Timestamps are GMT-0500.

Apr  5 10:53:22 61.222.173.26:22002 -> xxx.yyy.1.0:3127 SYN ******S* 
Apr  5 10:53:22 61.222.173.26:22002 -> xxx.yyy.1.0:1080 SYN ******S* 
Apr  5 10:53:22 61.222.173.26:22002 -> xxx.yyy.1.0:10080 SYN ******S* 
Apr  5 10:53:22 61.222.173.26:22002 -> xxx.yyy.1.0:3128 SYN ******S* 
Apr  5 10:53:22 61.222.173.26:22002 -> xxx.yyy.1.1:3127 SYN ******S* 
Apr  5 10:53:22 61.222.173.26:22002 -> xxx.yyy.1.1:1080 SYN ******S* 
Apr  5 10:53:23 61.222.173.26:22002 -> xxx.yyy.1.1:3128 SYN ******S* 
Apr  5 10:53:23 61.222.173.26:22002 -> xxx.yyy.1.2:3127 SYN ******S* 
[...]
Apr  5 18:55:09 61.222.173.26:22002 -> xxx.yyy.255.252:3127 SYN ******S* 
Apr  5 18:55:10 61.222.173.26:22002 -> xxx.yyy.255.252:1080 SYN ******S* 
Apr  5 18:55:10 61.222.173.26:22002 -> xxx.yyy.255.253:1080 SYN ******S* 
Apr  5 18:55:10 61.222.173.26:22002 -> xxx.yyy.255.253:10080 SYN ******S* 
Apr  5 18:55:10 61.222.173.26:22002 -> xxx.yyy.255.253:3128 SYN ******S* 
Apr  5 18:55:10 61.222.173.26:22002 -> xxx.yyy.255.254:1080 SYN ******S* 
Apr  5 18:55:10 61.222.173.26:22002 -> xxx.yyy.255.254:10080 SYN ******S* 
Apr  5 18:55:11 61.222.173.26:22002 -> xxx.yyy.255.255:1080 SYN ******S* 
Apr  5 18:55:11 61.222.173.26:22002 -> xxx.yyy.255.255:10080 SYN ******S* 
122262

Apr  5 08:15:50 211.199.171.146:1192 -> xxx.yyy.1.5:1433 SYN ******S* 
Apr  5 08:15:50 211.199.171.146:2190 -> xxx.yyy.1.2:1433 SYN ******S* 
Apr  5 08:15:50 211.199.171.146:1191 -> xxx.yyy.1.4:1433 SYN ******S* 
Apr  5 08:15:50 211.199.171.146:1707 -> xxx.yyy.1.7:1433 SYN ******S* 
Apr  5 08:15:50 211.199.171.146:1193 -> xxx.yyy.1.3:1433 SYN ******S* 
Apr  5 08:15:50 211.199.171.146:1196 -> xxx.yyy.1.8:1433 SYN ******S* 
Apr  5 08:15:47 211.199.171.146:2649 -> xxx.yyy.1.6:1433 SYN ******S* 
Apr  5 08:15:50 211.199.171.146:1197 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Apr  5 10:03:55 211.199.171.146:2682 -> xxx.yyy.255.218:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:2729 -> xxx.yyy.255.205:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:1303 -> xxx.yyy.255.234:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:1783 -> xxx.yyy.255.202:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:1829 -> xxx.yyy.255.248:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:2275 -> xxx.yyy.255.251:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:1826 -> xxx.yyy.255.245:1433 SYN ******S* 
Apr  5 10:03:55 211.199.171.146:1321 -> xxx.yyy.255.252:1433 SYN ******S* 
Apr  5 10:03:56 211.199.171.146:1322 -> xxx.yyy.255.253:1433 SYN ******S* 
81052

Apr  5 03:18:04 65.82.70.5:2290 -> xxx.yyy.1.1:6129 SYN ******S* 
Apr  5 03:18:04 65.82.70.5:2291 -> xxx.yyy.1.2:6129 SYN ******S* 
Apr  5 03:18:06 65.82.70.5:2292 -> xxx.yyy.1.3:6129 SYN ******S* 
Apr  5 03:18:06 65.82.70.5:2293 -> xxx.yyy.1.4:6129 SYN ******S* 
Apr  5 03:18:06 65.82.70.5:2294 -> xxx.yyy.1.5:6129 SYN ******S* 
Apr  5 03:18:06 65.82.70.5:2295 -> xxx.yyy.1.6:6129 SYN ******S* 
Apr  5 03:18:06 65.82.70.5:2296 -> xxx.yyy.1.7:6129 SYN ******S* 
Apr  5 03:18:06 65.82.70.5:2297 -> xxx.yyy.1.8:6129 SYN ******S* 
[...]
Apr  5 03:28:58 65.82.70.5:2829 -> xxx.yyy.255.244:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2836 -> xxx.yyy.255.251:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2833 -> xxx.yyy.255.248:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2830 -> xxx.yyy.255.245:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2837 -> xxx.yyy.255.252:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2834 -> xxx.yyy.255.249:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2831 -> xxx.yyy.255.246:6129 SYN ******S* 
Apr  5 03:28:58 65.82.70.5:2839 -> xxx.yyy.255.254:6129 SYN ******S* 
70575

Apr  5 07:29:17 150.244.32.29:3140 -> xxx.yyy.1.1:4899 SYN ******S* 
Apr  5 07:29:17 150.244.32.29:3141 -> xxx.yyy.1.2:4899 SYN ******S* 
Apr  5 07:29:18 150.244.32.29:3144 -> xxx.yyy.1.3:4899 SYN ******S* 
Apr  5 07:29:15 150.244.32.29:3145 -> xxx.yyy.1.4:4899 SYN ******S* 
Apr  5 07:29:18 150.244.32.29:3148 -> xxx.yyy.1.5:4899 SYN ******S* 
Apr  5 07:29:18 150.244.32.29:3149 -> xxx.yyy.1.6:4899 SYN ******S* 
Apr  5 07:29:18 150.244.32.29:3152 -> xxx.yyy.1.7:4899 SYN ******S* 
Apr  5 07:29:18 150.244.32.29:3153 -> xxx.yyy.1.8:4899 SYN ******S* 
[...]
Apr  5 07:40:13 150.244.32.29:1754 -> xxx.yyy.255.244:4899 SYN ******S* 
Apr  5 07:40:13 150.244.32.29:1760 -> xxx.yyy.255.247:4899 SYN ******S* 
Apr  5 07:40:13 150.244.32.29:1766 -> xxx.yyy.255.250:4899 SYN ******S* 
Apr  5 07:40:13 150.244.32.29:1756 -> xxx.yyy.255.245:4899 SYN ******S* 
Apr  5 07:40:13 150.244.32.29:1762 -> xxx.yyy.255.248:4899 SYN ******S* 
Apr  5 07:40:13 150.244.32.29:1768 -> xxx.yyy.255.251:4899 SYN ******S* 
Apr  5 07:40:14 150.244.32.29:1774 -> xxx.yyy.255.254:4899 SYN ******S* 
Apr  5 07:40:14 150.244.32.29:1770 -> xxx.yyy.255.252:4899 SYN ******S* 
Apr  5 07:40:14 150.244.32.29:1772 -> xxx.yyy.255.253:4899 SYN ******S* 
69573

Apr  5 01:07:01 218.59.171.82:3123 -> xxx.yyy.1.1:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3125 -> xxx.yyy.1.3:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3126 -> xxx.yyy.1.4:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3128 -> xxx.yyy.1.6:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3131 -> xxx.yyy.1.8:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3132 -> xxx.yyy.1.9:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3133 -> xxx.yyy.1.10:6129 SYN ******S* 
Apr  5 01:07:01 218.59.171.82:3134 -> xxx.yyy.1.11:6129 SYN ******S* 
[...]
Apr  5 01:18:40 218.59.171.82:4040 -> xxx.yyy.255.248:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4044 -> xxx.yyy.255.252:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4041 -> xxx.yyy.255.249:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4045 -> xxx.yyy.255.253:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4038 -> xxx.yyy.255.246:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4042 -> xxx.yyy.255.250:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4043 -> xxx.yyy.255.251:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4039 -> xxx.yyy.255.247:6129 SYN ******S* 
Apr  5 01:18:40 218.59.171.82:4046 -> xxx.yyy.255.254:6129 SYN ******S* 
60930

Apr  5 00:24:23 206.129.67.92:2557 -> xxx.yyy.1.1:1433 SYN ******S* 
Apr  5 00:24:20 206.129.67.92:2558 -> xxx.yyy.1.2:1433 SYN ******S* 
Apr  5 00:24:20 206.129.67.92:2559 -> xxx.yyy.1.3:1433 SYN ******S* 
Apr  5 00:24:20 206.129.67.92:2560 -> xxx.yyy.1.4:1433 SYN ******S* 
Apr  5 00:24:20 206.129.67.92:2561 -> xxx.yyy.1.5:1433 SYN ******S* 
Apr  5 00:24:23 206.129.67.92:2562 -> xxx.yyy.1.6:1433 SYN ******S* 
Apr  5 00:24:20 206.129.67.92:2563 -> xxx.yyy.1.7:1433 SYN ******S* 
Apr  5 00:24:23 206.129.67.92:2565 -> xxx.yyy.1.9:1433 SYN ******S* 
[...]
Apr  5 00:36:07 206.129.67.92:1242 -> xxx.yyy.255.236:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1246 -> xxx.yyy.255.240:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1253 -> xxx.yyy.255.247:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1250 -> xxx.yyy.255.244:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1251 -> xxx.yyy.255.245:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1255 -> xxx.yyy.255.249:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1249 -> xxx.yyy.255.243:1433 SYN ******S* 
Apr  5 00:36:07 206.129.67.92:1260 -> xxx.yyy.255.254:1433 SYN ******S* 
Apr  5 00:36:08 206.129.67.92:1259 -> xxx.yyy.255.253:1433 SYN ******S* 
54922

Apr  5 09:22:41 80.218.144.159:4122 -> xxx.yyy.1.1:554 SYN ******S* 
Apr  5 09:22:41 80.218.144.159:4125 -> xxx.yyy.1.4:554 SYN ******S* 
Apr  5 09:22:44 80.218.144.159:4127 -> xxx.yyy.1.6:554 SYN ******S* 
Apr  5 09:22:44 80.218.144.159:4128 -> xxx.yyy.1.7:554 SYN ******S* 
Apr  5 09:22:44 80.218.144.159:4130 -> xxx.yyy.1.9:554 SYN ******S* 
Apr  5 09:22:43 80.218.144.159:4132 -> xxx.yyy.1.11:554 SYN ******S* 
Apr  5 09:22:41 80.218.144.159:4133 -> xxx.yyy.1.12:554 SYN ******S* 
Apr  5 09:22:44 80.218.144.159:4134 -> xxx.yyy.1.13:554 SYN ******S* 
[...]
Apr  5 10:14:11 80.218.144.159:4554 -> xxx.yyy.255.240:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4558 -> xxx.yyy.255.242:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4560 -> xxx.yyy.255.243:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4562 -> xxx.yyy.255.244:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4566 -> xxx.yyy.255.246:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4568 -> xxx.yyy.255.247:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4574 -> xxx.yyy.255.250:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4578 -> xxx.yyy.255.252:554 SYN ******S* 
Apr  5 10:14:11 80.218.144.159:4580 -> xxx.yyy.255.253:554 SYN ******S* 
51734

Apr  5 13:26:16 211.205.74.9:2931 -> xxx.yyy.1.2:1433 SYN ******S* 
Apr  5 13:26:13 211.205.74.9:2930 -> xxx.yyy.1.1:1433 SYN ******S* 
Apr  5 13:26:13 211.205.74.9:2933 -> xxx.yyy.1.4:1433 SYN ******S* 
Apr  5 13:26:13 211.205.74.9:2935 -> xxx.yyy.1.6:1433 SYN ******S* 
Apr  5 13:26:13 211.205.74.9:2937 -> xxx.yyy.1.8:1433 SYN ******S* 
Apr  5 13:26:16 211.205.74.9:2936 -> xxx.yyy.1.7:1433 SYN ******S* 
Apr  5 13:26:13 211.205.74.9:2939 -> xxx.yyy.1.10:1433 SYN ******S* 
Apr  5 13:26:13 211.205.74.9:2940 -> xxx.yyy.1.11:1433 SYN ******S* 
[...]
Apr  5 13:37:54 211.205.74.9:1573 -> xxx.yyy.255.242:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1572 -> xxx.yyy.255.241:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1575 -> xxx.yyy.255.244:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1579 -> xxx.yyy.255.248:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1582 -> xxx.yyy.255.251:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1584 -> xxx.yyy.255.253:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1583 -> xxx.yyy.255.252:1433 SYN ******S* 
Apr  5 13:37:54 211.205.74.9:1585 -> xxx.yyy.255.254:1433 SYN ******S* 
44101

Apr  5 11:48:16 69.70.192.217:2287 -> xxx.yyy.1.1:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2288 -> xxx.yyy.1.2:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2289 -> xxx.yyy.1.3:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2290 -> xxx.yyy.1.4:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2291 -> xxx.yyy.1.5:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2292 -> xxx.yyy.1.6:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2293 -> xxx.yyy.1.7:1433 SYN ******S* 
Apr  5 11:48:16 69.70.192.217:2296 -> xxx.yyy.1.10:1433 SYN ******S* 
[...]
Apr  5 11:51:56 69.70.192.217:3832 -> xxx.yyy.250.202:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3836 -> xxx.yyy.250.206:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3840 -> xxx.yyy.250.210:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3855 -> xxx.yyy.250.225:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3841 -> xxx.yyy.250.211:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3867 -> xxx.yyy.250.237:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3834 -> xxx.yyy.250.204:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3896 -> xxx.yyy.251.12:1433 SYN ******S* 
Apr  5 11:51:56 69.70.192.217:3895 -> xxx.yyy.251.11:1433 SYN ******S* 
28957

Apr  5 17:30:05 66.15.76.53:4159 -> xxx.yyy.1.1:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4160 -> xxx.yyy.1.2:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4164 -> xxx.yyy.1.3:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4168 -> xxx.yyy.1.4:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4171 -> xxx.yyy.1.6:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4173 -> xxx.yyy.1.7:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4174 -> xxx.yyy.1.8:4899 SYN ******S* 
Apr  5 17:30:04 66.15.76.53:4176 -> xxx.yyy.1.10:4899 SYN ******S* 
[...]
Apr  5 17:34:50 66.15.76.53:3131 -> xxx.yyy.255.246:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:1750 -> xxx.yyy.253.4:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:3133 -> xxx.yyy.255.247:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:1755 -> xxx.yyy.253.7:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:3137 -> xxx.yyy.255.250:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:3138 -> xxx.yyy.255.251:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:3139 -> xxx.yyy.255.252:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:3140 -> xxx.yyy.255.253:4899 SYN ******S* 
Apr  5 17:34:50 66.15.76.53:3142 -> xxx.yyy.255.254:4899 SYN ******S* 
28597

Apr  5 13:23:28 24.43.184.235:3677 -> xxx.yyy.1.4:3127 SYN ******S* 
Apr  5 13:23:25 24.43.184.235:3760 -> xxx.yyy.1.5:3127 SYN ******S* 
Apr  5 13:23:28 24.43.184.235:3930 -> xxx.yyy.1.7:3127 SYN ******S* 
Apr  5 13:23:25 24.43.184.235:4079 -> xxx.yyy.1.10:3127 SYN ******S* 
Apr  5 13:23:28 24.43.184.235:4284 -> xxx.yyy.1.12:3127 SYN ******S* 
Apr  5 13:23:25 24.43.184.235:4406 -> xxx.yyy.1.14:3127 SYN ******S* 
Apr  5 13:23:28 24.43.184.235:4830 -> xxx.yyy.1.16:3127 SYN ******S* 
Apr  5 13:23:28 24.43.184.235:4983 -> xxx.yyy.1.17:3127 SYN ******S* 
[...]
Apr  5 15:05:25 24.43.184.235:4145 -> xxx.yyy.255.0:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:4225 -> xxx.yyy.255.207:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:4216 -> xxx.yyy.255.206:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:4047 -> xxx.yyy.255.205:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:3803 -> xxx.yyy.255.203:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:3577 -> xxx.yyy.255.202:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:3216 -> xxx.yyy.255.201:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:3173 -> xxx.yyy.255.200:3127 SYN ******S* 
Apr  5 15:05:25 24.43.184.235:4965 -> xxx.yyy.255.199:3127 SYN ******S* 
14340

Apr  5 04:09:55 217.208.79.10:2480 -> xxx.yyy.1.1:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2481 -> xxx.yyy.1.4:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2482 -> xxx.yyy.1.7:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2483 -> xxx.yyy.1.8:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2484 -> xxx.yyy.1.10:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2492 -> xxx.yyy.1.11:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2493 -> xxx.yyy.1.13:3127 SYN ******S* 
Apr  5 04:09:56 217.208.79.10:2502 -> xxx.yyy.1.16:3127 SYN ******S* 
[...]
Apr  5 04:11:42 217.208.79.10:2834 -> xxx.yyy.255.248:3127 SYN ******S* 
Apr  5 04:11:42 217.208.79.10:2833 -> xxx.yyy.255.247:3127 SYN ******S* 
Apr  5 04:11:42 217.208.79.10:2832 -> xxx.yyy.255.246:3127 SYN ******S* 
Apr  5 04:11:42 217.208.79.10:2853 -> xxx.yyy.255.251:3127 SYN ******S* 
Apr  5 04:11:42 217.208.79.10:2841 -> xxx.yyy.255.250:3127 SYN ******S* 
Apr  5 04:11:42 217.208.79.10:2836 -> xxx.yyy.255.249:3127 SYN ******S* 
Apr  5 04:11:43 217.208.79.10:2857 -> xxx.yyy.255.254:3127 SYN ******S* 
Apr  5 04:11:43 217.208.79.10:2856 -> xxx.yyy.255.253:3127 SYN ******S* 
Apr  5 04:11:43 217.208.79.10:2854 -> xxx.yyy.255.252:3127 SYN ******S* 
13374

Apr  5 00:21:47 202.102.145.231:5848 -> xxx.yyy.151.8:2745 SYN ******S* 
Apr  5 00:21:44 202.102.145.231:64920 -> xxx.yyy.151.8:1025 SYN ******S* 
Apr  5 00:21:44 202.102.145.231:38115 -> xxx.yyy.151.8:3127 SYN ******S* 
Apr  5 00:21:44 202.102.145.231:63332 -> xxx.yyy.151.8:6129 SYN ******S* 
Apr  5 00:21:44 202.102.145.231:1788 -> xxx.yyy.151.8:80 SYN ******S* 
Apr  5 00:21:59 202.102.145.231:38145 -> xxx.yyy.188.0:2745 SYN ******S* 
Apr  5 00:22:02 202.102.145.231:61862 -> xxx.yyy.188.0:1025 SYN ******S* 
Apr  5 00:22:02 202.102.145.231:48429 -> xxx.yyy.188.0:3127 SYN ******S* 
[...]
Apr  5 21:04:09 202.102.145.231:45092 -> xxx.yyy.217.151:3127 SYN ******S* 
Apr  5 21:04:09 202.102.145.231:60188 -> xxx.yyy.217.151:2745 SYN ******S* 
Apr  5 21:04:09 202.102.145.231:35679 -> xxx.yyy.217.151:1025 SYN ******S* 
Apr  5 21:04:09 202.102.145.231:39258 -> xxx.yyy.217.151:80 SYN ******S* 
Apr  5 21:04:14 202.102.145.231:12540 -> xxx.yyy.80.74:80 SYN ******S* 
Apr  5 21:04:15 202.102.145.231:45092 -> xxx.yyy.217.151:3127 SYN ******S* 
Apr  5 21:04:15 202.102.145.231:39258 -> xxx.yyy.217.151:80 SYN ******S* 
Apr  5 21:04:20 202.102.145.231:12540 -> xxx.yyy.80.74:80 SYN ******S* 
12025

Apr  5 03:57:05 137.165.212.215:2691 -> xxx.yyy.1.1:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2704 -> xxx.yyy.1.2:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2708 -> xxx.yyy.1.60:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2720 -> xxx.yyy.1.61:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2739 -> xxx.yyy.1.85:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2748 -> xxx.yyy.1.144:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2757 -> xxx.yyy.1.145:3127 SYN ******S* 
Apr  5 03:57:05 137.165.212.215:2762 -> xxx.yyy.1.171:3127 SYN ******S* 
[...]
Apr  5 08:42:07 137.165.212.215:4784 -> xxx.yyy.255.116:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:4996 -> xxx.yyy.255.138:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1046 -> xxx.yyy.255.172:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1040 -> xxx.yyy.255.162:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1110 -> xxx.yyy.255.192:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1106 -> xxx.yyy.255.185:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1137 -> xxx.yyy.255.219:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1128 -> xxx.yyy.255.207:3127 SYN ******S* 
Apr  5 08:42:07 137.165.212.215:1114 -> xxx.yyy.255.206:3127 SYN ******S* 
12018

--
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly@uni.edu    phone: (319) 273-5850    fax: (319) 273-7373
_______________________________________________
Intrusions mailing list
Intrusions@lists.sans.org
http://www.dshield.org/mailman/listinfo/intrusions
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic