[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Aug 22 00:18:47 141.150.242.7:1668 -> xxx.yyy.1.0:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1669 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1671 -> xxx.yyy.1.2:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1673 -> xxx.yyy.1.3:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1678 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1682 -> xxx.yyy.1.5:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1683 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 00:18:47 141.150.242.7:1687 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 22 04:10:04 141.150.242.7:1722 -> xxx.yyy.255.245:1433 SYN ******S* Aug 22 04:10:04 141.150.242.7:1725 -> xxx.yyy.255.247:1433 SYN ******S* Aug 22 04:10:05 141.150.242.7:1756 -> xxx.yyy.255.248:1433 SYN ******S* Aug 22 04:10:05 141.150.242.7:1771 -> xxx.yyy.255.250:1433 SYN ******S* Aug 22 04:10:05 141.150.242.7:1767 -> xxx.yyy.255.249:1433 SYN ******S* Aug 22 04:10:05 141.150.242.7:1779 -> xxx.yyy.255.251:1433 SYN ******S* Aug 22 04:10:05 141.150.242.7:1793 -> xxx.yyy.255.252:1433 SYN ******S* Aug 22 04:10:06 141.150.242.7:1808 -> xxx.yyy.255.253:1433 SYN ******S* Aug 22 04:10:06 141.150.242.7:1822 -> xxx.yyy.255.254:1433 SYN ******S* 120586 Aug 22 13:30:23 129.173.17.179:3094 -> xxx.yyy.1.0:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3098 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3099 -> xxx.yyy.1.5:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3100 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3101 -> xxx.yyy.1.7:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3102 -> xxx.yyy.1.8:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3103 -> xxx.yyy.1.9:1433 SYN ******S* Aug 22 13:30:23 129.173.17.179:3104 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 22 17:19:05 129.173.17.179:3900 -> xxx.yyy.255.247:1433 SYN ******S* Aug 22 17:19:05 129.173.17.179:3902 -> xxx.yyy.255.249:1433 SYN ******S* Aug 22 17:19:05 129.173.17.179:3901 -> xxx.yyy.255.248:1433 SYN ******S* Aug 22 17:19:05 129.173.17.179:3903 -> xxx.yyy.255.250:1433 SYN ******S* Aug 22 17:19:05 129.173.17.179:3905 -> xxx.yyy.255.252:1433 SYN ******S* Aug 22 17:19:05 129.173.17.179:3904 -> xxx.yyy.255.251:1433 SYN ******S* Aug 22 17:19:06 129.173.17.179:3906 -> xxx.yyy.255.253:1433 SYN ******S* Aug 22 17:19:06 129.173.17.179:3907 -> xxx.yyy.255.254:1433 SYN ******S* 109666 Aug 22 08:14:59 210.217.210.67:3164 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 08:14:59 210.217.210.67:3165 -> xxx.yyy.1.2:1433 SYN ******S* Aug 22 08:14:59 210.217.210.67:3166 -> xxx.yyy.1.3:1433 SYN ******S* Aug 22 08:14:56 210.217.210.67:3167 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 08:14:59 210.217.210.67:3169 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 08:14:59 210.217.210.67:3168 -> xxx.yyy.1.5:1433 SYN ******S* Aug 22 08:14:59 210.217.210.67:3170 -> xxx.yyy.1.7:1433 SYN ******S* Aug 22 08:14:59 210.217.210.67:3171 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 22 08:26:14 210.217.210.67:2051 -> xxx.yyy.255.242:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2048 -> xxx.yyy.255.239:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2055 -> xxx.yyy.255.246:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2059 -> xxx.yyy.255.250:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2057 -> xxx.yyy.255.248:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2060 -> xxx.yyy.255.251:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2061 -> xxx.yyy.255.252:1433 SYN ******S* Aug 22 08:26:14 210.217.210.67:2058 -> xxx.yyy.255.249:1433 SYN ******S* 73421 Aug 22 00:07:13 61.56.246.68:1254 -> xxx.yyy.1.1:6129 SYN ******S* Aug 22 00:07:13 61.56.246.68:1255 -> xxx.yyy.1.2:6129 SYN ******S* Aug 22 00:07:13 61.56.246.68:1256 -> xxx.yyy.1.3:6129 SYN ******S* Aug 22 00:07:14 61.56.246.68:1257 -> xxx.yyy.1.4:6129 SYN ******S* Aug 22 00:07:11 61.56.246.68:1258 -> xxx.yyy.1.5:6129 SYN ******S* Aug 22 00:07:14 61.56.246.68:1259 -> xxx.yyy.1.6:6129 SYN ******S* Aug 22 00:07:14 61.56.246.68:1260 -> xxx.yyy.1.7:6129 SYN ******S* Aug 22 00:07:14 61.56.246.68:1261 -> xxx.yyy.1.8:6129 SYN ******S* [...] Aug 22 00:18:07 61.56.246.68:3883 -> xxx.yyy.255.209:6129 SYN ******S* Aug 22 00:18:07 61.56.246.68:3887 -> xxx.yyy.255.213:6129 SYN ******S* Aug 22 00:18:07 61.56.246.68:3884 -> xxx.yyy.255.210:6129 SYN ******S* Aug 22 00:18:08 61.56.246.68:3895 -> xxx.yyy.255.221:6129 SYN ******S* Aug 22 00:18:08 61.56.246.68:3896 -> xxx.yyy.255.222:6129 SYN ******S* Aug 22 00:18:08 61.56.246.68:3892 -> xxx.yyy.255.218:6129 SYN ******S* Aug 22 00:18:08 61.56.246.68:3893 -> xxx.yyy.255.219:6129 SYN ******S* Aug 22 00:18:08 61.56.246.68:3894 -> xxx.yyy.255.220:6129 SYN ******S* 71394 Aug 22 18:08:17 205.219.54.5:1387 -> xxx.yyy.1.1:5900 SYN ******S* Aug 22 18:08:17 205.219.54.5:1388 -> xxx.yyy.1.2:5900 SYN ******S* Aug 22 18:08:17 205.219.54.5:1389 -> xxx.yyy.1.3:5900 SYN ******S* Aug 22 18:08:19 205.219.54.5:1390 -> xxx.yyy.1.4:5900 SYN ******S* Aug 22 18:08:19 205.219.54.5:1391 -> xxx.yyy.1.5:5900 SYN ******S* Aug 22 18:08:19 205.219.54.5:1392 -> xxx.yyy.1.6:5900 SYN ******S* Aug 22 18:08:16 205.219.54.5:1393 -> xxx.yyy.1.7:5900 SYN ******S* Aug 22 18:08:19 205.219.54.5:1394 -> xxx.yyy.1.8:5900 SYN ******S* [...] Aug 22 18:19:19 205.219.54.5:4022 -> xxx.yyy.255.237:5900 SYN ******S* Aug 22 18:19:19 205.219.54.5:4019 -> xxx.yyy.255.234:5900 SYN ******S* Aug 22 18:19:20 205.219.54.5:4031 -> xxx.yyy.255.246:5900 SYN ******S* Aug 22 18:19:20 205.219.54.5:4035 -> xxx.yyy.255.250:5900 SYN ******S* Aug 22 18:19:20 205.219.54.5:4032 -> xxx.yyy.255.247:5900 SYN ******S* Aug 22 18:19:20 205.219.54.5:4039 -> xxx.yyy.255.254:5900 SYN ******S* Aug 22 18:19:20 205.219.54.5:4037 -> xxx.yyy.255.252:5900 SYN ******S* Aug 22 18:19:20 205.219.54.5:4038 -> xxx.yyy.255.253:5900 SYN ******S* 66816 Aug 22 12:12:33 82.228.146.67:3336 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 12:12:33 82.228.146.67:3337 -> xxx.yyy.1.2:1433 SYN ******S* Aug 22 12:12:36 82.228.146.67:3340 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 12:12:36 82.228.146.67:3344 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 12:12:36 82.228.146.67:3350 -> xxx.yyy.1.9:1433 SYN ******S* Aug 22 12:12:36 82.228.146.67:3351 -> xxx.yyy.1.10:1433 SYN ******S* Aug 22 12:12:36 82.228.146.67:3353 -> xxx.yyy.1.12:1433 SYN ******S* Aug 22 12:12:36 82.228.146.67:3355 -> xxx.yyy.1.13:1433 SYN ******S* [...] Aug 22 15:04:45 82.228.146.67:1610 -> xxx.yyy.190.47:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1611 -> xxx.yyy.190.48:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1626 -> xxx.yyy.190.63:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1627 -> xxx.yyy.190.64:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1628 -> xxx.yyy.190.65:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1612 -> xxx.yyy.190.49:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1613 -> xxx.yyy.190.50:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1614 -> xxx.yyy.190.51:1433 SYN ******S* Aug 22 15:04:45 82.228.146.67:1629 -> xxx.yyy.190.66:1433 SYN ******S* 66363 Aug 22 04:35:51 218.71.225.197:3585 -> xxx.yyy.64.1:1433 SYN ******S* Aug 22 04:35:48 218.71.225.197:3587 -> xxx.yyy.64.3:1433 SYN ******S* Aug 22 04:35:51 218.71.225.197:3588 -> xxx.yyy.64.4:1433 SYN ******S* Aug 22 04:35:51 218.71.225.197:3589 -> xxx.yyy.64.5:1433 SYN ******S* Aug 22 04:35:48 218.71.225.197:3590 -> xxx.yyy.64.6:1433 SYN ******S* Aug 22 04:35:48 218.71.225.197:3596 -> xxx.yyy.64.12:1433 SYN ******S* Aug 22 04:35:48 218.71.225.197:3598 -> xxx.yyy.64.14:1433 SYN ******S* Aug 22 04:35:51 218.71.225.197:3602 -> xxx.yyy.64.18:1433 SYN ******S* [...] Aug 22 07:27:54 218.71.225.197:4339 -> xxx.yyy.255.210:1433 SYN ******S* Aug 22 07:27:54 218.71.225.197:4338 -> xxx.yyy.255.209:1433 SYN ******S* Aug 22 07:27:55 218.71.225.197:4342 -> xxx.yyy.255.212:1433 SYN ******S* Aug 22 07:27:56 218.71.225.197:4354 -> xxx.yyy.255.224:1433 SYN ******S* Aug 22 07:27:56 218.71.225.197:4359 -> xxx.yyy.255.229:1433 SYN ******S* Aug 22 07:27:57 218.71.225.197:4366 -> xxx.yyy.255.236:1433 SYN ******S* Aug 22 07:27:57 218.71.225.197:4370 -> xxx.yyy.255.240:1433 SYN ******S* Aug 22 07:27:58 218.71.225.197:4374 -> xxx.yyy.255.244:1433 SYN ******S* 64222 Aug 22 16:43:24 66.46.73.116:3563 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 16:43:27 66.46.73.116:3564 -> xxx.yyy.1.2:1433 SYN ******S* Aug 22 16:43:27 66.46.73.116:3565 -> xxx.yyy.1.3:1433 SYN ******S* Aug 22 16:43:24 66.46.73.116:3566 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 16:43:24 66.46.73.116:3567 -> xxx.yyy.1.5:1433 SYN ******S* Aug 22 16:43:27 66.46.73.116:3569 -> xxx.yyy.1.7:1433 SYN ******S* Aug 22 16:43:27 66.46.73.116:3570 -> xxx.yyy.1.8:1433 SYN ******S* Aug 22 16:43:27 66.46.73.116:3572 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 22 16:54:24 66.46.73.116:2435 -> xxx.yyy.255.245:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2432 -> xxx.yyy.255.242:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2436 -> xxx.yyy.255.246:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2440 -> xxx.yyy.255.250:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2444 -> xxx.yyy.255.254:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2441 -> xxx.yyy.255.251:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2442 -> xxx.yyy.255.252:1433 SYN ******S* Aug 22 16:54:24 66.46.73.116:2443 -> xxx.yyy.255.253:1433 SYN ******S* 63782 Aug 22 14:49:05 195.199.102.13:3857 -> xxx.yyy.1.2:8000 SYN ******S* Aug 22 14:49:05 195.199.102.13:3858 -> xxx.yyy.1.3:8000 SYN ******S* Aug 22 14:49:07 195.199.102.13:3859 -> xxx.yyy.1.4:8000 SYN ******S* Aug 22 14:49:07 195.199.102.13:3861 -> xxx.yyy.1.6:8000 SYN ******S* Aug 22 14:49:07 195.199.102.13:3864 -> xxx.yyy.1.8:8000 SYN ******S* Aug 22 14:49:07 195.199.102.13:3865 -> xxx.yyy.1.9:8000 SYN ******S* Aug 22 14:49:07 195.199.102.13:3866 -> xxx.yyy.1.10:8000 SYN ******S* Aug 22 14:49:05 195.199.102.13:3867 -> xxx.yyy.1.11:8000 SYN ******S* [...] Aug 22 15:00:45 195.199.102.13:3578 -> xxx.yyy.255.248:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3575 -> xxx.yyy.255.245:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3579 -> xxx.yyy.255.249:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3576 -> xxx.yyy.255.246:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3580 -> xxx.yyy.255.250:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3577 -> xxx.yyy.255.247:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3574 -> xxx.yyy.255.244:8000 SYN ******S* Aug 22 15:00:45 195.199.102.13:3584 -> xxx.yyy.255.254:8000 SYN ******S* 56460 Aug 22 18:34:51 210.194.150.157:22002 -> xxx.yyy.1.0:3127 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.0:1080 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.0:10080 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.0:3128 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.1:3127 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.1:1080 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.1:10080 SYN ******S* Aug 22 18:34:52 210.194.150.157:22002 -> xxx.yyy.1.1:3128 SYN ******S* [...] Aug 22 21:52:17 210.194.150.157:22002 -> xxx.yyy.111.253:3127 SYN ******S* Aug 22 21:52:17 210.194.150.157:22002 -> xxx.yyy.111.253:10080 SYN ******S* Aug 22 21:52:17 210.194.150.157:22002 -> xxx.yyy.111.254:3127 SYN ******S* Aug 22 21:52:17 210.194.150.157:22002 -> xxx.yyy.111.254:1080 SYN ******S* Aug 22 21:52:17 210.194.150.157:22002 -> xxx.yyy.111.254:10080 SYN ******S* Aug 22 21:52:17 210.194.150.157:22002 -> xxx.yyy.111.254:3128 SYN ******S* Aug 22 21:52:18 210.194.150.157:22002 -> xxx.yyy.111.255:1080 SYN ******S* Aug 22 21:52:18 210.194.150.157:22002 -> xxx.yyy.111.255:10080 SYN ******S* Aug 22 21:52:18 210.194.150.157:22002 -> xxx.yyy.111.255:3128 SYN ******S* 40353 Aug 22 23:48:39 61.83.51.109:3308 -> xxx.yyy.1.1:4899 SYN ******S* Aug 22 23:48:39 61.83.51.109:3311 -> xxx.yyy.1.3:4899 SYN ******S* Aug 22 23:48:39 61.83.51.109:3310 -> xxx.yyy.1.2:4899 SYN ******S* Aug 22 23:48:38 61.83.51.109:3312 -> xxx.yyy.1.4:4899 SYN ******S* Aug 22 23:48:38 61.83.51.109:3313 -> xxx.yyy.1.5:4899 SYN ******S* Aug 22 23:48:38 61.83.51.109:3314 -> xxx.yyy.1.6:4899 SYN ******S* Aug 22 23:48:38 61.83.51.109:3316 -> xxx.yyy.1.8:4899 SYN ******S* Aug 22 23:48:38 61.83.51.109:3317 -> xxx.yyy.1.9:4899 SYN ******S* [...] Aug 22 23:52:39 61.83.51.109:4971 -> xxx.yyy.253.243:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4955 -> xxx.yyy.253.231:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4956 -> xxx.yyy.253.232:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4963 -> xxx.yyy.253.235:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4965 -> xxx.yyy.253.237:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4966 -> xxx.yyy.253.238:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4968 -> xxx.yyy.253.240:4899 SYN ******S* Aug 22 23:52:39 61.83.51.109:4969 -> xxx.yyy.253.241:4899 SYN ******S* 37524 Aug 22 15:21:29 61.172.246.145:1814 -> xxx.yyy.1.2:80 SYN ******S* Aug 22 15:21:29 61.172.246.145:1815 -> xxx.yyy.1.3:80 SYN ******S* Aug 22 15:21:29 61.172.246.145:1817 -> xxx.yyy.1.5:80 SYN ******S* Aug 22 15:21:27 61.172.246.145:1820 -> xxx.yyy.1.8:80 SYN ******S* Aug 22 15:21:30 61.172.246.145:1822 -> xxx.yyy.1.10:80 SYN ******S* Aug 22 15:21:27 61.172.246.145:1829 -> xxx.yyy.1.17:80 SYN ******S* Aug 22 15:21:30 61.172.246.145:1830 -> xxx.yyy.1.18:80 SYN ******S* Aug 22 15:21:27 61.172.246.145:1831 -> xxx.yyy.1.19:80 SYN ******S* [...] Aug 22 15:25:55 61.172.246.145:4297 -> xxx.yyy.255.175:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4401 -> xxx.yyy.255.221:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4398 -> xxx.yyy.255.218:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4246 -> xxx.yyy.255.156:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4414 -> xxx.yyy.255.230:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4350 -> xxx.yyy.255.193:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4361 -> xxx.yyy.255.203:80 SYN ******S* Aug 22 15:25:55 61.172.246.145:4390 -> xxx.yyy.255.212:80 SYN ******S* 34723 Aug 22 23:30:22 221.149.118.236:1906 -> xxx.yyy.1.2:4899 SYN ******S* Aug 22 23:30:22 221.149.118.236:1905 -> xxx.yyy.1.1:4899 SYN ******S* Aug 22 23:30:23 221.149.118.236:1907 -> xxx.yyy.1.3:4899 SYN ******S* Aug 22 23:30:21 221.149.118.236:1915 -> xxx.yyy.1.9:4899 SYN ******S* Aug 22 23:30:21 221.149.118.236:1916 -> xxx.yyy.1.10:4899 SYN ******S* Aug 22 23:30:23 221.149.118.236:1917 -> xxx.yyy.1.11:4899 SYN ******S* Aug 22 23:30:21 221.149.118.236:1908 -> xxx.yyy.1.4:4899 SYN ******S* Aug 22 23:30:21 221.149.118.236:1909 -> xxx.yyy.1.5:4899 SYN ******S* [...] Aug 22 23:33:11 221.149.118.236:1761 -> xxx.yyy.253.9:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1846 -> xxx.yyy.253.73:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1915 -> xxx.yyy.253.124:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1887 -> xxx.yyy.253.103:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1919 -> xxx.yyy.253.128:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1902 -> xxx.yyy.253.116:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1857 -> xxx.yyy.253.80:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1909 -> xxx.yyy.253.120:4899 SYN ******S* Aug 22 23:33:11 221.149.118.236:1928 -> xxx.yyy.253.135:4899 SYN ******S* 34516 [...] 33556 Aug 22 01:13:11 200.71.62.42:49072 -> xxx.yyy.1.1:8000 SYN ******S* Aug 22 01:13:14 200.71.62.42:49077 -> xxx.yyy.1.6:8000 SYN ******S* Aug 22 01:13:14 200.71.62.42:49080 -> xxx.yyy.1.9:8000 SYN ******S* Aug 22 01:13:14 200.71.62.42:49083 -> xxx.yyy.1.12:8000 SYN ******S* Aug 22 01:13:11 200.71.62.42:49086 -> xxx.yyy.1.15:8000 SYN ******S* Aug 22 01:13:11 200.71.62.42:49091 -> xxx.yyy.1.20:8000 SYN ******S* Aug 22 01:13:11 200.71.62.42:49093 -> xxx.yyy.1.22:8000 SYN ******S* Aug 22 01:13:11 200.71.62.42:49095 -> xxx.yyy.1.24:8000 SYN ******S* [...] Aug 22 01:17:27 200.71.62.42:57970 -> xxx.yyy.255.250:8000 SYN ******S* Aug 22 01:17:27 200.71.62.42:57971 -> xxx.yyy.255.251:8000 SYN ******S* Aug 22 01:17:27 200.71.62.42:57972 -> xxx.yyy.255.252:8000 SYN ******S* Aug 22 01:17:27 200.71.62.42:57973 -> xxx.yyy.255.253:8000 SYN ******S* Aug 22 01:17:27 200.71.62.42:57974 -> xxx.yyy.255.254:8000 SYN ******S* Aug 22 01:17:31 200.71.62.42:57936 -> xxx.yyy.255.216:8000 SYN ******S* Aug 22 01:17:31 200.71.62.42:57942 -> xxx.yyy.255.222:8000 SYN ******S* Aug 22 01:17:31 200.71.62.42:57949 -> xxx.yyy.255.229:8000 SYN ******S* Aug 22 01:17:31 200.71.62.42:57966 -> xxx.yyy.255.246:8000 SYN ******S* 30859 Aug 22 07:25:33 200.167.247.171:3057 -> xxx.yyy.1.0:1433 SYN ******S* Aug 22 07:25:33 200.167.247.171:3058 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 07:25:33 200.167.247.171:3067 -> xxx.yyy.1.2:1433 SYN ******S* Aug 22 07:25:30 200.167.247.171:3068 -> xxx.yyy.1.3:1433 SYN ******S* Aug 22 07:25:30 200.167.247.171:3069 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 07:25:33 200.167.247.171:3091 -> xxx.yyy.1.5:1433 SYN ******S* Aug 22 07:25:33 200.167.247.171:3093 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 07:25:33 200.167.247.171:3094 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 22 08:50:05 200.167.247.171:2814 -> xxx.yyy.95.46:1433 SYN ******S* Aug 22 08:50:05 200.167.247.171:2815 -> xxx.yyy.95.47:1433 SYN ******S* Aug 22 08:50:05 200.167.247.171:2822 -> xxx.yyy.95.51:1433 SYN ******S* Aug 22 08:50:05 200.167.247.171:2821 -> xxx.yyy.95.50:1433 SYN ******S* Aug 22 08:50:05 200.167.247.171:2823 -> xxx.yyy.95.52:1433 SYN ******S* Aug 22 08:50:05 200.167.247.171:2828 -> xxx.yyy.95.53:1433 SYN ******S* Aug 22 08:50:06 200.167.247.171:2832 -> xxx.yyy.95.56:1433 SYN ******S* Aug 22 08:50:06 200.167.247.171:2831 -> xxx.yyy.95.55:1433 SYN ******S* Aug 22 08:50:06 200.167.247.171:2830 -> xxx.yyy.95.54:1433 SYN ******S* 29737 Aug 22 10:10:49 83.130.178.211:4967 -> xxx.yyy.1.0:1433 SYN ******S* Aug 22 10:10:49 83.130.178.211:4974 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 10:10:49 83.130.178.211:4979 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 10:10:49 83.130.178.211:4988 -> xxx.yyy.1.8:1433 SYN ******S* Aug 22 10:10:49 83.130.178.211:4992 -> xxx.yyy.1.10:1433 SYN ******S* Aug 22 10:10:49 83.130.178.211:4996 -> xxx.yyy.1.12:1433 SYN ******S* Aug 22 10:10:49 83.130.178.211:4998 -> xxx.yyy.1.13:1433 SYN ******S* Aug 22 10:10:52 83.130.178.211:3008 -> xxx.yyy.1.17:1433 SYN ******S* [...] Aug 22 11:50:27 83.130.178.211:4581 -> xxx.yyy.111.240:1433 SYN ******S* Aug 22 11:50:27 83.130.178.211:4588 -> xxx.yyy.111.245:1433 SYN ******S* Aug 22 11:50:27 83.130.178.211:4593 -> xxx.yyy.111.247:1433 SYN ******S* Aug 22 11:50:27 83.130.178.211:4595 -> xxx.yyy.111.248:1433 SYN ******S* Aug 22 11:50:28 83.130.178.211:4606 -> xxx.yyy.111.253:1433 SYN ******S* Aug 22 11:50:28 83.130.178.211:4603 -> xxx.yyy.111.251:1433 SYN ******S* Aug 22 11:50:28 83.130.178.211:4613 -> xxx.yyy.111.255:1433 SYN ******S* Aug 22 11:50:28 83.130.178.211:4610 -> xxx.yyy.111.254:1433 SYN ******S* 27766 Aug 22 02:00:09 195.163.66.145:1093 -> xxx.yyy.1.43:1433 SYN ******S* Aug 22 02:00:12 195.163.66.145:1186 -> xxx.yyy.1.44:1433 SYN ******S* Aug 22 02:00:12 195.163.66.145:1281 -> xxx.yyy.1.46:1433 SYN ******S* Aug 22 02:00:12 195.163.66.145:1291 -> xxx.yyy.1.47:1433 SYN ******S* Aug 22 02:00:12 195.163.66.145:1317 -> xxx.yyy.1.49:1433 SYN ******S* Aug 22 02:00:12 195.163.66.145:1337 -> xxx.yyy.1.50:1433 SYN ******S* Aug 22 02:00:12 195.163.66.145:1353 -> xxx.yyy.1.51:1433 SYN ******S* Aug 22 02:00:09 195.163.66.145:1362 -> xxx.yyy.1.53:1433 SYN ******S* [...] Aug 22 02:11:11 195.163.66.145:4489 -> xxx.yyy.255.168:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:4473 -> xxx.yyy.255.165:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:4689 -> xxx.yyy.255.172:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:4818 -> xxx.yyy.255.178:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:4766 -> xxx.yyy.255.176:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:1093 -> xxx.yyy.255.185:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:4985 -> xxx.yyy.255.184:1433 SYN ******S* Aug 22 02:11:11 195.163.66.145:4962 -> xxx.yyy.255.182:1433 SYN ******S* 20261 Aug 22 19:45:15 69.89.37.197:4044 -> xxx.yyy.1.25:1433 SYN ******S* Aug 22 19:45:15 69.89.37.197:4046 -> xxx.yyy.1.27:1433 SYN ******S* Aug 22 19:45:15 69.89.37.197:4048 -> xxx.yyy.1.29:1433 SYN ******S* Aug 22 19:45:16 69.89.37.197:4024 -> xxx.yyy.1.9:1433 SYN ******S* Aug 22 19:45:16 69.89.37.197:4026 -> xxx.yyy.1.11:1433 SYN ******S* Aug 22 19:45:16 69.89.37.197:4041 -> xxx.yyy.1.23:1433 SYN ******S* Aug 22 19:45:16 69.89.37.197:4075 -> xxx.yyy.1.41:1433 SYN ******S* Aug 22 19:45:16 69.89.37.197:4077 -> xxx.yyy.1.43:1433 SYN ******S* [...] Aug 22 21:50:44 69.89.37.197:2340 -> xxx.yyy.139.66:1433 SYN ******S* Aug 22 21:50:44 69.89.37.197:2172 -> xxx.yyy.139.40:1433 SYN ******S* Aug 22 21:50:44 69.89.37.197:1825 -> xxx.yyy.138.251:1433 SYN ******S* Aug 22 21:50:45 69.89.37.197:2190 -> xxx.yyy.139.44:1433 SYN ******S* Aug 22 21:50:45 69.89.37.197:2337 -> xxx.yyy.139.65:1433 SYN ******S* Aug 22 21:50:45 69.89.37.197:2196 -> xxx.yyy.139.45:1433 SYN ******S* Aug 22 21:50:45 69.89.37.197:2344 -> xxx.yyy.139.67:1433 SYN ******S* Aug 22 21:50:45 69.89.37.197:1902 -> xxx.yyy.139.6:1433 SYN ******S* 19916 Aug 22 00:04:27 222.47.80.115:4001 -> xxx.yyy.104.1:1433 SYN ******S* Aug 22 00:04:27 222.47.80.115:4020 -> xxx.yyy.104.3:1433 SYN ******S* Aug 22 00:04:27 222.47.80.115:4034 -> xxx.yyy.104.4:1433 SYN ******S* Aug 22 00:04:28 222.47.80.115:4054 -> xxx.yyy.104.6:1433 SYN ******S* Aug 22 00:04:25 222.47.80.115:4055 -> xxx.yyy.104.7:1433 SYN ******S* Aug 22 00:04:28 222.47.80.115:4066 -> xxx.yyy.104.8:1433 SYN ******S* Aug 22 00:04:28 222.47.80.115:4067 -> xxx.yyy.104.9:1433 SYN ******S* Aug 22 00:04:26 222.47.80.115:4096 -> xxx.yyy.104.10:1433 SYN ******S* [...] Aug 22 00:52:21 222.47.80.115:3617 -> xxx.yyy.157.90:1433 SYN ******S* Aug 22 00:52:21 222.47.80.115:3626 -> xxx.yyy.157.91:1433 SYN ******S* Aug 22 00:52:21 222.47.80.115:3631 -> xxx.yyy.157.92:1433 SYN ******S* Aug 22 00:52:23 222.47.80.115:3806 -> xxx.yyy.157.103:1433 SYN ******S* Aug 22 00:52:23 222.47.80.115:3397 -> xxx.yyy.157.67:1433 SYN ******S* Aug 22 00:52:25 222.47.80.115:3493 -> xxx.yyy.157.79:1433 SYN ******S* Aug 22 00:52:25 222.47.80.115:4019 -> xxx.yyy.157.115:1433 SYN ******S* Aug 22 00:52:29 222.47.80.115:3789 -> xxx.yyy.157.102:1433 SYN ******S* Aug 22 00:52:33 222.47.80.115:4509 -> xxx.yyy.157.145:1433 SYN ******S* 19711 [...] 14793 Aug 22 13:39:04 24.62.22.230:3671 -> xxx.yyy.1.9:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3678 -> xxx.yyy.1.15:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3687 -> xxx.yyy.1.24:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3704 -> xxx.yyy.1.39:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3715 -> xxx.yyy.1.50:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3721 -> xxx.yyy.1.55:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3729 -> xxx.yyy.1.62:80 SYN ******S* Aug 22 13:39:04 24.62.22.230:3738 -> xxx.yyy.1.71:80 SYN ******S* [...] Aug 22 13:47:35 24.62.22.230:1322 -> xxx.yyy.255.156:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1398 -> xxx.yyy.255.225:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1302 -> xxx.yyy.255.137:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1295 -> xxx.yyy.255.131:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1405 -> xxx.yyy.255.231:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1401 -> xxx.yyy.255.228:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1429 -> xxx.yyy.255.253:80 SYN ******S* Aug 22 13:47:35 24.62.22.230:1422 -> xxx.yyy.255.247:80 SYN ******S* 13454 Aug 22 10:03:00 220.105.96.139:4313 -> xxx.yyy.72.152:5554 SYN ******S* Aug 22 10:03:03 220.105.96.139:3538 -> xxx.yyy.72.152:9898 SYN ******S* Aug 22 10:03:00 220.105.96.139:4317 -> xxx.yyy.72.148:5554 SYN ******S* Aug 22 10:03:03 220.105.96.139:3530 -> xxx.yyy.72.148:9898 SYN ******S* Aug 22 10:03:00 220.105.96.139:4318 -> xxx.yyy.72.147:5554 SYN ******S* Aug 22 10:03:03 220.105.96.139:3532 -> xxx.yyy.72.147:9898 SYN ******S* Aug 22 10:03:00 220.105.96.139:4303 -> xxx.yyy.72.160:5554 SYN ******S* Aug 22 10:03:03 220.105.96.139:3525 -> xxx.yyy.72.160:9898 SYN ******S* [...] Aug 22 10:03:45 220.105.96.139:4730 -> xxx.yyy.92.222:9898 SYN ******S* Aug 22 10:03:45 220.105.96.139:4744 -> xxx.yyy.92.223:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:4755 -> xxx.yyy.92.224:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:4758 -> xxx.yyy.92.225:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:4822 -> xxx.yyy.92.226:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:1071 -> xxx.yyy.92.233:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:1067 -> xxx.yyy.92.232:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:1155 -> xxx.yyy.92.244:9898 SYN ******S* Aug 22 10:03:46 220.105.96.139:1156 -> xxx.yyy.92.245:9898 SYN ******S* 13136 Aug 22 20:06:37 210.122.225.245:3617 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 20:06:34 210.122.225.245:3624 -> xxx.yyy.1.4:1433 SYN ******S* Aug 22 20:06:37 210.122.225.245:3628 -> xxx.yyy.1.6:1433 SYN ******S* Aug 22 20:06:37 210.122.225.245:3626 -> xxx.yyy.1.5:1433 SYN ******S* Aug 22 20:06:38 210.122.225.245:3631 -> xxx.yyy.1.7:1433 SYN ******S* Aug 22 20:06:38 210.122.225.245:3633 -> xxx.yyy.1.8:1433 SYN ******S* Aug 22 20:06:38 210.122.225.245:3642 -> xxx.yyy.1.11:1433 SYN ******S* Aug 22 20:06:38 210.122.225.245:3638 -> xxx.yyy.1.9:1433 SYN ******S* [...] Aug 22 21:12:13 210.122.225.245:3541 -> xxx.yyy.73.159:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3560 -> xxx.yyy.73.161:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3574 -> xxx.yyy.73.163:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3564 -> xxx.yyy.73.162:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3586 -> xxx.yyy.73.164:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3921 -> xxx.yyy.73.209:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3927 -> xxx.yyy.73.210:1433 SYN ******S* Aug 22 21:12:13 210.122.225.245:3945 -> xxx.yyy.73.211:1433 SYN ******S* 13115 Aug 22 23:53:49 218.47.139.49:3354 -> xxx.yyy.174.222:5554 SYN ******S* Aug 22 23:53:50 218.47.139.49:3822 -> xxx.yyy.174.222:1023 SYN ******S* Aug 22 23:53:52 218.47.139.49:1349 -> xxx.yyy.174.222:9898 SYN ******S* Aug 22 23:53:49 218.47.139.49:3358 -> xxx.yyy.174.237:5554 SYN ******S* Aug 22 23:53:50 218.47.139.49:3893 -> xxx.yyy.174.237:1023 SYN ******S* Aug 22 23:53:49 218.47.139.49:3359 -> xxx.yyy.174.238:5554 SYN ******S* Aug 22 23:53:50 218.47.139.49:3894 -> xxx.yyy.174.238:1023 SYN ******S* Aug 22 23:53:49 218.47.139.49:3360 -> xxx.yyy.174.239:5554 SYN ******S* [...] Aug 22 23:54:34 218.47.139.49:1350 -> xxx.yyy.195.77:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1370 -> xxx.yyy.195.85:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1371 -> xxx.yyy.195.78:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1372 -> xxx.yyy.195.79:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1377 -> xxx.yyy.195.84:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1376 -> xxx.yyy.195.83:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1373 -> xxx.yyy.195.80:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1374 -> xxx.yyy.195.81:9898 SYN ******S* Aug 22 23:54:34 218.47.139.49:1375 -> xxx.yyy.195.82:9898 SYN ******S* 11734 Aug 22 16:04:21 200.233.99.210:3146 -> xxx.yyy.1.1:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3147 -> xxx.yyy.1.2:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3148 -> xxx.yyy.1.3:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3427 -> xxx.yyy.1.8:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3449 -> xxx.yyy.1.9:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3453 -> xxx.yyy.1.10:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3454 -> xxx.yyy.1.11:1433 SYN ******S* Aug 22 16:04:21 200.233.99.210:3631 -> xxx.yyy.1.12:1433 SYN ******S* [...] Aug 22 17:44:51 200.233.99.210:3129 -> xxx.yyy.234.3:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3157 -> xxx.yyy.234.7:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3245 -> xxx.yyy.234.9:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3234 -> xxx.yyy.234.8:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3337 -> xxx.yyy.234.10:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3366 -> xxx.yyy.234.11:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:4255 -> xxx.yyy.234.29:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3367 -> xxx.yyy.234.12:1433 SYN ******S* Aug 22 17:44:52 200.233.99.210:3373 -> xxx.yyy.234.13:1433 SYN ******S* 11456 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions