[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Aug 24 07:58:41 82.33.50.168:4448 -> xxx.yyy.1.0:1433 SYN ******S* Aug 24 07:58:41 82.33.50.168:4453 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 07:58:39 82.33.50.168:1289 -> xxx.yyy.1.11:1433 SYN ******S* Aug 24 07:58:39 82.33.50.168:1871 -> xxx.yyy.1.14:1433 SYN ******S* Aug 24 07:58:42 82.33.50.168:1885 -> xxx.yyy.1.17:1433 SYN ******S* Aug 24 07:58:39 82.33.50.168:1891 -> xxx.yyy.1.19:1433 SYN ******S* Aug 24 07:58:42 82.33.50.168:1903 -> xxx.yyy.1.23:1433 SYN ******S* Aug 24 07:58:39 82.33.50.168:1943 -> xxx.yyy.1.38:1433 SYN ******S* [...] Aug 24 11:47:24 82.33.50.168:2571 -> xxx.yyy.255.243:1433 SYN ******S* Aug 24 11:47:24 82.33.50.168:2568 -> xxx.yyy.255.242:1433 SYN ******S* Aug 24 11:47:25 82.33.50.168:2590 -> xxx.yyy.255.249:1433 SYN ******S* Aug 24 11:47:25 82.33.50.168:2589 -> xxx.yyy.255.248:1433 SYN ******S* Aug 24 11:47:25 82.33.50.168:2587 -> xxx.yyy.255.246:1433 SYN ******S* Aug 24 11:47:25 82.33.50.168:2595 -> xxx.yyy.255.250:1433 SYN ******S* Aug 24 11:47:25 82.33.50.168:2602 -> xxx.yyy.255.252:1433 SYN ******S* Aug 24 11:47:25 82.33.50.168:2606 -> xxx.yyy.255.253:1433 SYN ******S* 95931 Aug 24 09:19:23 80.182.109.105:3420 -> xxx.yyy.1.0:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3421 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3422 -> xxx.yyy.1.2:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3423 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3425 -> xxx.yyy.1.5:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3424 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3428 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 09:19:26 80.182.109.105:3432 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 24 13:08:48 80.182.109.105:3208 -> xxx.yyy.255.244:1433 SYN ******S* Aug 24 13:08:48 80.182.109.105:3218 -> xxx.yyy.255.247:1433 SYN ******S* Aug 24 13:08:48 80.182.109.105:3225 -> xxx.yyy.255.250:1433 SYN ******S* Aug 24 13:08:48 80.182.109.105:3223 -> xxx.yyy.255.249:1433 SYN ******S* Aug 24 13:08:48 80.182.109.105:3231 -> xxx.yyy.255.251:1433 SYN ******S* Aug 24 13:08:48 80.182.109.105:3232 -> xxx.yyy.255.252:1433 SYN ******S* Aug 24 13:08:49 80.182.109.105:3237 -> xxx.yyy.255.254:1433 SYN ******S* Aug 24 13:08:49 80.182.109.105:3235 -> xxx.yyy.255.253:1433 SYN ******S* 92790 Aug 24 10:21:31 65.5.93.12:3603 -> xxx.yyy.1.2:139 SYN ******S* Aug 24 10:21:31 65.5.93.12:3604 -> xxx.yyy.1.3:139 SYN ******S* Aug 24 10:21:31 65.5.93.12:3605 -> xxx.yyy.1.4:139 SYN ******S* Aug 24 10:21:31 65.5.93.12:3606 -> xxx.yyy.1.5:139 SYN ******S* Aug 24 10:21:31 65.5.93.12:3609 -> xxx.yyy.1.8:139 SYN ******S* Aug 24 10:21:28 65.5.93.12:3610 -> xxx.yyy.1.9:139 SYN ******S* Aug 24 10:21:31 65.5.93.12:3611 -> xxx.yyy.1.10:139 SYN ******S* Aug 24 10:21:31 65.5.93.12:3612 -> xxx.yyy.1.11:139 SYN ******S* [...] Aug 24 10:43:31 65.5.93.12:3589 -> xxx.yyy.255.242:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3587 -> xxx.yyy.255.240:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3588 -> xxx.yyy.255.241:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3603 -> xxx.yyy.255.244:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3620 -> xxx.yyy.255.251:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3613 -> xxx.yyy.255.249:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3614 -> xxx.yyy.255.250:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3624 -> xxx.yyy.255.254:139 SYN ******S* Aug 24 10:43:31 65.5.93.12:3622 -> xxx.yyy.255.253:139 SYN ******S* 85635 Aug 24 13:45:46 69.166.243.227:1715 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 13:45:43 69.166.243.227:1717 -> xxx.yyy.1.2:1433 SYN ******S* Aug 24 13:45:46 69.166.243.227:1718 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 13:45:47 69.166.243.227:1721 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 13:45:47 69.166.243.227:1726 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 13:45:47 69.166.243.227:1727 -> xxx.yyy.1.7:1433 SYN ******S* Aug 24 13:45:44 69.166.243.227:1728 -> xxx.yyy.1.8:1433 SYN ******S* Aug 24 13:45:47 69.166.243.227:1732 -> xxx.yyy.1.9:1433 SYN ******S* [...] Aug 24 17:35:50 69.166.243.227:3971 -> xxx.yyy.255.242:1433 SYN ******S* Aug 24 17:35:51 69.166.243.227:3973 -> xxx.yyy.255.244:1433 SYN ******S* Aug 24 17:35:51 69.166.243.227:3975 -> xxx.yyy.255.245:1433 SYN ******S* Aug 24 17:35:51 69.166.243.227:3976 -> xxx.yyy.255.246:1433 SYN ******S* Aug 24 17:35:52 69.166.243.227:3978 -> xxx.yyy.255.248:1433 SYN ******S* Aug 24 17:35:52 69.166.243.227:3980 -> xxx.yyy.255.249:1433 SYN ******S* Aug 24 17:35:52 69.166.243.227:3983 -> xxx.yyy.255.250:1433 SYN ******S* Aug 24 17:35:53 69.166.243.227:3985 -> xxx.yyy.255.252:1433 SYN ******S* 82278 Aug 24 22:31:09 163.15.197.201:3571 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 22:31:07 163.15.197.201:3577 -> xxx.yyy.1.7:1433 SYN ******S* Aug 24 22:31:10 163.15.197.201:3579 -> xxx.yyy.1.9:1433 SYN ******S* Aug 24 22:31:10 163.15.197.201:3588 -> xxx.yyy.1.18:1433 SYN ******S* Aug 24 22:31:10 163.15.197.201:3589 -> xxx.yyy.1.19:1433 SYN ******S* Aug 24 22:31:10 163.15.197.201:3590 -> xxx.yyy.1.20:1433 SYN ******S* Aug 24 22:31:10 163.15.197.201:3591 -> xxx.yyy.1.21:1433 SYN ******S* Aug 24 22:31:10 163.15.197.201:3592 -> xxx.yyy.1.22:1433 SYN ******S* [...] Aug 24 22:42:48 163.15.197.201:3725 -> xxx.yyy.255.246:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3728 -> xxx.yyy.255.249:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3731 -> xxx.yyy.255.252:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3729 -> xxx.yyy.255.250:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3726 -> xxx.yyy.255.247:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3727 -> xxx.yyy.255.248:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3732 -> xxx.yyy.255.253:1433 SYN ******S* Aug 24 22:42:48 163.15.197.201:3730 -> xxx.yyy.255.251:1433 SYN ******S* 52127 Aug 24 00:00:04 219.249.50.215:4057 -> xxx.yyy.166.121:1433 SYN ******S* Aug 24 00:00:04 219.249.50.215:3708 -> xxx.yyy.166.114:1433 SYN ******S* Aug 24 00:00:04 219.249.50.215:3711 -> xxx.yyy.166.115:1433 SYN ******S* Aug 24 00:00:04 219.249.50.215:3774 -> xxx.yyy.166.116:1433 SYN ******S* Aug 24 00:00:05 219.249.50.215:3812 -> xxx.yyy.166.117:1433 SYN ******S* Aug 24 00:00:05 219.249.50.215:3832 -> xxx.yyy.166.118:1433 SYN ******S* Aug 24 00:00:05 219.249.50.215:3839 -> xxx.yyy.166.119:1433 SYN ******S* Aug 24 00:00:08 219.249.50.215:4164 -> xxx.yyy.166.122:1433 SYN ******S* [...] Aug 24 01:20:26 219.249.50.215:3873 -> xxx.yyy.255.249:1433 SYN ******S* Aug 24 01:20:27 219.249.50.215:3901 -> xxx.yyy.255.254:1433 SYN ******S* Aug 24 01:20:27 219.249.50.215:3900 -> xxx.yyy.255.253:1433 SYN ******S* Aug 24 01:20:30 219.249.50.215:3615 -> xxx.yyy.255.239:1433 SYN ******S* Aug 24 01:20:30 219.249.50.215:3626 -> xxx.yyy.255.240:1433 SYN ******S* Aug 24 01:20:30 219.249.50.215:3687 -> xxx.yyy.255.241:1433 SYN ******S* Aug 24 01:20:31 219.249.50.215:3803 -> xxx.yyy.255.245:1433 SYN ******S* Aug 24 01:20:32 219.249.50.215:3837 -> xxx.yyy.255.247:1433 SYN ******S* 49866 Aug 24 15:45:06 213.132.178.141:2010 -> xxx.yyy.1.2:3632 SYN ******S* Aug 24 15:45:09 213.132.178.141:2012 -> xxx.yyy.1.4:3632 SYN ******S* Aug 24 15:45:09 213.132.178.141:2013 -> xxx.yyy.1.5:3632 SYN ******S* Aug 24 15:45:09 213.132.178.141:2014 -> xxx.yyy.1.6:3632 SYN ******S* Aug 24 15:45:09 213.132.178.141:2016 -> xxx.yyy.1.8:3632 SYN ******S* Aug 24 15:45:09 213.132.178.141:2017 -> xxx.yyy.1.9:3632 SYN ******S* Aug 24 15:45:07 213.132.178.141:2018 -> xxx.yyy.1.10:3632 SYN ******S* Aug 24 15:45:07 213.132.178.141:2019 -> xxx.yyy.1.11:3632 SYN ******S* [...] Aug 24 15:56:48 213.132.178.141:4326 -> xxx.yyy.255.238:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4323 -> xxx.yyy.255.235:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4338 -> xxx.yyy.255.250:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4335 -> xxx.yyy.255.247:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4332 -> xxx.yyy.255.244:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4336 -> xxx.yyy.255.248:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4337 -> xxx.yyy.255.249:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4333 -> xxx.yyy.255.245:3632 SYN ******S* Aug 24 15:56:48 213.132.178.141:4334 -> xxx.yyy.255.246:3632 SYN ******S* 45360 Aug 24 08:15:50 210.200.243.53:2452 -> xxx.yyy.64.176:1433 SYN ******S* Aug 24 08:15:50 210.200.243.53:2454 -> xxx.yyy.64.177:1433 SYN ******S* Aug 24 08:15:50 210.200.243.53:2457 -> xxx.yyy.64.178:1433 SYN ******S* Aug 24 08:15:50 210.200.243.53:2460 -> xxx.yyy.64.179:1433 SYN ******S* Aug 24 08:15:47 210.200.243.53:2462 -> xxx.yyy.64.180:1433 SYN ******S* Aug 24 08:15:47 210.200.243.53:2464 -> xxx.yyy.64.181:1433 SYN ******S* Aug 24 08:15:47 210.200.243.53:2469 -> xxx.yyy.64.182:1433 SYN ******S* Aug 24 08:15:47 210.200.243.53:2471 -> xxx.yyy.64.183:1433 SYN ******S* [...] Aug 24 09:39:11 210.200.243.53:1733 -> xxx.yyy.157.175:1433 SYN ******S* Aug 24 09:39:11 210.200.243.53:1735 -> xxx.yyy.157.176:1433 SYN ******S* Aug 24 09:39:11 210.200.243.53:1737 -> xxx.yyy.157.178:1433 SYN ******S* Aug 24 09:39:12 210.200.243.53:1717 -> xxx.yyy.157.167:1433 SYN ******S* Aug 24 09:39:12 210.200.243.53:1751 -> xxx.yyy.157.181:1433 SYN ******S* Aug 24 09:39:12 210.200.243.53:1718 -> xxx.yyy.157.168:1433 SYN ******S* Aug 24 09:39:12 210.200.243.53:1719 -> xxx.yyy.157.169:1433 SYN ******S* Aug 24 09:39:12 210.200.243.53:1758 -> xxx.yyy.157.184:1433 SYN ******S* 39343 Aug 24 18:00:46 216.229.142.202:3787 -> xxx.yyy.1.9:1433 SYN ******S* Aug 24 18:00:46 216.229.142.202:3790 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 18:00:46 216.229.142.202:3792 -> xxx.yyy.1.12:1433 SYN ******S* Aug 24 18:00:46 216.229.142.202:3794 -> xxx.yyy.1.14:1433 SYN ******S* Aug 24 18:00:46 216.229.142.202:3797 -> xxx.yyy.1.17:1433 SYN ******S* Aug 24 18:00:46 216.229.142.202:3799 -> xxx.yyy.1.19:1433 SYN ******S* Aug 24 18:00:46 216.229.142.202:3800 -> xxx.yyy.1.20:1433 SYN ******S* Aug 24 18:00:43 216.229.142.202:3801 -> xxx.yyy.1.21:1433 SYN ******S* [...] Aug 24 18:04:13 216.229.142.202:1339 -> xxx.yyy.246.158:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1336 -> xxx.yyy.246.155:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1333 -> xxx.yyy.246.152:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:4357 -> xxx.yyy.247.196:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1330 -> xxx.yyy.246.149:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1327 -> xxx.yyy.246.146:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1311 -> xxx.yyy.246.130:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1340 -> xxx.yyy.246.159:1433 SYN ******S* Aug 24 18:04:13 216.229.142.202:1403 -> xxx.yyy.246.221:1433 SYN ******S* 38183 Aug 24 15:11:23 211.239.172.73:1965 -> xxx.yyy.1.8:1433 SYN ******S* Aug 24 15:11:23 211.239.172.73:1967 -> xxx.yyy.1.10:1433 SYN ******S* Aug 24 15:11:23 211.239.172.73:1968 -> xxx.yyy.1.11:1433 SYN ******S* Aug 24 15:11:20 211.239.172.73:1960 -> xxx.yyy.1.5:1433 SYN ******S* Aug 24 15:11:20 211.239.172.73:1964 -> xxx.yyy.1.7:1433 SYN ******S* Aug 24 15:11:23 211.239.172.73:1959 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 15:11:20 211.239.172.73:1961 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 15:11:20 211.239.172.73:1977 -> xxx.yyy.1.20:1433 SYN ******S* [...] Aug 24 15:15:10 211.239.172.73:2425 -> xxx.yyy.255.236:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2433 -> xxx.yyy.255.244:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2434 -> xxx.yyy.255.245:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2423 -> xxx.yyy.255.234:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2432 -> xxx.yyy.255.243:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2427 -> xxx.yyy.255.238:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2441 -> xxx.yyy.255.252:1433 SYN ******S* Aug 24 15:15:10 211.239.172.73:2429 -> xxx.yyy.255.240:1433 SYN ******S* 37631 Aug 24 09:05:29 216.233.207.125:3586 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 09:05:26 216.233.207.125:3588 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 09:05:29 216.233.207.125:3589 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 09:05:26 216.233.207.125:3591 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 09:05:26 216.233.207.125:3592 -> xxx.yyy.1.7:1433 SYN ******S* Aug 24 09:05:29 216.233.207.125:3594 -> xxx.yyy.1.9:1433 SYN ******S* Aug 24 09:05:29 216.233.207.125:3595 -> xxx.yyy.1.10:1433 SYN ******S* Aug 24 09:05:29 216.233.207.125:3596 -> xxx.yyy.1.11:1433 SYN ******S* [...] Aug 24 09:16:22 216.233.207.125:2506 -> xxx.yyy.255.240:1433 SYN ******S* Aug 24 09:16:22 216.233.207.125:2510 -> xxx.yyy.255.244:1433 SYN ******S* Aug 24 09:16:22 216.233.207.125:2507 -> xxx.yyy.255.241:1433 SYN ******S* Aug 24 09:16:23 216.233.207.125:2520 -> xxx.yyy.255.254:1433 SYN ******S* Aug 24 09:16:23 216.233.207.125:2517 -> xxx.yyy.255.251:1433 SYN ******S* Aug 24 09:16:23 216.233.207.125:2518 -> xxx.yyy.255.252:1433 SYN ******S* Aug 24 09:16:23 216.233.207.125:2515 -> xxx.yyy.255.249:1433 SYN ******S* Aug 24 09:16:23 216.233.207.125:2519 -> xxx.yyy.255.253:1433 SYN ******S* Aug 24 09:16:23 216.233.207.125:2516 -> xxx.yyy.255.250:1433 SYN ******S* 37278 Aug 24 16:34:37 66.108.43.173:3068 -> xxx.yyy.1.11:4000 SYN ******S* Aug 24 16:34:40 66.108.43.173:3088 -> xxx.yyy.1.31:4000 SYN ******S* Aug 24 16:34:39 66.108.43.173:3089 -> xxx.yyy.1.32:4000 SYN ******S* Aug 24 16:34:37 66.108.43.173:3090 -> xxx.yyy.1.33:4000 SYN ******S* Aug 24 16:34:37 66.108.43.173:3087 -> xxx.yyy.1.30:4000 SYN ******S* Aug 24 16:34:37 66.108.43.173:3094 -> xxx.yyy.1.37:4000 SYN ******S* Aug 24 16:34:40 66.108.43.173:3096 -> xxx.yyy.1.39:4000 SYN ******S* Aug 24 16:34:39 66.108.43.173:3095 -> xxx.yyy.1.38:4000 SYN ******S* [...] Aug 24 16:45:43 66.108.43.173:3084 -> xxx.yyy.255.230:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3092 -> xxx.yyy.255.238:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3096 -> xxx.yyy.255.241:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3097 -> xxx.yyy.255.242:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3090 -> xxx.yyy.255.236:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3094 -> xxx.yyy.255.239:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3089 -> xxx.yyy.255.235:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3091 -> xxx.yyy.255.237:4000 SYN ******S* Aug 24 16:45:43 66.108.43.173:3095 -> xxx.yyy.255.240:4000 SYN ******S* 35690 Aug 24 00:00:09 220.71.28.202:46382 -> xxx.yyy.147.45:443 SYN ******S* Aug 24 00:00:06 220.71.28.202:46385 -> xxx.yyy.147.48:443 SYN ******S* Aug 24 00:00:09 220.71.28.202:46383 -> xxx.yyy.147.46:443 SYN ******S* Aug 24 00:00:09 220.71.28.202:46384 -> xxx.yyy.147.47:443 SYN ******S* Aug 24 00:00:09 220.71.28.202:46391 -> xxx.yyy.147.54:443 SYN ******S* Aug 24 00:00:09 220.71.28.202:46392 -> xxx.yyy.147.55:443 SYN ******S* Aug 24 00:00:09 220.71.28.202:46387 -> xxx.yyy.147.50:443 SYN ******S* Aug 24 00:00:09 220.71.28.202:46386 -> xxx.yyy.147.49:443 SYN ******S* [...] Aug 24 00:18:16 220.71.28.202:42578 -> xxx.yyy.255.16:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42570 -> xxx.yyy.255.12:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42579 -> xxx.yyy.255.17:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42581 -> xxx.yyy.255.19:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42583 -> xxx.yyy.255.21:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42569 -> xxx.yyy.255.11:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42585 -> xxx.yyy.255.23:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42580 -> xxx.yyy.255.18:443 SYN ******S* Aug 24 00:18:16 220.71.28.202:42582 -> xxx.yyy.255.20:443 SYN ******S* 33286 Aug 24 04:33:19 222.182.216.227:3070 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 04:33:16 222.182.216.227:3078 -> xxx.yyy.1.8:1433 SYN ******S* Aug 24 04:33:19 222.182.216.227:3083 -> xxx.yyy.1.10:1433 SYN ******S* Aug 24 04:33:16 222.182.216.227:3091 -> xxx.yyy.1.12:1433 SYN ******S* Aug 24 04:33:17 222.182.216.227:3102 -> xxx.yyy.1.16:1433 SYN ******S* Aug 24 04:33:20 222.182.216.227:3062 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 04:33:17 222.182.216.227:3112 -> xxx.yyy.1.20:1433 SYN ******S* Aug 24 04:33:20 222.182.216.227:3066 -> xxx.yyy.1.3:1433 SYN ******S* [...] Aug 24 06:52:27 222.182.216.227:4013 -> xxx.yyy.255.196:1433 SYN ******S* Aug 24 06:52:27 222.182.216.227:3612 -> xxx.yyy.255.195:1433 SYN ******S* Aug 24 06:52:27 222.182.216.227:4144 -> xxx.yyy.255.197:1433 SYN ******S* Aug 24 06:52:27 222.182.216.227:4620 -> xxx.yyy.255.198:1433 SYN ******S* Aug 24 06:52:27 222.182.216.227:4216 -> xxx.yyy.255.203:1433 SYN ******S* Aug 24 06:52:27 222.182.216.227:2740 -> xxx.yyy.255.205:1433 SYN ******S* Aug 24 06:52:28 222.182.216.227:4202 -> xxx.yyy.255.221:1433 SYN ******S* Aug 24 06:52:28 222.182.216.227:1704 -> xxx.yyy.255.227:1433 SYN ******S* Aug 24 06:52:29 222.182.216.227:1315 -> xxx.yyy.255.241:1433 SYN ******S* 32991 Aug 24 03:12:33 221.12.122.153:4718 -> xxx.yyy.1.0:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4720 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4721 -> xxx.yyy.1.2:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4722 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4723 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4724 -> xxx.yyy.1.5:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4725 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 03:12:33 221.12.122.153:4726 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 24 04:33:34 221.12.122.153:3646 -> xxx.yyy.91.47:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3648 -> xxx.yyy.91.48:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3651 -> xxx.yyy.91.51:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3650 -> xxx.yyy.91.50:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3649 -> xxx.yyy.91.49:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3652 -> xxx.yyy.91.52:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3654 -> xxx.yyy.91.53:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3658 -> xxx.yyy.91.55:1433 SYN ******S* Aug 24 04:33:34 221.12.122.153:3657 -> xxx.yyy.91.54:1433 SYN ******S* 27612 Aug 24 09:22:46 211.141.95.18:14234 -> xxx.yyy.1.0:1433 SYN ******S* Aug 24 09:22:46 211.141.95.18:14243 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 09:22:46 211.141.95.18:14247 -> xxx.yyy.1.2:1433 SYN ******S* Aug 24 09:22:47 211.141.95.18:14255 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 09:22:47 211.141.95.18:14263 -> xxx.yyy.1.5:1433 SYN ******S* Aug 24 09:22:47 211.141.95.18:14278 -> xxx.yyy.1.7:1433 SYN ******S* Aug 24 09:22:50 211.141.95.18:14286 -> xxx.yyy.1.8:1433 SYN ******S* Aug 24 09:22:50 211.141.95.18:14306 -> xxx.yyy.1.9:1433 SYN ******S* [...] Aug 24 11:20:17 211.141.95.18:7852 -> xxx.yyy.131.189:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:7849 -> xxx.yyy.131.188:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:8938 -> xxx.yyy.131.245:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:7889 -> xxx.yyy.131.190:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:8983 -> xxx.yyy.131.246:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:7894 -> xxx.yyy.131.192:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:7890 -> xxx.yyy.131.191:1433 SYN ******S* Aug 24 11:20:17 211.141.95.18:8989 -> xxx.yyy.131.247:1433 SYN ******S* Aug 24 11:20:18 211.141.95.18:7948 -> xxx.yyy.131.194:1433 SYN ******S* 27173 Aug 24 22:28:54 81.44.202.196:4133 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 22:28:54 81.44.202.196:4134 -> xxx.yyy.1.2:1433 SYN ******S* Aug 24 22:28:54 81.44.202.196:4135 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 22:28:54 81.44.202.196:4136 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 22:28:54 81.44.202.196:4138 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 22:28:54 81.44.202.196:4140 -> xxx.yyy.1.8:1433 SYN ******S* Aug 24 22:28:54 81.44.202.196:4142 -> xxx.yyy.1.9:1433 SYN ******S* Aug 24 22:28:51 81.44.202.196:4143 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 24 23:54:07 81.44.202.196:4157 -> xxx.yyy.95.245:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4165 -> xxx.yyy.95.249:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4170 -> xxx.yyy.95.254:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4169 -> xxx.yyy.95.253:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4168 -> xxx.yyy.95.252:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4167 -> xxx.yyy.95.251:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4166 -> xxx.yyy.95.250:1433 SYN ******S* Aug 24 23:54:07 81.44.202.196:4189 -> xxx.yyy.95.255:1433 SYN ******S* 24718 Aug 24 12:29:45 202.211.121.55:1964 -> xxx.yyy.1.0:1433 SYN ******S* Aug 24 12:29:42 202.211.121.55:1967 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 12:29:45 202.211.121.55:1972 -> xxx.yyy.1.2:1433 SYN ******S* Aug 24 12:29:45 202.211.121.55:1983 -> xxx.yyy.1.5:1433 SYN ******S* Aug 24 12:29:42 202.211.121.55:1988 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 12:29:45 202.211.121.55:1992 -> xxx.yyy.1.7:1433 SYN ******S* Aug 24 12:29:45 202.211.121.55:2000 -> xxx.yyy.1.9:1433 SYN ******S* Aug 24 12:29:45 202.211.121.55:2005 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 24 13:54:58 202.211.121.55:3601 -> xxx.yyy.95.238:1433 SYN ******S* Aug 24 13:54:58 202.211.121.55:3622 -> xxx.yyy.95.242:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3640 -> xxx.yyy.95.246:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3650 -> xxx.yyy.95.248:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3669 -> xxx.yyy.95.251:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3676 -> xxx.yyy.95.253:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3681 -> xxx.yyy.95.255:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3679 -> xxx.yyy.95.254:1433 SYN ******S* Aug 24 13:54:59 202.211.121.55:3675 -> xxx.yyy.95.252:1433 SYN ******S* 21183 Aug 24 23:31:56 222.47.80.210:4756 -> xxx.yyy.64.0:1433 SYN ******S* Aug 24 23:31:56 222.47.80.210:4767 -> xxx.yyy.64.1:1433 SYN ******S* Aug 24 23:31:56 222.47.80.210:4769 -> xxx.yyy.64.2:1433 SYN ******S* Aug 24 23:31:56 222.47.80.210:4771 -> xxx.yyy.64.3:1433 SYN ******S* Aug 24 23:31:56 222.47.80.210:4789 -> xxx.yyy.64.4:1433 SYN ******S* Aug 24 23:31:56 222.47.80.210:4795 -> xxx.yyy.64.5:1433 SYN ******S* Aug 24 23:31:57 222.47.80.210:4797 -> xxx.yyy.64.6:1433 SYN ******S* Aug 24 23:31:57 222.47.80.210:4846 -> xxx.yyy.64.7:1433 SYN ******S* [...] Aug 24 23:59:58 222.47.80.210:4546 -> xxx.yyy.94.188:1433 SYN ******S* Aug 24 23:59:59 222.47.80.210:4582 -> xxx.yyy.94.191:1433 SYN ******S* Aug 24 23:59:59 222.47.80.210:4590 -> xxx.yyy.94.192:1433 SYN ******S* Aug 24 23:59:59 222.47.80.210:4596 -> xxx.yyy.94.193:1433 SYN ******S* Aug 24 23:59:59 222.47.80.210:4388 -> xxx.yyy.94.176:1433 SYN ******S* Aug 25 00:00:00 222.47.80.210:4636 -> xxx.yyy.94.196:1433 SYN ******S* Aug 25 00:00:00 222.47.80.210:4643 -> xxx.yyy.94.197:1433 SYN ******S* Aug 25 00:00:00 222.47.80.210:4656 -> xxx.yyy.94.199:1433 SYN ******S* 12528 Aug 24 23:54:38 218.224.173.127:3004 -> xxx.yyy.235.112:5554 SYN ******S* Aug 24 23:54:38 218.224.173.127:3006 -> xxx.yyy.235.115:5554 SYN ******S* Aug 24 23:54:39 218.224.173.127:3537 -> xxx.yyy.235.115:1023 SYN ******S* Aug 24 23:54:38 218.224.173.127:3009 -> xxx.yyy.235.118:5554 SYN ******S* Aug 24 23:54:41 218.224.173.127:1080 -> xxx.yyy.235.118:9898 SYN ******S* Aug 24 23:54:38 218.224.173.127:3012 -> xxx.yyy.235.120:5554 SYN ******S* Aug 24 23:54:41 218.224.173.127:1087 -> xxx.yyy.235.120:9898 SYN ******S* Aug 24 23:54:38 218.224.173.127:3016 -> xxx.yyy.235.123:5554 SYN ******S* [...] Aug 24 23:55:23 218.224.173.127:1416 -> xxx.yyy.255.224:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1424 -> xxx.yyy.255.225:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1442 -> xxx.yyy.255.226:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1451 -> xxx.yyy.255.229:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1458 -> xxx.yyy.255.228:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1460 -> xxx.yyy.255.230:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1473 -> xxx.yyy.255.231:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1468 -> xxx.yyy.255.232:9898 SYN ******S* Aug 24 23:55:23 218.224.173.127:1481 -> xxx.yyy.255.233:9898 SYN ******S* 9360 Aug 24 00:00:37 221.148.209.99:4697 -> xxx.yyy.194.126:5554 SYN ******S* Aug 24 00:00:38 221.148.209.99:1173 -> xxx.yyy.194.126:1023 SYN ******S* Aug 24 00:00:40 221.148.209.99:2075 -> xxx.yyy.194.126:9898 SYN ******S* Aug 24 00:00:37 221.148.209.99:4705 -> xxx.yyy.194.134:5554 SYN ******S* Aug 24 00:00:38 221.148.209.99:1181 -> xxx.yyy.194.134:1023 SYN ******S* Aug 24 00:00:40 221.148.209.99:2083 -> xxx.yyy.194.134:9898 SYN ******S* Aug 24 00:00:37 221.148.209.99:4707 -> xxx.yyy.194.136:5554 SYN ******S* Aug 24 00:00:38 221.148.209.99:1183 -> xxx.yyy.194.136:1023 SYN ******S* [...] Aug 24 00:01:18 221.148.209.99:2722 -> xxx.yyy.214.224:1023 SYN ******S* Aug 24 00:01:20 221.148.209.99:3616 -> xxx.yyy.214.224:9898 SYN ******S* Aug 24 00:01:18 221.148.209.99:2723 -> xxx.yyy.214.225:1023 SYN ******S* Aug 24 00:01:20 221.148.209.99:3617 -> xxx.yyy.214.225:9898 SYN ******S* Aug 24 00:01:18 221.148.209.99:2728 -> xxx.yyy.214.230:1023 SYN ******S* Aug 24 00:01:20 221.148.209.99:3622 -> xxx.yyy.214.230:9898 SYN ******S* Aug 24 00:01:20 221.148.209.99:3626 -> xxx.yyy.214.234:9898 SYN ******S* Aug 24 00:01:20 221.148.209.99:3609 -> xxx.yyy.214.217:9898 SYN ******S* 9284 Aug 24 23:34:02 207.177.38.199:50841 -> xxx.yyy.77.126:264 SYN ******S* Aug 24 23:34:02 207.177.38.199:50842 -> xxx.yyy.77.126:317 SYN ******S* Aug 24 23:34:05 207.177.38.199:50843 -> xxx.yyy.77.126:73 SYN ******S* Aug 24 23:34:05 207.177.38.199:50844 -> xxx.yyy.77.126:2111 SYN ******S* Aug 24 23:34:05 207.177.38.199:50845 -> xxx.yyy.77.126:1059 SYN ******S* Aug 24 23:34:05 207.177.38.199:50848 -> xxx.yyy.77.126:175 SYN ******S* Aug 24 23:34:05 207.177.38.199:50849 -> xxx.yyy.77.126:637 SYN ******S* Aug 24 23:34:05 207.177.38.199:50850 -> xxx.yyy.77.126:1021 SYN ******S* [...] Aug 25 00:00:00 207.177.38.199:56493 -> xxx.yyy.77.126:286 SYN ******S* Aug 25 00:00:00 207.177.38.199:56492 -> xxx.yyy.77.126:777 SYN ******S* Aug 25 00:00:00 207.177.38.199:56491 -> xxx.yyy.77.126:93 SYN ******S* Aug 25 00:00:00 207.177.38.199:56550 -> xxx.yyy.77.126:543 SYN ******S* Aug 25 00:00:00 207.177.38.199:56551 -> xxx.yyy.77.126:761 SYN ******S* Aug 25 00:00:00 207.177.38.199:56552 -> xxx.yyy.77.126:1083 SYN ******S* Aug 25 00:00:00 207.177.38.199:56553 -> xxx.yyy.77.126:134 SYN ******S* Aug 25 00:00:00 207.177.38.199:56554 -> xxx.yyy.77.126:1508 SYN ******S* Aug 25 00:00:00 207.177.38.199:56555 -> xxx.yyy.77.126:270 SYN ******S* 8960 Aug 24 23:00:37 218.189.152.125:63553 -> xxx.yyy.1.0:1433 SYN ******S* Aug 24 23:00:37 218.189.152.125:63814 -> xxx.yyy.1.1:1433 SYN ******S* Aug 24 23:00:34 218.189.152.125:62225 -> xxx.yyy.1.3:1433 SYN ******S* Aug 24 23:00:34 218.189.152.125:61626 -> xxx.yyy.1.4:1433 SYN ******S* Aug 24 23:00:34 218.189.152.125:62907 -> xxx.yyy.1.5:1433 SYN ******S* Aug 24 23:00:37 218.189.152.125:63564 -> xxx.yyy.1.6:1433 SYN ******S* Aug 24 23:00:35 218.189.152.125:61844 -> xxx.yyy.1.10:1433 SYN ******S* Aug 24 23:00:35 218.189.152.125:64551 -> xxx.yyy.1.11:1433 SYN ******S* [...] Aug 25 00:00:00 218.189.152.125:62181 -> xxx.yyy.67.44:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:62488 -> xxx.yyy.67.43:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:63801 -> xxx.yyy.67.51:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:63162 -> xxx.yyy.67.50:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:64040 -> xxx.yyy.67.52:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:65313 -> xxx.yyy.67.53:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:64626 -> xxx.yyy.67.48:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:61454 -> xxx.yyy.67.49:1433 SYN ******S* Aug 25 00:00:00 218.189.152.125:63794 -> xxx.yyy.67.47:1433 SYN ******S* 8167 Aug 24 00:56:33 221.202.16.201:3528 -> xxx.yyy.236.78:5554 SYN ******S* Aug 24 00:56:36 221.202.16.201:1724 -> xxx.yyy.236.78:9898 SYN ******S* Aug 24 00:56:33 221.202.16.201:3524 -> xxx.yyy.236.77:5554 SYN ******S* Aug 24 00:56:36 221.202.16.201:1722 -> xxx.yyy.236.77:9898 SYN ******S* Aug 24 00:56:33 221.202.16.201:3529 -> xxx.yyy.236.79:5554 SYN ******S* Aug 24 00:56:34 221.202.16.201:4097 -> xxx.yyy.236.79:1023 SYN ******S* Aug 24 00:56:36 221.202.16.201:1725 -> xxx.yyy.236.79:9898 SYN ******S* Aug 24 00:56:33 221.202.16.201:3526 -> xxx.yyy.236.76:5554 SYN ******S* [...] Aug 24 00:57:19 221.202.16.201:3840 -> xxx.yyy.237.246:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3843 -> xxx.yyy.237.251:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3849 -> xxx.yyy.238.2:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3858 -> xxx.yyy.238.10:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3860 -> xxx.yyy.237.255:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3859 -> xxx.yyy.238.12:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3865 -> xxx.yyy.238.1:9898 SYN ******S* Aug 24 00:57:19 221.202.16.201:3869 -> xxx.yyy.238.13:9898 SYN ******S* 7054 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions