[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Aug 25 00:00:07 218.189.152.125:65343 -> xxx.yyy.67.59:1433 SYN ******S* Aug 25 00:00:04 218.189.152.125:63082 -> xxx.yyy.67.60:1433 SYN ******S* Aug 25 00:00:05 218.189.152.125:64254 -> xxx.yyy.67.63:1433 SYN ******S* Aug 25 00:00:08 218.189.152.125:63877 -> xxx.yyy.67.64:1433 SYN ******S* Aug 25 00:00:08 218.189.152.125:65308 -> xxx.yyy.67.65:1433 SYN ******S* Aug 25 00:00:08 218.189.152.125:65443 -> xxx.yyy.67.67:1433 SYN ******S* Aug 25 00:00:08 218.189.152.125:61986 -> xxx.yyy.67.68:1433 SYN ******S* Aug 25 00:00:08 218.189.152.125:63724 -> xxx.yyy.67.69:1433 SYN ******S* [...] Aug 25 02:49:18 218.189.152.125:64789 -> xxx.yyy.255.246:1433 SYN ******S* Aug 25 02:49:18 218.189.152.125:62864 -> xxx.yyy.255.247:1433 SYN ******S* Aug 25 02:49:18 218.189.152.125:64667 -> xxx.yyy.255.248:1433 SYN ******S* Aug 25 02:49:18 218.189.152.125:63992 -> xxx.yyy.255.250:1433 SYN ******S* Aug 25 02:49:18 218.189.152.125:64734 -> xxx.yyy.255.251:1433 SYN ******S* Aug 25 02:49:19 218.189.152.125:63114 -> xxx.yyy.255.252:1433 SYN ******S* Aug 25 02:49:19 218.189.152.125:61754 -> xxx.yyy.255.253:1433 SYN ******S* Aug 25 02:49:19 218.189.152.125:62683 -> xxx.yyy.255.254:1433 SYN ******S* 101237 Aug 25 00:01:19 81.44.202.196:1970 -> xxx.yyy.104.0:1433 SYN ******S* Aug 25 00:01:16 81.44.202.196:1973 -> xxx.yyy.104.1:1433 SYN ******S* Aug 25 00:01:16 81.44.202.196:1974 -> xxx.yyy.104.2:1433 SYN ******S* Aug 25 00:01:16 81.44.202.196:1980 -> xxx.yyy.104.4:1433 SYN ******S* Aug 25 00:01:16 81.44.202.196:1981 -> xxx.yyy.104.5:1433 SYN ******S* Aug 25 00:01:16 81.44.202.196:1986 -> xxx.yyy.104.6:1433 SYN ******S* Aug 25 00:01:17 81.44.202.196:1991 -> xxx.yyy.104.8:1433 SYN ******S* Aug 25 00:01:17 81.44.202.196:1995 -> xxx.yyy.104.9:1433 SYN ******S* [...] Aug 25 02:17:37 81.44.202.196:1144 -> xxx.yyy.255.246:1433 SYN ******S* Aug 25 02:17:37 81.44.202.196:1150 -> xxx.yyy.255.247:1433 SYN ******S* Aug 25 02:17:37 81.44.202.196:1152 -> xxx.yyy.255.248:1433 SYN ******S* Aug 25 02:17:37 81.44.202.196:1155 -> xxx.yyy.255.249:1433 SYN ******S* Aug 25 02:17:37 81.44.202.196:1158 -> xxx.yyy.255.250:1433 SYN ******S* Aug 25 02:17:37 81.44.202.196:1160 -> xxx.yyy.255.251:1433 SYN ******S* Aug 25 02:17:37 81.44.202.196:1164 -> xxx.yyy.255.253:1433 SYN ******S* Aug 25 02:17:38 81.44.202.196:1163 -> xxx.yyy.255.252:1433 SYN ******S* Aug 25 02:17:38 81.44.202.196:1165 -> xxx.yyy.255.254:1433 SYN ******S* 87500 Aug 25 07:01:08 66.251.57.67:3175 -> xxx.yyy.1.1:1433 SYN ******S* Aug 25 07:01:08 66.251.57.67:3176 -> xxx.yyy.1.2:1433 SYN ******S* Aug 25 07:01:08 66.251.57.67:3177 -> xxx.yyy.1.3:1433 SYN ******S* Aug 25 07:01:08 66.251.57.67:3178 -> xxx.yyy.1.4:1433 SYN ******S* Aug 25 07:01:08 66.251.57.67:3179 -> xxx.yyy.1.5:1433 SYN ******S* Aug 25 07:01:08 66.251.57.67:3180 -> xxx.yyy.1.6:1433 SYN ******S* Aug 25 07:01:08 66.251.57.67:3181 -> xxx.yyy.1.7:1433 SYN ******S* Aug 25 07:01:06 66.251.57.67:3183 -> xxx.yyy.1.9:1433 SYN ******S* [...] Aug 25 07:12:01 66.251.57.67:3241 -> xxx.yyy.255.218:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3238 -> xxx.yyy.255.215:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3242 -> xxx.yyy.255.219:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3237 -> xxx.yyy.255.214:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3236 -> xxx.yyy.255.213:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3243 -> xxx.yyy.255.220:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3240 -> xxx.yyy.255.217:1433 SYN ******S* Aug 25 07:12:01 66.251.57.67:3260 -> xxx.yyy.255.237:1433 SYN ******S* 72205 Aug 25 12:28:34 80.181.236.129:3479 -> xxx.yyy.1.0:1433 SYN ******S* Aug 25 12:28:34 80.181.236.129:3481 -> xxx.yyy.1.1:1433 SYN ******S* Aug 25 12:28:34 80.181.236.129:3488 -> xxx.yyy.1.8:1433 SYN ******S* Aug 25 12:28:37 80.181.236.129:3490 -> xxx.yyy.1.9:1433 SYN ******S* Aug 25 12:28:34 80.181.236.129:3491 -> xxx.yyy.1.10:1433 SYN ******S* Aug 25 12:28:37 80.181.236.129:3492 -> xxx.yyy.1.11:1433 SYN ******S* Aug 25 12:28:34 80.181.236.129:3495 -> xxx.yyy.1.13:1433 SYN ******S* Aug 25 12:28:34 80.181.236.129:3500 -> xxx.yyy.1.18:1433 SYN ******S* [...] Aug 25 16:15:05 80.181.236.129:1764 -> xxx.yyy.253.80:1433 SYN ******S* Aug 25 16:15:05 80.181.236.129:1769 -> xxx.yyy.253.82:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1739 -> xxx.yyy.253.61:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1741 -> xxx.yyy.253.63:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1771 -> xxx.yyy.253.84:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1772 -> xxx.yyy.253.85:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1692 -> xxx.yyy.253.38:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1778 -> xxx.yyy.253.86:1433 SYN ******S* Aug 25 16:15:06 80.181.236.129:1781 -> xxx.yyy.253.87:1433 SYN ******S* 72144 Aug 25 00:36:02 211.181.185.52:1494 -> xxx.yyy.1.1:3389 SYN ******S* Aug 25 00:36:02 211.181.185.52:1495 -> xxx.yyy.1.2:3389 SYN ******S* Aug 25 00:36:02 211.181.185.52:1496 -> xxx.yyy.1.3:3389 SYN ******S* Aug 25 00:36:00 211.181.185.52:1497 -> xxx.yyy.1.4:3389 SYN ******S* Aug 25 00:36:00 211.181.185.52:1498 -> xxx.yyy.1.5:3389 SYN ******S* Aug 25 00:36:00 211.181.185.52:1499 -> xxx.yyy.1.6:3389 SYN ******S* Aug 25 00:36:00 211.181.185.52:1500 -> xxx.yyy.1.7:3389 SYN ******S* Aug 25 00:36:00 211.181.185.52:1501 -> xxx.yyy.1.8:3389 SYN ******S* [...] Aug 25 01:09:56 211.181.185.52:2072 -> xxx.yyy.255.244:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2078 -> xxx.yyy.255.250:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2076 -> xxx.yyy.255.248:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2077 -> xxx.yyy.255.249:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2079 -> xxx.yyy.255.251:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2081 -> xxx.yyy.255.253:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2082 -> xxx.yyy.255.254:3389 SYN ******S* Aug 25 01:09:56 211.181.185.52:2080 -> xxx.yyy.255.252:3389 SYN ******S* 71229 Aug 25 04:35:08 213.166.140.66:56475 -> xxx.yyy.1.1:1433 SYN ******S* Aug 25 04:35:08 213.166.140.66:56476 -> xxx.yyy.1.2:1433 SYN ******S* Aug 25 04:35:08 213.166.140.66:56477 -> xxx.yyy.1.3:1433 SYN ******S* Aug 25 04:35:05 213.166.140.66:56478 -> xxx.yyy.1.4:1433 SYN ******S* Aug 25 04:35:08 213.166.140.66:56479 -> xxx.yyy.1.5:1433 SYN ******S* Aug 25 04:35:08 213.166.140.66:56480 -> xxx.yyy.1.6:1433 SYN ******S* Aug 25 04:35:08 213.166.140.66:56481 -> xxx.yyy.1.7:1433 SYN ******S* Aug 25 04:35:08 213.166.140.66:56482 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 25 04:46:47 213.166.140.66:59374 -> xxx.yyy.255.244:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59375 -> xxx.yyy.255.245:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59376 -> xxx.yyy.255.246:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59377 -> xxx.yyy.255.247:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59378 -> xxx.yyy.255.248:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59379 -> xxx.yyy.255.249:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59380 -> xxx.yyy.255.250:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59383 -> xxx.yyy.255.253:1433 SYN ******S* Aug 25 04:46:47 213.166.140.66:59384 -> xxx.yyy.255.254:1433 SYN ******S* 71113 Aug 25 12:15:29 217.160.166.10:2218 -> xxx.yyy.1.0:21 SYN ******S* Aug 25 12:15:29 217.160.166.10:2228 -> xxx.yyy.1.1:21 SYN ******S* Aug 25 12:15:29 217.160.166.10:2239 -> xxx.yyy.1.2:21 SYN ******S* Aug 25 12:15:26 217.160.166.10:2255 -> xxx.yyy.1.4:21 SYN ******S* Aug 25 12:15:26 217.160.166.10:2278 -> xxx.yyy.1.6:21 SYN ******S* Aug 25 12:15:29 217.160.166.10:2315 -> xxx.yyy.1.10:21 SYN ******S* Aug 25 12:15:29 217.160.166.10:2324 -> xxx.yyy.1.11:21 SYN ******S* Aug 25 12:15:29 217.160.166.10:2358 -> xxx.yyy.1.14:21 SYN ******S* [...] Aug 25 12:33:40 217.160.166.10:2316 -> xxx.yyy.255.240:21 SYN ******S* Aug 25 12:33:40 217.160.166.10:2362 -> xxx.yyy.255.242:21 SYN ******S* Aug 25 12:33:40 217.160.166.10:2282 -> xxx.yyy.255.238:21 SYN ******S* Aug 25 12:33:41 217.160.166.10:2550 -> xxx.yyy.255.252:21 SYN ******S* Aug 25 12:33:41 217.160.166.10:2490 -> xxx.yyy.255.249:21 SYN ******S* Aug 25 12:33:41 217.160.166.10:2531 -> xxx.yyy.255.251:21 SYN ******S* Aug 25 12:33:41 217.160.166.10:2575 -> xxx.yyy.255.253:21 SYN ******S* Aug 25 12:33:41 217.160.166.10:2596 -> xxx.yyy.255.254:21 SYN ******S* 66006 Aug 25 00:00:04 222.47.80.210:4270 -> xxx.yyy.94.171:1433 SYN ******S* Aug 25 00:00:07 222.47.80.210:3022 -> xxx.yyy.94.231:1433 SYN ******S* Aug 25 00:00:07 222.47.80.210:3024 -> xxx.yyy.94.232:1433 SYN ******S* Aug 25 00:00:07 222.47.80.210:3031 -> xxx.yyy.94.233:1433 SYN ******S* Aug 25 00:00:04 222.47.80.210:4324 -> xxx.yyy.94.175:1433 SYN ******S* Aug 25 00:00:05 222.47.80.210:4780 -> xxx.yyy.94.213:1433 SYN ******S* Aug 25 00:00:05 222.47.80.210:4773 -> xxx.yyy.94.212:1433 SYN ******S* Aug 25 00:00:05 222.47.80.210:3053 -> xxx.yyy.94.238:1433 SYN ******S* [...] Aug 25 01:32:32 222.47.80.210:3099 -> xxx.yyy.197.136:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:3054 -> xxx.yyy.197.124:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:4979 -> xxx.yyy.197.98:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:4969 -> xxx.yyy.197.97:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:3105 -> xxx.yyy.197.137:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:3057 -> xxx.yyy.197.125:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:3106 -> xxx.yyy.197.138:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:4991 -> xxx.yyy.197.99:1433 SYN ******S* Aug 25 01:32:32 222.47.80.210:4995 -> xxx.yyy.197.100:1433 SYN ******S* 47691 Aug 25 22:31:52 220.127.199.72:4204 -> xxx.yyy.1.2:20168 SYN ******S* Aug 25 22:31:52 220.127.199.72:4203 -> xxx.yyy.1.1:20168 SYN ******S* Aug 25 22:31:54 220.127.199.72:4206 -> xxx.yyy.1.4:20168 SYN ******S* Aug 25 22:31:54 220.127.199.72:4208 -> xxx.yyy.1.6:20168 SYN ******S* Aug 25 22:31:51 220.127.199.72:4207 -> xxx.yyy.1.5:20168 SYN ******S* Aug 25 22:31:54 220.127.199.72:4209 -> xxx.yyy.1.7:20168 SYN ******S* Aug 25 22:31:52 220.127.199.72:4213 -> xxx.yyy.1.11:20168 SYN ******S* Aug 25 22:31:54 220.127.199.72:4214 -> xxx.yyy.1.12:20168 SYN ******S* [...] Aug 25 22:43:41 220.127.199.72:3415 -> xxx.yyy.255.241:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3409 -> xxx.yyy.255.235:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3413 -> xxx.yyy.255.239:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3420 -> xxx.yyy.255.246:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3421 -> xxx.yyy.255.247:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3417 -> xxx.yyy.255.243:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3419 -> xxx.yyy.255.245:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3428 -> xxx.yyy.255.252:20168 SYN ******S* Aug 25 22:43:41 220.127.199.72:3429 -> xxx.yyy.255.253:20168 SYN ******S* 44561 Aug 25 14:23:51 218.21.226.154:3672 -> xxx.yyy.1.3:548 SYN ******S* Aug 25 14:23:50 218.21.226.154:3673 -> xxx.yyy.1.4:548 SYN ******S* Aug 25 14:23:50 218.21.226.154:3674 -> xxx.yyy.1.5:548 SYN ******S* Aug 25 14:23:50 218.21.226.154:3675 -> xxx.yyy.1.6:548 SYN ******S* Aug 25 14:23:50 218.21.226.154:3677 -> xxx.yyy.1.8:548 SYN ******S* Aug 25 14:23:50 218.21.226.154:3678 -> xxx.yyy.1.9:548 SYN ******S* Aug 25 14:23:50 218.21.226.154:3682 -> xxx.yyy.1.13:548 SYN ******S* Aug 25 14:23:52 218.21.226.154:3686 -> xxx.yyy.1.17:548 SYN ******S* [...] Aug 25 14:36:57 218.21.226.154:4034 -> xxx.yyy.255.205:548 SYN ******S* Aug 25 14:36:57 218.21.226.154:4050 -> xxx.yyy.255.221:548 SYN ******S* Aug 25 14:36:57 218.21.226.154:4056 -> xxx.yyy.255.227:548 SYN ******S* Aug 25 14:36:58 218.21.226.154:4073 -> xxx.yyy.255.244:548 SYN ******S* Aug 25 14:36:58 218.21.226.154:4070 -> xxx.yyy.255.241:548 SYN ******S* Aug 25 14:36:58 218.21.226.154:4071 -> xxx.yyy.255.242:548 SYN ******S* Aug 25 14:36:58 218.21.226.154:4072 -> xxx.yyy.255.243:548 SYN ******S* Aug 25 14:36:58 218.21.226.154:4083 -> xxx.yyy.255.254:548 SYN ******S* Aug 25 14:36:58 218.21.226.154:4081 -> xxx.yyy.255.252:548 SYN ******S* 42645 Aug 25 04:07:50 194.66.52.20:2383 -> xxx.yyy.1.1:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2427 -> xxx.yyy.1.4:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2428 -> xxx.yyy.1.5:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2479 -> xxx.yyy.1.6:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2487 -> xxx.yyy.1.7:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2492 -> xxx.yyy.1.8:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2497 -> xxx.yyy.1.9:1433 SYN ******S* Aug 25 04:07:50 194.66.52.20:2501 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 25 04:13:18 194.66.52.20:1039 -> xxx.yyy.253.36:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:1417 -> xxx.yyy.253.69:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:3083 -> xxx.yyy.254.33:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:3345 -> xxx.yyy.254.86:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:3346 -> xxx.yyy.254.87:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:4247 -> xxx.yyy.255.11:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:4267 -> xxx.yyy.255.14:1433 SYN ******S* Aug 25 04:13:18 194.66.52.20:4121 -> xxx.yyy.254.247:1433 SYN ******S* 40978 Aug 25 16:44:38 64.230.47.204:4386 -> xxx.yyy.32.0:1433 SYN ******S* Aug 25 16:44:38 64.230.47.204:4393 -> xxx.yyy.32.2:1433 SYN ******S* Aug 25 16:44:39 64.230.47.204:4397 -> xxx.yyy.32.3:1433 SYN ******S* Aug 25 16:44:41 64.230.47.204:4399 -> xxx.yyy.32.4:1433 SYN ******S* Aug 25 16:44:41 64.230.47.204:4402 -> xxx.yyy.32.5:1433 SYN ******S* Aug 25 16:44:42 64.230.47.204:4422 -> xxx.yyy.32.12:1433 SYN ******S* Aug 25 16:44:42 64.230.47.204:4424 -> xxx.yyy.32.13:1433 SYN ******S* Aug 25 16:44:42 64.230.47.204:4436 -> xxx.yyy.32.16:1433 SYN ******S* [...] Aug 25 18:27:46 64.230.47.204:3216 -> xxx.yyy.146.230:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:4974 -> xxx.yyy.146.173:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:4978 -> xxx.yyy.146.174:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:4983 -> xxx.yyy.146.175:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:4992 -> xxx.yyy.146.176:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:3005 -> xxx.yyy.146.178:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:3004 -> xxx.yyy.146.177:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:3239 -> xxx.yyy.146.239:1433 SYN ******S* Aug 25 18:27:46 64.230.47.204:3018 -> xxx.yyy.146.180:1433 SYN ******S* 29804 [...] 26561 Aug 25 20:42:39 65.92.120.171:3681 -> xxx.yyy.1.2:4899 SYN ******S* Aug 25 20:42:40 65.92.120.171:3682 -> xxx.yyy.1.3:4899 SYN ******S* Aug 25 20:42:39 65.92.120.171:3683 -> xxx.yyy.1.4:4899 SYN ******S* Aug 25 20:42:39 65.92.120.171:3684 -> xxx.yyy.1.5:4899 SYN ******S* Aug 25 20:42:39 65.92.120.171:3687 -> xxx.yyy.1.8:4899 SYN ******S* Aug 25 20:42:39 65.92.120.171:3689 -> xxx.yyy.1.10:4899 SYN ******S* Aug 25 20:42:39 65.92.120.171:3690 -> xxx.yyy.1.11:4899 SYN ******S* Aug 25 20:42:39 65.92.120.171:3691 -> xxx.yyy.1.12:4899 SYN ******S* [...] Aug 25 20:46:22 65.92.120.171:1430 -> xxx.yyy.254.194:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1437 -> xxx.yyy.254.201:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1432 -> xxx.yyy.254.196:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1435 -> xxx.yyy.254.199:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1438 -> xxx.yyy.254.202:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1428 -> xxx.yyy.254.192:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1426 -> xxx.yyy.254.190:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1436 -> xxx.yyy.254.200:4899 SYN ******S* Aug 25 20:46:22 65.92.120.171:1439 -> xxx.yyy.254.203:4899 SYN ******S* 23753 Aug 25 10:07:38 218.34.181.116:3398 -> xxx.yyy.10.0:1433 SYN ******S* Aug 25 10:07:38 218.34.181.116:3399 -> xxx.yyy.10.1:1433 SYN ******S* Aug 25 10:07:35 218.34.181.116:3401 -> xxx.yyy.10.3:1433 SYN ******S* Aug 25 10:07:38 218.34.181.116:3403 -> xxx.yyy.10.5:1433 SYN ******S* Aug 25 10:07:38 218.34.181.116:3404 -> xxx.yyy.10.6:1433 SYN ******S* Aug 25 10:07:38 218.34.181.116:3405 -> xxx.yyy.10.7:1433 SYN ******S* Aug 25 10:07:35 218.34.181.116:3406 -> xxx.yyy.10.8:1433 SYN ******S* Aug 25 10:07:38 218.34.181.116:3407 -> xxx.yyy.10.9:1433 SYN ******S* [...] Aug 25 11:39:08 218.34.181.116:4337 -> xxx.yyy.111.244:1433 SYN ******S* Aug 25 11:39:08 218.34.181.116:4350 -> xxx.yyy.111.246:1433 SYN ******S* Aug 25 11:39:08 218.34.181.116:4349 -> xxx.yyy.111.245:1433 SYN ******S* Aug 25 11:39:09 218.34.181.116:4357 -> xxx.yyy.111.249:1433 SYN ******S* Aug 25 11:39:09 218.34.181.116:4356 -> xxx.yyy.111.248:1433 SYN ******S* Aug 25 11:39:09 218.34.181.116:4365 -> xxx.yyy.111.250:1433 SYN ******S* Aug 25 11:39:09 218.34.181.116:4371 -> xxx.yyy.111.253:1433 SYN ******S* Aug 25 11:39:09 218.34.181.116:4370 -> xxx.yyy.111.252:1433 SYN ******S* 23455 Aug 25 21:07:26 82.216.139.150:4285 -> xxx.yyy.1.2:1433 SYN ******S* Aug 25 21:07:30 82.216.139.150:4286 -> xxx.yyy.1.3:1433 SYN ******S* Aug 25 21:07:26 82.216.139.150:4288 -> xxx.yyy.1.5:1433 SYN ******S* Aug 25 21:07:30 82.216.139.150:4293 -> xxx.yyy.1.9:1433 SYN ******S* Aug 25 21:07:30 82.216.139.150:4294 -> xxx.yyy.1.10:1433 SYN ******S* Aug 25 21:07:27 82.216.139.150:4295 -> xxx.yyy.1.11:1433 SYN ******S* Aug 25 21:07:30 82.216.139.150:4297 -> xxx.yyy.1.13:1433 SYN ******S* Aug 25 21:07:27 82.216.139.150:4299 -> xxx.yyy.1.15:1433 SYN ******S* [...] Aug 25 22:49:15 82.216.139.150:3567 -> xxx.yyy.111.244:1433 SYN ******S* Aug 25 22:49:16 82.216.139.150:3570 -> xxx.yyy.111.245:1433 SYN ******S* Aug 25 22:49:17 82.216.139.150:3584 -> xxx.yyy.111.248:1433 SYN ******S* Aug 25 22:49:17 82.216.139.150:3585 -> xxx.yyy.111.249:1433 SYN ******S* Aug 25 22:49:17 82.216.139.150:3586 -> xxx.yyy.111.250:1433 SYN ******S* Aug 25 22:49:17 82.216.139.150:3592 -> xxx.yyy.111.251:1433 SYN ******S* Aug 25 22:49:18 82.216.139.150:3594 -> xxx.yyy.111.252:1433 SYN ******S* Aug 25 22:49:18 82.216.139.150:3602 -> xxx.yyy.111.253:1433 SYN ******S* 23253 Aug 25 15:16:55 61.253.98.139:4566 -> xxx.yyy.1.1:4899 SYN ******S* Aug 25 15:16:55 61.253.98.139:4567 -> xxx.yyy.1.2:4899 SYN ******S* Aug 25 15:16:53 61.253.98.139:4570 -> xxx.yyy.1.5:4899 SYN ******S* Aug 25 15:16:53 61.253.98.139:4569 -> xxx.yyy.1.4:4899 SYN ******S* Aug 25 15:16:53 61.253.98.139:4571 -> xxx.yyy.1.6:4899 SYN ******S* Aug 25 15:16:53 61.253.98.139:4573 -> xxx.yyy.1.8:4899 SYN ******S* Aug 25 15:16:53 61.253.98.139:4580 -> xxx.yyy.1.15:4899 SYN ******S* Aug 25 15:16:55 61.253.98.139:4579 -> xxx.yyy.1.14:4899 SYN ******S* [...] Aug 25 15:21:58 61.253.98.139:1658 -> xxx.yyy.255.230:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1665 -> xxx.yyy.255.236:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1679 -> xxx.yyy.255.246:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1682 -> xxx.yyy.255.249:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1676 -> xxx.yyy.255.245:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1683 -> xxx.yyy.255.250:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1685 -> xxx.yyy.255.252:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1686 -> xxx.yyy.255.253:4899 SYN ******S* Aug 25 15:21:58 61.253.98.139:1684 -> xxx.yyy.255.251:4899 SYN ******S* 23101 Aug 25 07:57:17 220.121.75.43:2788 -> xxx.yyy.215.210:5554 SYN ******S* Aug 25 07:57:18 220.121.75.43:3367 -> xxx.yyy.215.210:1023 SYN ******S* Aug 25 07:57:17 220.121.75.43:2807 -> xxx.yyy.215.213:5554 SYN ******S* Aug 25 07:57:18 220.121.75.43:3380 -> xxx.yyy.215.213:1023 SYN ******S* Aug 25 07:57:17 220.121.75.43:2801 -> xxx.yyy.215.211:5554 SYN ******S* Aug 25 07:57:18 220.121.75.43:3375 -> xxx.yyy.215.211:1023 SYN ******S* Aug 25 07:57:17 220.121.75.43:2804 -> xxx.yyy.215.212:5554 SYN ******S* Aug 25 07:57:18 220.121.75.43:3376 -> xxx.yyy.215.212:1023 SYN ******S* [...] Aug 25 07:58:05 220.121.75.43:3817 -> xxx.yyy.236.64:9898 SYN ******S* Aug 25 07:58:06 220.121.75.43:3824 -> xxx.yyy.236.65:9898 SYN ******S* Aug 25 07:58:05 220.121.75.43:3837 -> xxx.yyy.236.75:9898 SYN ******S* Aug 25 07:58:06 220.121.75.43:3826 -> xxx.yyy.236.69:9898 SYN ******S* Aug 25 07:58:06 220.121.75.43:3850 -> xxx.yyy.236.76:9898 SYN ******S* Aug 25 07:58:06 220.121.75.43:3839 -> xxx.yyy.236.70:9898 SYN ******S* Aug 25 07:58:06 220.121.75.43:3854 -> xxx.yyy.236.71:9898 SYN ******S* Aug 25 07:58:05 220.121.75.43:3867 -> xxx.yyy.236.73:9898 SYN ******S* Aug 25 07:58:05 220.121.75.43:3890 -> xxx.yyy.236.58:9898 SYN ******S* 13782 Aug 25 21:03:21 151.38.236.144:4613 -> xxx.yyy.1.1:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4614 -> xxx.yyy.1.2:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4615 -> xxx.yyy.1.3:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4612 -> xxx.yyy.1.0:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4617 -> xxx.yyy.1.5:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4618 -> xxx.yyy.1.6:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4619 -> xxx.yyy.1.7:1433 SYN ******S* Aug 25 21:03:21 151.38.236.144:4620 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 25 21:05:47 151.38.236.144:4642 -> xxx.yyy.140.185:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4639 -> xxx.yyy.140.182:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4643 -> xxx.yyy.140.186:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4644 -> xxx.yyy.140.187:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4641 -> xxx.yyy.140.184:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4645 -> xxx.yyy.140.188:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4646 -> xxx.yyy.140.189:1433 SYN ******S* Aug 25 21:05:47 151.38.236.144:4647 -> xxx.yyy.140.190:1433 SYN ******S* 11385 Aug 25 08:51:17 211.232.135.176:17977 -> xxx.yyy.10.141:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:17979 -> xxx.yyy.10.143:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:17989 -> xxx.yyy.10.153:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:17991 -> xxx.yyy.10.155:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:17985 -> xxx.yyy.10.149:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:17993 -> xxx.yyy.10.157:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:17999 -> xxx.yyy.10.163:6112 SYN ******S* Aug 25 08:51:17 211.232.135.176:18019 -> xxx.yyy.10.183:6112 SYN ******S* [...] Aug 25 08:54:26 211.232.135.176:18329 -> xxx.yyy.255.193:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18325 -> xxx.yyy.255.189:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18331 -> xxx.yyy.255.195:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18341 -> xxx.yyy.255.205:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18335 -> xxx.yyy.255.199:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18343 -> xxx.yyy.255.207:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18337 -> xxx.yyy.255.201:6112 SYN ******S* Aug 25 08:54:26 211.232.135.176:18339 -> xxx.yyy.255.203:6112 SYN ******S* 10790 Aug 25 01:33:19 222.47.90.171:3640 -> xxx.yyy.198.92:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3658 -> xxx.yyy.198.93:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3660 -> xxx.yyy.198.94:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3661 -> xxx.yyy.198.95:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3665 -> xxx.yyy.198.96:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3670 -> xxx.yyy.198.97:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3672 -> xxx.yyy.198.98:1433 SYN ******S* Aug 25 01:33:20 222.47.90.171:3673 -> xxx.yyy.198.99:1433 SYN ******S* [...] Aug 25 01:49:55 222.47.90.171:4499 -> xxx.yyy.214.49:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4830 -> xxx.yyy.214.74:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4836 -> xxx.yyy.214.75:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4838 -> xxx.yyy.214.76:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4841 -> xxx.yyy.214.77:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4507 -> xxx.yyy.214.51:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4509 -> xxx.yyy.214.52:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4512 -> xxx.yyy.214.54:1433 SYN ******S* Aug 25 01:49:55 222.47.90.171:4511 -> xxx.yyy.214.53:1433 SYN ******S* 10537 Aug 25 23:52:59 168.126.86.238:3642 -> xxx.yyy.133.234:5554 SYN ******S* Aug 25 23:53:00 168.126.86.238:3802 -> xxx.yyy.133.234:1023 SYN ******S* Aug 25 23:53:02 168.126.86.238:4087 -> xxx.yyy.133.234:9898 SYN ******S* Aug 25 23:52:59 168.126.86.238:3646 -> xxx.yyy.133.238:5554 SYN ******S* Aug 25 23:53:00 168.126.86.238:3806 -> xxx.yyy.133.238:1023 SYN ******S* Aug 25 23:53:02 168.126.86.238:4091 -> xxx.yyy.133.238:9898 SYN ******S* Aug 25 23:52:59 168.126.86.238:3648 -> xxx.yyy.133.240:5554 SYN ******S* Aug 25 23:53:02 168.126.86.238:4092 -> xxx.yyy.133.240:9898 SYN ******S* [...] Aug 25 23:55:20 168.126.86.238:1944 -> xxx.yyy.154.88:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1940 -> xxx.yyy.154.81:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1937 -> xxx.yyy.154.70:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1949 -> xxx.yyy.154.83:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1941 -> xxx.yyy.154.82:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1943 -> xxx.yyy.154.86:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1945 -> xxx.yyy.154.89:9898 SYN ******S* Aug 25 23:55:20 168.126.86.238:1956 -> xxx.yyy.154.91:9898 SYN ******S* Aug 25 23:55:23 168.126.86.238:2061 -> xxx.yyy.154.99:9898 SYN ******S* 10459 Aug 25 00:57:23 219.159.30.40:3123 -> xxx.yyy.154.131:5554 SYN ******S* Aug 25 00:57:26 219.159.30.40:1439 -> xxx.yyy.154.131:9898 SYN ******S* Aug 25 00:57:23 219.159.30.40:3122 -> xxx.yyy.154.130:5554 SYN ******S* Aug 25 00:57:26 219.159.30.40:1438 -> xxx.yyy.154.130:9898 SYN ******S* Aug 25 00:57:23 219.159.30.40:3135 -> xxx.yyy.154.134:5554 SYN ******S* Aug 25 00:57:26 219.159.30.40:1442 -> xxx.yyy.154.134:9898 SYN ******S* Aug 25 00:57:23 219.159.30.40:3131 -> xxx.yyy.154.132:5554 SYN ******S* Aug 25 00:57:26 219.159.30.40:1440 -> xxx.yyy.154.132:9898 SYN ******S* [...] Aug 25 00:58:08 219.159.30.40:2052 -> xxx.yyy.174.208:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2049 -> xxx.yyy.174.207:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2074 -> xxx.yyy.174.218:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2098 -> xxx.yyy.174.219:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2100 -> xxx.yyy.174.215:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2102 -> xxx.yyy.174.217:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2115 -> xxx.yyy.174.220:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2116 -> xxx.yyy.174.221:9898 SYN ******S* Aug 25 00:58:08 219.159.30.40:2118 -> xxx.yyy.174.222:9898 SYN ******S* 10003 Aug 25 23:49:05 222.149.239.95:2397 -> xxx.yyy.133.20:5554 SYN ******S* Aug 25 23:49:06 222.149.239.95:2721 -> xxx.yyy.133.20:1023 SYN ******S* Aug 25 23:49:08 222.149.239.95:3369 -> xxx.yyy.133.20:9898 SYN ******S* Aug 25 23:49:05 222.149.239.95:2398 -> xxx.yyy.133.21:5554 SYN ******S* Aug 25 23:49:06 222.149.239.95:2722 -> xxx.yyy.133.21:1023 SYN ******S* Aug 25 23:49:08 222.149.239.95:3370 -> xxx.yyy.133.21:9898 SYN ******S* Aug 25 23:49:05 222.149.239.95:2401 -> xxx.yyy.133.17:5554 SYN ******S* Aug 25 23:49:06 222.149.239.95:2724 -> xxx.yyy.133.17:1023 SYN ******S* [...] Aug 25 23:50:11 222.149.239.95:4894 -> xxx.yyy.133.204:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4896 -> xxx.yyy.133.206:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4903 -> xxx.yyy.133.213:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4904 -> xxx.yyy.133.224:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4905 -> xxx.yyy.133.225:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4910 -> xxx.yyy.133.217:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4913 -> xxx.yyy.133.228:9898 SYN ******S* Aug 25 23:50:11 222.149.239.95:4916 -> xxx.yyy.133.209:9898 SYN ******S* 9956 Aug 25 00:07:20 220.108.240.26:3565 -> xxx.yyy.214.251:5554 SYN ******S* Aug 25 00:07:21 220.108.240.26:4167 -> xxx.yyy.214.251:1023 SYN ******S* Aug 25 00:07:23 220.108.240.26:1685 -> xxx.yyy.214.251:9898 SYN ******S* Aug 25 00:07:20 220.108.240.26:3573 -> xxx.yyy.215.1:5554 SYN ******S* Aug 25 00:07:21 220.108.240.26:4174 -> xxx.yyy.215.1:1023 SYN ******S* Aug 25 00:07:20 220.108.240.26:3560 -> xxx.yyy.214.246:5554 SYN ******S* Aug 25 00:07:21 220.108.240.26:4162 -> xxx.yyy.214.246:1023 SYN ******S* Aug 25 00:07:20 220.108.240.26:3561 -> xxx.yyy.214.247:5554 SYN ******S* [...] Aug 25 00:08:00 220.108.240.26:1302 -> xxx.yyy.235.70:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1306 -> xxx.yyy.235.74:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1307 -> xxx.yyy.235.75:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1308 -> xxx.yyy.235.76:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1314 -> xxx.yyy.235.82:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1324 -> xxx.yyy.235.92:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1328 -> xxx.yyy.235.96:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1315 -> xxx.yyy.235.83:9898 SYN ******S* Aug 25 00:08:00 220.108.240.26:1325 -> xxx.yyy.235.93:9898 SYN ******S* 9926 [...] 9558 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions