[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Aug 28 02:48:57 24.176.174.86:3523 -> xxx.yyy.1.0:1433 SYN ******S* Aug 28 02:48:57 24.176.174.86:3525 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 02:48:58 24.176.174.86:3527 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 02:48:58 24.176.174.86:3529 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 02:48:55 24.176.174.86:3531 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 02:48:58 24.176.174.86:3533 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 02:48:58 24.176.174.86:3535 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 02:48:58 24.176.174.86:3537 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 28 06:37:45 24.176.174.86:4193 -> xxx.yyy.255.245:1433 SYN ******S* Aug 28 06:37:45 24.176.174.86:4192 -> xxx.yyy.255.244:1433 SYN ******S* Aug 28 06:37:45 24.176.174.86:4196 -> xxx.yyy.255.248:1433 SYN ******S* Aug 28 06:37:45 24.176.174.86:4197 -> xxx.yyy.255.249:1433 SYN ******S* Aug 28 06:37:46 24.176.174.86:4198 -> xxx.yyy.255.250:1433 SYN ******S* Aug 28 06:37:46 24.176.174.86:4199 -> xxx.yyy.255.251:1433 SYN ******S* Aug 28 06:37:46 24.176.174.86:4200 -> xxx.yyy.255.252:1433 SYN ******S* Aug 28 06:37:46 24.176.174.86:4202 -> xxx.yyy.255.254:1433 SYN ******S* Aug 28 06:37:46 24.176.174.86:4201 -> xxx.yyy.255.253:1433 SYN ******S* 122792 Aug 28 12:12:16 213.180.193.68:65086 -> xxx.yyy.1.95:1080 SYN ******S* Aug 28 12:12:16 213.180.193.68:53822 -> xxx.yyy.1.95:1075 SYN ******S* Aug 28 12:12:16 213.180.193.68:48330 -> xxx.yyy.1.95:80 SYN ******S* Aug 28 12:12:16 213.180.193.68:51894 -> xxx.yyy.1.95:81 SYN ******S* Aug 28 12:12:16 213.180.193.68:46185 -> xxx.yyy.1.95:3128 SYN ******S* Aug 28 12:12:16 213.180.193.68:60063 -> xxx.yyy.1.95:4480 SYN ******S* Aug 28 12:12:16 213.180.193.68:65085 -> xxx.yyy.1.95:6588 SYN ******S* Aug 28 12:12:16 213.180.193.68:37956 -> xxx.yyy.1.95:8080 SYN ******S* [...] Aug 28 21:22:38 213.180.193.68:62949 -> xxx.yyy.104.65:6002 SYN ******S* Aug 28 21:22:38 213.180.193.68:62949 -> xxx.yyy.104.65:1433 SYN ******S* Aug 28 21:57:17 213.180.193.68:64381 -> xxx.yyy.104.65:1976 SYN ******S* Aug 28 21:57:17 213.180.193.68:49466 -> xxx.yyy.104.65:1978 SYN ******S* Aug 28 21:57:17 213.180.193.68:34055 -> xxx.yyy.104.65:1998 SYN ******S* Aug 28 21:57:17 213.180.193.68:51124 -> xxx.yyy.104.65:2001 SYN ******S* Aug 28 21:57:17 213.180.193.68:33659 -> xxx.yyy.104.65:3389 SYN ******S* Aug 28 21:57:17 213.180.193.68:37558 -> xxx.yyy.104.65:6500 SYN ******S* Aug 28 21:57:17 213.180.193.68:43944 -> xxx.yyy.104.65:11387 SYN ******S* 72837 Aug 28 08:07:25 217.225.139.36:4827 -> xxx.yyy.1.0:1433 SYN ******S* Aug 28 08:07:25 217.225.139.36:4829 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 08:07:26 217.225.139.36:4831 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 08:07:26 217.225.139.36:4833 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 08:07:26 217.225.139.36:4835 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 08:07:26 217.225.139.36:4837 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 08:07:26 217.225.139.36:4839 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 08:07:26 217.225.139.36:4841 -> xxx.yyy.1.7:1433 SYN ******S* [...] Aug 28 09:06:27 217.225.139.36:3858 -> xxx.yyy.255.247:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3859 -> xxx.yyy.255.248:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3860 -> xxx.yyy.255.249:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3861 -> xxx.yyy.255.250:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3862 -> xxx.yyy.255.251:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3863 -> xxx.yyy.255.252:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3864 -> xxx.yyy.255.253:1433 SYN ******S* Aug 28 09:06:28 217.225.139.36:3865 -> xxx.yyy.255.254:1433 SYN ******S* 72747 Aug 28 02:57:36 130.83.122.22:4272 -> xxx.yyy.1.1:4000 SYN ******S* Aug 28 02:57:36 130.83.122.22:4273 -> xxx.yyy.1.2:4000 SYN ******S* Aug 28 02:57:36 130.83.122.22:4274 -> xxx.yyy.1.3:4000 SYN ******S* Aug 28 02:57:35 130.83.122.22:4275 -> xxx.yyy.1.4:4000 SYN ******S* Aug 28 02:57:38 130.83.122.22:4276 -> xxx.yyy.1.5:4000 SYN ******S* Aug 28 02:57:38 130.83.122.22:4277 -> xxx.yyy.1.6:4000 SYN ******S* Aug 28 02:57:38 130.83.122.22:4278 -> xxx.yyy.1.7:4000 SYN ******S* Aug 28 02:57:38 130.83.122.22:4279 -> xxx.yyy.1.8:4000 SYN ******S* [...] Aug 28 03:08:37 130.83.122.22:4731 -> xxx.yyy.255.243:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4728 -> xxx.yyy.255.240:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4741 -> xxx.yyy.255.253:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4738 -> xxx.yyy.255.250:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4739 -> xxx.yyy.255.251:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4736 -> xxx.yyy.255.248:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4737 -> xxx.yyy.255.249:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4742 -> xxx.yyy.255.254:4000 SYN ******S* Aug 28 03:08:37 130.83.122.22:4740 -> xxx.yyy.255.252:4000 SYN ******S* 71838 Aug 28 22:46:13 152.105.15.94:2558 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 22:46:13 152.105.15.94:2559 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 22:46:16 152.105.15.94:2560 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 22:46:16 152.105.15.94:2561 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 22:46:16 152.105.15.94:2562 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 22:46:16 152.105.15.94:2563 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 22:46:16 152.105.15.94:2564 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 22:46:16 152.105.15.94:2565 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 28 22:57:55 152.105.15.94:1235 -> xxx.yyy.255.239:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1238 -> xxx.yyy.255.242:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1245 -> xxx.yyy.255.249:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1248 -> xxx.yyy.255.252:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1249 -> xxx.yyy.255.253:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1250 -> xxx.yyy.255.254:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1246 -> xxx.yyy.255.250:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1244 -> xxx.yyy.255.248:1433 SYN ******S* Aug 28 22:57:55 152.105.15.94:1247 -> xxx.yyy.255.251:1433 SYN ******S* 67364 Aug 28 00:03:09 220.82.5.2:2805 -> xxx.yyy.64.13:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2792 -> xxx.yyy.64.0:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2800 -> xxx.yyy.64.8:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2803 -> xxx.yyy.64.11:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2794 -> xxx.yyy.64.2:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2813 -> xxx.yyy.64.21:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2807 -> xxx.yyy.64.15:443 SYN ******S* Aug 28 00:03:09 220.82.5.2:2810 -> xxx.yyy.64.18:443 SYN ******S* [...] Aug 28 00:34:46 220.82.5.2:4228 -> xxx.yyy.255.195:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4226 -> xxx.yyy.255.193:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4230 -> xxx.yyy.255.197:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4227 -> xxx.yyy.255.194:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4229 -> xxx.yyy.255.196:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4275 -> xxx.yyy.255.242:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4231 -> xxx.yyy.255.198:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4232 -> xxx.yyy.255.199:443 SYN ******S* Aug 28 00:34:46 220.82.5.2:4234 -> xxx.yyy.255.201:443 SYN ******S* 66457 Aug 28 11:51:59 195.251.231.89:4852 -> xxx.yyy.1.1:4000 SYN ******S* Aug 28 11:51:59 195.251.231.89:4853 -> xxx.yyy.1.2:4000 SYN ******S* Aug 28 11:51:59 195.251.231.89:4854 -> xxx.yyy.1.3:4000 SYN ******S* Aug 28 11:51:57 195.251.231.89:4855 -> xxx.yyy.1.4:4000 SYN ******S* Aug 28 11:51:57 195.251.231.89:4856 -> xxx.yyy.1.5:4000 SYN ******S* Aug 28 11:52:00 195.251.231.89:4858 -> xxx.yyy.1.7:4000 SYN ******S* Aug 28 11:52:00 195.251.231.89:4859 -> xxx.yyy.1.8:4000 SYN ******S* Aug 28 11:52:00 195.251.231.89:4860 -> xxx.yyy.1.9:4000 SYN ******S* [...] Aug 28 12:03:57 195.251.231.89:3260 -> xxx.yyy.255.220:4000 SYN ******S* Aug 28 12:03:57 195.251.231.89:3259 -> xxx.yyy.255.219:4000 SYN ******S* Aug 28 12:03:57 195.251.231.89:3261 -> xxx.yyy.255.221:4000 SYN ******S* Aug 28 12:03:57 195.251.231.89:3263 -> xxx.yyy.255.223:4000 SYN ******S* Aug 28 12:03:57 195.251.231.89:3262 -> xxx.yyy.255.222:4000 SYN ******S* Aug 28 12:03:57 195.251.231.89:3264 -> xxx.yyy.255.224:4000 SYN ******S* Aug 28 12:03:58 195.251.231.89:3267 -> xxx.yyy.255.227:4000 SYN ******S* Aug 28 12:03:58 195.251.231.89:3269 -> xxx.yyy.255.229:4000 SYN ******S* 62030 Aug 28 15:31:07 212.60.24.82:3510 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 15:31:07 212.60.24.82:3512 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 15:31:04 212.60.24.82:3513 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 15:31:04 212.60.24.82:3514 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 15:31:04 212.60.24.82:3515 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 15:31:07 212.60.24.82:3516 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 15:31:04 212.60.24.82:3517 -> xxx.yyy.1.8:1433 SYN ******S* Aug 28 15:31:07 212.60.24.82:3519 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 28 15:42:45 212.60.24.82:4020 -> xxx.yyy.255.246:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4017 -> xxx.yyy.255.243:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4014 -> xxx.yyy.255.240:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4025 -> xxx.yyy.255.251:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4022 -> xxx.yyy.255.248:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4026 -> xxx.yyy.255.252:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4023 -> xxx.yyy.255.249:1433 SYN ******S* Aug 28 15:42:45 212.60.24.82:4027 -> xxx.yyy.255.253:1433 SYN ******S* 58161 Aug 28 21:31:12 194.204.245.3:19082 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 21:31:12 194.204.245.3:19083 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 21:31:15 194.204.245.3:19084 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 21:31:12 194.204.245.3:19085 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 21:31:15 194.204.245.3:19086 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 21:31:15 194.204.245.3:19087 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 21:31:12 194.204.245.3:19090 -> xxx.yyy.1.8:1433 SYN ******S* Aug 28 21:31:15 194.204.245.3:19091 -> xxx.yyy.1.9:1433 SYN ******S* [...] Aug 28 21:42:59 194.204.245.3:39615 -> xxx.yyy.255.245:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39612 -> xxx.yyy.255.242:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39616 -> xxx.yyy.255.246:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39613 -> xxx.yyy.255.243:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39617 -> xxx.yyy.255.247:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39624 -> xxx.yyy.255.254:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39621 -> xxx.yyy.255.251:1433 SYN ******S* Aug 28 21:42:59 194.204.245.3:39622 -> xxx.yyy.255.252:1433 SYN ******S* 42855 Aug 28 03:06:00 220.82.243.209:4046 -> xxx.yyy.1.3:4899 SYN ******S* Aug 28 03:05:58 220.82.243.209:4047 -> xxx.yyy.1.4:4899 SYN ******S* Aug 28 03:05:58 220.82.243.209:4050 -> xxx.yyy.1.7:4899 SYN ******S* Aug 28 03:06:00 220.82.243.209:4044 -> xxx.yyy.1.1:4899 SYN ******S* Aug 28 03:06:00 220.82.243.209:4045 -> xxx.yyy.1.2:4899 SYN ******S* Aug 28 03:05:58 220.82.243.209:4056 -> xxx.yyy.1.12:4899 SYN ******S* Aug 28 03:06:00 220.82.243.209:4058 -> xxx.yyy.1.14:4899 SYN ******S* Aug 28 03:05:58 220.82.243.209:4048 -> xxx.yyy.1.5:4899 SYN ******S* [...] Aug 28 03:09:50 220.82.243.209:3515 -> xxx.yyy.255.243:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3516 -> xxx.yyy.255.244:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3525 -> xxx.yyy.255.253:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3519 -> xxx.yyy.255.247:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3520 -> xxx.yyy.255.248:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3522 -> xxx.yyy.255.250:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3524 -> xxx.yyy.255.252:4899 SYN ******S* Aug 28 03:09:50 220.82.243.209:3526 -> xxx.yyy.255.254:4899 SYN ******S* 41980 Aug 28 18:09:52 221.139.30.98:1160 -> xxx.yyy.1.2:4899 SYN ******S* Aug 28 18:09:52 221.139.30.98:1162 -> xxx.yyy.1.4:4899 SYN ******S* Aug 28 18:09:52 221.139.30.98:1164 -> xxx.yyy.1.6:4899 SYN ******S* Aug 28 18:09:52 221.139.30.98:1165 -> xxx.yyy.1.7:4899 SYN ******S* Aug 28 18:09:52 221.139.30.98:1166 -> xxx.yyy.1.8:4899 SYN ******S* Aug 28 18:09:52 221.139.30.98:1167 -> xxx.yyy.1.9:4899 SYN ******S* Aug 28 18:09:52 221.139.30.98:1168 -> xxx.yyy.1.10:4899 SYN ******S* Aug 28 18:09:53 221.139.30.98:1169 -> xxx.yyy.1.11:4899 SYN ******S* [...] Aug 28 18:18:47 221.139.30.98:4547 -> xxx.yyy.255.120:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4543 -> xxx.yyy.255.116:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4548 -> xxx.yyy.255.121:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4544 -> xxx.yyy.255.117:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4546 -> xxx.yyy.255.119:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4538 -> xxx.yyy.255.113:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4534 -> xxx.yyy.255.109:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4549 -> xxx.yyy.255.122:4899 SYN ******S* Aug 28 18:18:47 221.139.30.98:4541 -> xxx.yyy.255.114:4899 SYN ******S* 38810 Aug 28 08:56:13 220.84.57.205:1902 -> xxx.yyy.1.2:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1904 -> xxx.yyy.1.4:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1905 -> xxx.yyy.1.5:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1906 -> xxx.yyy.1.6:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1907 -> xxx.yyy.1.7:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1909 -> xxx.yyy.1.8:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1910 -> xxx.yyy.1.9:4899 SYN ******S* Aug 28 08:56:12 220.84.57.205:1911 -> xxx.yyy.1.10:4899 SYN ******S* [...] Aug 28 09:01:27 220.84.57.205:2226 -> xxx.yyy.255.242:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2228 -> xxx.yyy.255.244:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2229 -> xxx.yyy.255.245:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2237 -> xxx.yyy.255.252:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2239 -> xxx.yyy.255.254:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2233 -> xxx.yyy.255.248:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2234 -> xxx.yyy.255.249:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2236 -> xxx.yyy.255.251:4899 SYN ******S* Aug 28 09:01:27 220.84.57.205:2238 -> xxx.yyy.255.253:4899 SYN ******S* 33706 [...] 33691 Aug 28 12:42:56 200.24.174.148:1080 -> xxx.yyy.10.1:1433 SYN ******S* Aug 28 12:42:53 200.24.174.148:1081 -> xxx.yyy.10.2:1433 SYN ******S* Aug 28 12:42:56 200.24.174.148:1082 -> xxx.yyy.10.3:1433 SYN ******S* Aug 28 12:42:56 200.24.174.148:1085 -> xxx.yyy.10.4:1433 SYN ******S* Aug 28 12:42:56 200.24.174.148:1086 -> xxx.yyy.10.5:1433 SYN ******S* Aug 28 12:42:53 200.24.174.148:1087 -> xxx.yyy.10.6:1433 SYN ******S* Aug 28 12:42:56 200.24.174.148:1088 -> xxx.yyy.10.7:1433 SYN ******S* Aug 28 12:42:53 200.24.174.148:1090 -> xxx.yyy.10.9:1433 SYN ******S* [...] Aug 28 12:55:31 200.24.174.148:2214 -> xxx.yyy.253.5:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2240 -> xxx.yyy.253.29:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2234 -> xxx.yyy.253.23:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2238 -> xxx.yyy.253.27:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2239 -> xxx.yyy.253.28:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2243 -> xxx.yyy.253.32:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2244 -> xxx.yyy.253.33:1433 SYN ******S* Aug 28 12:55:31 200.24.174.148:2245 -> xxx.yyy.253.34:1433 SYN ******S* 30023 Aug 28 09:24:56 142.59.166.5:3443 -> xxx.yyy.1.0:1433 SYN ******S* Aug 28 09:24:56 142.59.166.5:3445 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 09:24:56 142.59.166.5:3447 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 09:24:56 142.59.166.5:3451 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 09:24:56 142.59.166.5:3453 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 09:24:56 142.59.166.5:3455 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 09:24:56 142.59.166.5:3458 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 09:24:59 142.59.166.5:3461 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 28 10:57:24 142.59.166.5:3811 -> xxx.yyy.104.5:1433 SYN ******S* Aug 28 10:57:24 142.59.166.5:3812 -> xxx.yyy.104.6:1433 SYN ******S* Aug 28 10:57:24 142.59.166.5:3813 -> xxx.yyy.104.7:1433 SYN ******S* Aug 28 10:57:24 142.59.166.5:3814 -> xxx.yyy.104.8:1433 SYN ******S* Aug 28 10:57:24 142.59.166.5:3815 -> xxx.yyy.104.9:1433 SYN ******S* Aug 28 10:57:24 142.59.166.5:3817 -> xxx.yyy.104.10:1433 SYN ******S* Aug 28 10:57:25 142.59.166.5:3818 -> xxx.yyy.104.11:1433 SYN ******S* Aug 28 10:57:25 142.59.166.5:3824 -> xxx.yyy.104.13:1433 SYN ******S* Aug 28 10:57:25 142.59.166.5:3825 -> xxx.yyy.104.14:1433 SYN ******S* 29179 Aug 28 03:52:24 68.226.232.108:4909 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4910 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4911 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4912 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4913 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4914 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4915 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 03:52:24 68.226.232.108:4916 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 28 04:00:30 68.226.232.108:1373 -> xxx.yyy.255.179:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1374 -> xxx.yyy.255.180:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1375 -> xxx.yyy.255.181:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1376 -> xxx.yyy.255.182:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1377 -> xxx.yyy.255.183:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1378 -> xxx.yyy.255.184:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1379 -> xxx.yyy.255.185:1433 SYN ******S* Aug 28 04:00:30 68.226.232.108:1380 -> xxx.yyy.255.186:1433 SYN ******S* 28522 [...] 27282 Aug 28 00:06:15 222.250.1.32:4453 -> xxx.yyy.128.0:1433 SYN ******S* Aug 28 00:06:16 222.250.1.32:4477 -> xxx.yyy.128.1:1433 SYN ******S* Aug 28 00:06:16 222.250.1.32:4484 -> xxx.yyy.128.2:1433 SYN ******S* Aug 28 00:06:16 222.250.1.32:4515 -> xxx.yyy.128.3:1433 SYN ******S* Aug 28 00:06:13 222.250.1.32:4668 -> xxx.yyy.128.4:1433 SYN ******S* Aug 28 00:06:13 222.250.1.32:3002 -> xxx.yyy.128.5:1433 SYN ******S* Aug 28 00:06:16 222.250.1.32:3501 -> xxx.yyy.128.6:1433 SYN ******S* Aug 28 00:06:16 222.250.1.32:3518 -> xxx.yyy.128.7:1433 SYN ******S* [...] Aug 28 00:59:55 222.250.1.32:3458 -> xxx.yyy.255.220:1433 SYN ******S* Aug 28 00:59:55 222.250.1.32:4027 -> xxx.yyy.255.253:1433 SYN ******S* Aug 28 00:59:57 222.250.1.32:3776 -> xxx.yyy.255.178:1433 SYN ******S* Aug 28 00:59:57 222.250.1.32:3843 -> xxx.yyy.255.250:1433 SYN ******S* Aug 28 00:59:58 222.250.1.32:3881 -> xxx.yyy.255.252:1433 SYN ******S* Aug 28 00:59:58 222.250.1.32:3584 -> xxx.yyy.255.199:1433 SYN ******S* Aug 28 01:00:02 222.250.1.32:3559 -> xxx.yyy.255.223:1433 SYN ******S* Aug 28 01:00:03 222.250.1.32:3744 -> xxx.yyy.255.249:1433 SYN ******S* 21073 Aug 28 12:42:28 200.24.174.146:2276 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 12:42:31 200.24.174.146:2277 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 12:42:31 200.24.174.146:2278 -> xxx.yyy.1.3:1433 SYN ******S* Aug 28 12:42:31 200.24.174.146:2279 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 12:42:31 200.24.174.146:2280 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 12:42:31 200.24.174.146:2281 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 12:42:31 200.24.174.146:2282 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 12:42:28 200.24.174.146:2283 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 28 12:55:39 200.24.174.146:2996 -> xxx.yyy.255.213:1433 SYN ******S* Aug 28 12:55:39 200.24.174.146:3004 -> xxx.yyy.255.219:1433 SYN ******S* Aug 28 12:55:39 200.24.174.146:3013 -> xxx.yyy.255.228:1433 SYN ******S* Aug 28 12:55:40 200.24.174.146:3040 -> xxx.yyy.255.253:1433 SYN ******S* Aug 28 12:55:40 200.24.174.146:3037 -> xxx.yyy.255.250:1433 SYN ******S* Aug 28 12:55:40 200.24.174.146:3041 -> xxx.yyy.255.254:1433 SYN ******S* Aug 28 12:55:40 200.24.174.146:3038 -> xxx.yyy.255.251:1433 SYN ******S* Aug 28 12:55:40 200.24.174.146:3039 -> xxx.yyy.255.252:1433 SYN ******S* 18132 Aug 28 20:57:33 200.157.189.2:13762 -> xxx.yyy.1.4:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:1054 -> xxx.yyy.1.9:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:23166 -> xxx.yyy.1.12:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:34407 -> xxx.yyy.1.13:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:53223 -> xxx.yyy.1.26:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:43549 -> xxx.yyy.1.27:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:55830 -> xxx.yyy.1.29:1433 SYN ******S* Aug 28 20:57:33 200.157.189.2:19222 -> xxx.yyy.1.31:1433 SYN ******S* [...] Aug 28 22:23:07 200.157.189.2:30788 -> xxx.yyy.94.218:1433 SYN ******S* Aug 28 22:23:07 200.157.189.2:33532 -> xxx.yyy.94.219:1433 SYN ******S* Aug 28 22:23:08 200.157.189.2:12569 -> xxx.yyy.94.207:1433 SYN ******S* Aug 28 22:23:08 200.157.189.2:55483 -> xxx.yyy.94.208:1433 SYN ******S* Aug 28 22:23:08 200.157.189.2:8798 -> xxx.yyy.94.210:1433 SYN ******S* Aug 28 22:23:08 200.157.189.2:51668 -> xxx.yyy.94.223:1433 SYN ******S* Aug 28 22:23:08 200.157.189.2:18256 -> xxx.yyy.94.211:1433 SYN ******S* Aug 28 22:23:09 200.157.189.2:26033 -> xxx.yyy.94.228:1433 SYN ******S* Aug 28 22:23:09 200.157.189.2:19882 -> xxx.yyy.94.229:1433 SYN ******S* 16186 Aug 28 19:30:05 207.144.165.173:4195 -> xxx.yyy.1.0:1433 SYN ******S* Aug 28 19:30:05 207.144.165.173:4209 -> xxx.yyy.1.1:1433 SYN ******S* Aug 28 19:30:05 207.144.165.173:4223 -> xxx.yyy.1.2:1433 SYN ******S* Aug 28 19:30:06 207.144.165.173:4338 -> xxx.yyy.1.5:1433 SYN ******S* Aug 28 19:30:06 207.144.165.173:4362 -> xxx.yyy.1.6:1433 SYN ******S* Aug 28 19:30:06 207.144.165.173:4363 -> xxx.yyy.1.7:1433 SYN ******S* Aug 28 19:30:06 207.144.165.173:4413 -> xxx.yyy.1.9:1433 SYN ******S* Aug 28 19:30:06 207.144.165.173:4434 -> xxx.yyy.1.10:1433 SYN ******S* [...] Aug 28 23:55:53 207.144.165.173:3911 -> xxx.yyy.20.248:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3913 -> xxx.yyy.20.249:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3915 -> xxx.yyy.20.250:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3920 -> xxx.yyy.20.251:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3928 -> xxx.yyy.20.252:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3937 -> xxx.yyy.20.253:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3952 -> xxx.yyy.20.255:1433 SYN ******S* Aug 28 23:55:53 207.144.165.173:3951 -> xxx.yyy.20.254:1433 SYN ******S* 15668 Aug 28 00:39:12 221.192.33.117:1479 -> xxx.yyy.72.124:5554 SYN ******S* Aug 28 00:39:13 221.192.33.117:1665 -> xxx.yyy.72.124:1023 SYN ******S* Aug 28 00:39:15 221.192.33.117:2056 -> xxx.yyy.72.124:9898 SYN ******S* Aug 28 00:39:13 221.192.33.117:1490 -> xxx.yyy.72.125:5554 SYN ******S* Aug 28 00:39:14 221.192.33.117:1681 -> xxx.yyy.72.125:1023 SYN ******S* Aug 28 00:39:16 221.192.33.117:2064 -> xxx.yyy.72.125:9898 SYN ******S* Aug 28 00:39:13 221.192.33.117:1491 -> xxx.yyy.72.126:5554 SYN ******S* Aug 28 00:39:14 221.192.33.117:1695 -> xxx.yyy.72.126:1023 SYN ******S* [...] Aug 28 00:40:54 221.192.33.117:3741 -> xxx.yyy.92.174:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3742 -> xxx.yyy.92.175:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3739 -> xxx.yyy.92.172:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3740 -> xxx.yyy.92.173:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3743 -> xxx.yyy.92.176:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3748 -> xxx.yyy.92.180:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3744 -> xxx.yyy.92.177:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3745 -> xxx.yyy.92.178:9898 SYN ******S* Aug 28 00:40:54 221.192.33.117:3746 -> xxx.yyy.92.179:9898 SYN ******S* 14437 Aug 28 23:42:48 220.109.40.92:1256 -> xxx.yyy.215.212:5554 SYN ******S* Aug 28 23:42:49 220.109.40.92:1553 -> xxx.yyy.215.212:1023 SYN ******S* Aug 28 23:42:51 220.109.40.92:2163 -> xxx.yyy.215.212:9898 SYN ******S* Aug 28 23:42:48 220.109.40.92:1257 -> xxx.yyy.215.210:5554 SYN ******S* Aug 28 23:42:49 220.109.40.92:1551 -> xxx.yyy.215.210:1023 SYN ******S* Aug 28 23:42:51 220.109.40.92:2160 -> xxx.yyy.215.210:9898 SYN ******S* Aug 28 23:42:48 220.109.40.92:1258 -> xxx.yyy.215.211:5554 SYN ******S* Aug 28 23:42:49 220.109.40.92:1552 -> xxx.yyy.215.211:1023 SYN ******S* [...] Aug 28 23:44:01 220.109.40.92:2091 -> xxx.yyy.235.167:9898 SYN ******S* Aug 28 23:44:01 220.109.40.92:2097 -> xxx.yyy.235.170:9898 SYN ******S* Aug 28 23:44:01 220.109.40.92:2095 -> xxx.yyy.235.168:9898 SYN ******S* Aug 28 23:44:01 220.109.40.92:2096 -> xxx.yyy.235.169:9898 SYN ******S* Aug 28 23:44:02 220.109.40.92:2133 -> xxx.yyy.235.185:9898 SYN ******S* Aug 28 23:44:02 220.109.40.92:2132 -> xxx.yyy.235.184:9898 SYN ******S* Aug 28 23:44:02 220.109.40.92:2134 -> xxx.yyy.235.186:9898 SYN ******S* Aug 28 23:44:02 220.109.40.92:2136 -> xxx.yyy.235.187:9898 SYN ******S* Aug 28 23:44:02 220.109.40.92:2371 -> xxx.yyy.235.192:9898 SYN ******S* 13644 Aug 28 00:02:05 211.59.96.43:1039 -> xxx.yyy.194.128:5554 SYN ******S* Aug 28 00:02:08 211.59.96.43:2489 -> xxx.yyy.194.128:9898 SYN ******S* Aug 28 00:02:05 211.59.96.43:1034 -> xxx.yyy.194.126:5554 SYN ******S* Aug 28 00:02:06 211.59.96.43:1480 -> xxx.yyy.194.126:1023 SYN ******S* Aug 28 00:02:08 211.59.96.43:2487 -> xxx.yyy.194.126:9898 SYN ******S* Aug 28 00:02:05 211.59.96.43:1059 -> xxx.yyy.194.190:5554 SYN ******S* Aug 28 00:02:06 211.59.96.43:1500 -> xxx.yyy.194.190:1023 SYN ******S* Aug 28 00:02:08 211.59.96.43:2565 -> xxx.yyy.194.190:9898 SYN ******S* [...] Aug 28 00:02:53 211.59.96.43:2755 -> xxx.yyy.194.157:9898 SYN ******S* Aug 28 00:02:53 211.59.96.43:2790 -> xxx.yyy.194.162:9898 SYN ******S* Aug 28 00:02:53 211.59.96.43:2825 -> xxx.yyy.194.159:9898 SYN ******S* Aug 28 00:02:54 211.59.96.43:2865 -> xxx.yyy.194.179:9898 SYN ******S* Aug 28 00:02:54 211.59.96.43:2871 -> xxx.yyy.194.184:9898 SYN ******S* Aug 28 00:02:54 211.59.96.43:2869 -> xxx.yyy.194.182:9898 SYN ******S* Aug 28 00:02:54 211.59.96.43:2873 -> xxx.yyy.194.186:9898 SYN ******S* Aug 28 00:02:54 211.59.96.43:2896 -> xxx.yyy.194.175:9898 SYN ******S* 13565 Aug 28 00:00:04 222.113.188.27:3851 -> xxx.yyy.202.9:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3857 -> xxx.yyy.202.15:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3852 -> xxx.yyy.202.10:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3854 -> xxx.yyy.202.12:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3860 -> xxx.yyy.202.18:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3856 -> xxx.yyy.202.14:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3858 -> xxx.yyy.202.16:4899 SYN ******S* Aug 28 00:00:04 222.113.188.27:3861 -> xxx.yyy.202.19:4899 SYN ******S* [...] Aug 28 00:01:16 222.113.188.27:1568 -> xxx.yyy.255.249:4899 SYN ******S* Aug 28 00:01:16 222.113.188.27:1569 -> xxx.yyy.255.250:4899 SYN ******S* Aug 28 00:01:16 222.113.188.27:1570 -> xxx.yyy.255.251:4899 SYN ******S* Aug 28 00:01:16 222.113.188.27:1565 -> xxx.yyy.255.247:4899 SYN ******S* Aug 28 00:01:16 222.113.188.27:1566 -> xxx.yyy.255.248:4899 SYN ******S* Aug 28 00:01:16 222.113.188.27:1573 -> xxx.yyy.255.254:4899 SYN ******S* Aug 28 00:01:16 222.113.188.27:1572 -> xxx.yyy.255.253:4899 SYN ******S* Aug 28 00:01:17 222.113.188.27:1132 -> xxx.yyy.254.90:4899 SYN ******S* 12991 Aug 28 00:56:57 218.61.9.220:1724 -> xxx.yyy.195.96:5554 SYN ******S* Aug 28 00:56:58 218.61.9.220:2058 -> xxx.yyy.195.96:1023 SYN ******S* Aug 28 00:56:57 218.61.9.220:1719 -> xxx.yyy.195.94:5554 SYN ******S* Aug 28 00:56:58 218.61.9.220:2060 -> xxx.yyy.195.94:1023 SYN ******S* Aug 28 00:56:57 218.61.9.220:1730 -> xxx.yyy.195.99:5554 SYN ******S* Aug 28 00:56:58 218.61.9.220:2065 -> xxx.yyy.195.99:1023 SYN ******S* Aug 28 00:56:57 218.61.9.220:1752 -> xxx.yyy.195.108:5554 SYN ******S* Aug 28 00:56:58 218.61.9.220:2085 -> xxx.yyy.195.108:1023 SYN ******S* [...] Aug 28 00:58:22 218.61.9.220:4883 -> xxx.yyy.215.133:9898 SYN ******S* Aug 28 00:58:22 218.61.9.220:4887 -> xxx.yyy.215.134:9898 SYN ******S* Aug 28 00:58:22 218.61.9.220:4891 -> xxx.yyy.215.132:9898 SYN ******S* Aug 28 00:58:22 218.61.9.220:4973 -> xxx.yyy.215.146:9898 SYN ******S* Aug 28 00:58:23 218.61.9.220:1152 -> xxx.yyy.215.156:9898 SYN ******S* Aug 28 00:58:23 218.61.9.220:1151 -> xxx.yyy.215.157:9898 SYN ******S* Aug 28 00:58:23 218.61.9.220:1219 -> xxx.yyy.215.169:9898 SYN ******S* Aug 28 00:58:23 218.61.9.220:1221 -> xxx.yyy.215.177:9898 SYN ******S* 11446 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions