[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Aug 30 04:49:25 217.227.214.117:1160 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 04:49:25 217.227.214.117:1161 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 04:49:25 217.227.214.117:1162 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 04:49:25 217.227.214.117:1163 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 04:49:25 217.227.214.117:1164 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 04:49:25 217.227.214.117:1165 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 04:49:26 217.227.214.117:1166 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 04:49:23 217.227.214.117:1167 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 30 08:21:47 217.227.214.117:4534 -> xxx.yyy.255.190:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4533 -> xxx.yyy.255.189:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4535 -> xxx.yyy.255.191:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4537 -> xxx.yyy.255.193:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4539 -> xxx.yyy.255.195:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4538 -> xxx.yyy.255.194:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4540 -> xxx.yyy.255.196:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4542 -> xxx.yyy.255.198:139 SYN ******S* Aug 30 08:21:47 217.227.214.117:4541 -> xxx.yyy.255.197:139 SYN ******S* 198622 Aug 30 00:23:07 63.207.60.253:1707 -> xxx.yyy.64.0:1433 SYN ******S* Aug 30 00:23:07 63.207.60.253:1709 -> xxx.yyy.64.1:1433 SYN ******S* Aug 30 00:23:08 63.207.60.253:1712 -> xxx.yyy.64.3:1433 SYN ******S* Aug 30 00:23:08 63.207.60.253:1713 -> xxx.yyy.64.4:1433 SYN ******S* Aug 30 00:23:05 63.207.60.253:1715 -> xxx.yyy.64.5:1433 SYN ******S* Aug 30 00:23:08 63.207.60.253:1719 -> xxx.yyy.64.7:1433 SYN ******S* Aug 30 00:23:07 63.207.60.253:1710 -> xxx.yyy.64.2:1433 SYN ******S* Aug 30 00:23:08 63.207.60.253:1717 -> xxx.yyy.64.6:1433 SYN ******S* [...] Aug 30 03:23:40 63.207.60.253:4113 -> xxx.yyy.255.247:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4110 -> xxx.yyy.255.246:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4123 -> xxx.yyy.255.249:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4116 -> xxx.yyy.255.248:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4135 -> xxx.yyy.255.252:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4130 -> xxx.yyy.255.251:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4127 -> xxx.yyy.255.250:1433 SYN ******S* Aug 30 03:23:40 63.207.60.253:4138 -> xxx.yyy.255.253:1433 SYN ******S* Aug 30 03:23:41 63.207.60.253:4140 -> xxx.yyy.255.254:1433 SYN ******S* 105178 Aug 30 02:37:07 82.64.22.197:1421 -> xxx.yyy.68.39:139 SYN ******S* Aug 30 02:37:09 82.64.22.197:1519 -> xxx.yyy.68.40:139 SYN ******S* Aug 30 02:37:10 82.64.22.197:1523 -> xxx.yyy.68.41:139 SYN ******S* Aug 30 02:37:11 82.64.22.197:1525 -> xxx.yyy.68.42:139 SYN ******S* Aug 30 02:37:12 82.64.22.197:1529 -> xxx.yyy.68.43:139 SYN ******S* Aug 30 02:37:10 82.64.22.197:1531 -> xxx.yyy.68.44:139 SYN ******S* Aug 30 02:37:11 82.64.22.197:1629 -> xxx.yyy.68.45:139 SYN ******S* Aug 30 02:37:12 82.64.22.197:1633 -> xxx.yyy.68.46:139 SYN ******S* [...] Aug 30 15:16:37 82.64.22.197:1190 -> xxx.yyy.246.45:139 SYN ******S* Aug 30 15:16:38 82.64.22.197:1192 -> xxx.yyy.246.46:139 SYN ******S* Aug 30 15:16:40 82.64.22.197:1190 -> xxx.yyy.246.45:139 SYN ******S* Aug 30 15:16:41 82.64.22.197:1178 -> xxx.yyy.246.39:139 SYN ******S* Aug 30 15:16:42 82.64.22.197:1180 -> xxx.yyy.246.40:139 SYN ******S* Aug 30 15:16:42 82.64.22.197:1194 -> xxx.yyy.246.47:139 SYN ******S* Aug 30 15:16:44 82.64.22.197:1184 -> xxx.yyy.246.42:139 SYN ******S* Aug 30 15:16:46 82.64.22.197:1188 -> xxx.yyy.246.44:139 SYN ******S* Aug 30 15:16:47 82.64.22.197:1190 -> xxx.yyy.246.45:139 SYN ******S* 77165 Aug 30 03:49:12 217.93.185.71:2298 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2299 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2300 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2301 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2302 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2303 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2304 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 03:49:12 217.93.185.71:2305 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 30 04:01:28 217.93.185.71:2389 -> xxx.yyy.255.245:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2391 -> xxx.yyy.255.246:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2392 -> xxx.yyy.255.247:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2393 -> xxx.yyy.255.248:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2394 -> xxx.yyy.255.249:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2395 -> xxx.yyy.255.250:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2396 -> xxx.yyy.255.251:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2397 -> xxx.yyy.255.252:1433 SYN ******S* Aug 30 04:01:28 217.93.185.71:2399 -> xxx.yyy.255.254:1433 SYN ******S* 72025 Aug 30 03:34:43 150.188.1.6:1161 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1162 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1164 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1165 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1166 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1167 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1168 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 03:34:43 150.188.1.6:1169 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 30 03:51:12 150.188.1.6:4677 -> xxx.yyy.255.236:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4673 -> xxx.yyy.255.235:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4686 -> xxx.yyy.255.240:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4709 -> xxx.yyy.255.248:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4697 -> xxx.yyy.255.243:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4650 -> xxx.yyy.255.227:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4669 -> xxx.yyy.255.234:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4663 -> xxx.yyy.255.232:1433 SYN ******S* Aug 30 03:51:12 150.188.1.6:4715 -> xxx.yyy.255.251:1433 SYN ******S* 71622 Aug 30 02:01:07 195.22.232.106:38066 -> xxx.yyy.1.1:139 SYN ******S* Aug 30 02:01:07 195.22.232.106:38067 -> xxx.yyy.1.2:139 SYN ******S* Aug 30 02:01:04 195.22.232.106:38068 -> xxx.yyy.1.3:139 SYN ******S* Aug 30 02:01:04 195.22.232.106:38069 -> xxx.yyy.1.4:139 SYN ******S* Aug 30 02:01:07 195.22.232.106:38070 -> xxx.yyy.1.5:139 SYN ******S* Aug 30 02:01:04 195.22.232.106:38071 -> xxx.yyy.1.6:139 SYN ******S* Aug 30 02:01:07 195.22.232.106:38072 -> xxx.yyy.1.7:139 SYN ******S* Aug 30 02:01:07 195.22.232.106:38074 -> xxx.yyy.1.9:139 SYN ******S* [...] Aug 30 02:30:25 195.22.232.106:42027 -> xxx.yyy.255.236:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42040 -> xxx.yyy.255.249:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42041 -> xxx.yyy.255.250:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42028 -> xxx.yyy.255.237:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42029 -> xxx.yyy.255.238:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42042 -> xxx.yyy.255.251:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42030 -> xxx.yyy.255.239:139 SYN ******S* Aug 30 02:30:25 195.22.232.106:42043 -> xxx.yyy.255.252:139 SYN ******S* 70087 Aug 30 10:58:51 82.36.37.215:3867 -> xxx.yyy.1.0:1433 SYN ******S* Aug 30 10:58:51 82.36.37.215:3873 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 10:58:52 82.36.37.215:3879 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 10:58:52 82.36.37.215:3881 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 10:58:52 82.36.37.215:3883 -> xxx.yyy.1.8:1433 SYN ******S* Aug 30 10:58:52 82.36.37.215:3887 -> xxx.yyy.1.10:1433 SYN ******S* Aug 30 10:58:52 82.36.37.215:3891 -> xxx.yyy.1.12:1433 SYN ******S* Aug 30 10:58:52 82.36.37.215:3897 -> xxx.yyy.1.15:1433 SYN ******S* [...] Aug 30 14:47:41 82.36.37.215:3049 -> xxx.yyy.255.237:1433 SYN ******S* Aug 30 14:47:41 82.36.37.215:3051 -> xxx.yyy.255.238:1433 SYN ******S* Aug 30 14:47:41 82.36.37.215:3056 -> xxx.yyy.255.239:1433 SYN ******S* Aug 30 14:47:42 82.36.37.215:3072 -> xxx.yyy.255.243:1433 SYN ******S* Aug 30 14:47:42 82.36.37.215:3077 -> xxx.yyy.255.244:1433 SYN ******S* Aug 30 14:47:42 82.36.37.215:3088 -> xxx.yyy.255.246:1433 SYN ******S* Aug 30 14:47:42 82.36.37.215:3092 -> xxx.yyy.255.247:1433 SYN ******S* Aug 30 14:47:45 82.36.37.215:3175 -> xxx.yyy.255.254:1433 SYN ******S* 67316 Aug 30 01:48:11 63.245.69.34:1177 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 01:48:11 63.245.69.34:1178 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 01:48:11 63.245.69.34:1179 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 01:48:14 63.245.69.34:1180 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 01:48:14 63.245.69.34:1181 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 01:48:11 63.245.69.34:1182 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 01:48:14 63.245.69.34:1183 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 01:48:14 63.245.69.34:1184 -> xxx.yyy.1.8:1433 SYN ******S* [...] Aug 30 02:01:06 63.245.69.34:3461 -> xxx.yyy.255.176:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3458 -> xxx.yyy.255.173:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3467 -> xxx.yyy.255.182:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3487 -> xxx.yyy.255.202:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3485 -> xxx.yyy.255.200:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3486 -> xxx.yyy.255.201:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3505 -> xxx.yyy.255.220:1433 SYN ******S* Aug 30 02:01:06 63.245.69.34:3526 -> xxx.yyy.255.241:1433 SYN ******S* 65084 Aug 30 08:16:57 211.32.196.89:2126 -> xxx.yyy.1.1:6129 SYN ******S* Aug 30 08:16:57 211.32.196.89:2136 -> xxx.yyy.1.2:6129 SYN ******S* Aug 30 08:16:56 211.32.196.89:2148 -> xxx.yyy.1.3:6129 SYN ******S* Aug 30 08:16:59 211.32.196.89:2159 -> xxx.yyy.1.4:6129 SYN ******S* Aug 30 08:16:59 211.32.196.89:2198 -> xxx.yyy.1.7:6129 SYN ******S* Aug 30 08:16:59 211.32.196.89:2214 -> xxx.yyy.1.8:6129 SYN ******S* Aug 30 08:16:59 211.32.196.89:2229 -> xxx.yyy.1.9:6129 SYN ******S* Aug 30 08:16:59 211.32.196.89:2240 -> xxx.yyy.1.10:6129 SYN ******S* [...] Aug 30 08:34:04 211.32.196.89:1534 -> xxx.yyy.255.241:6129 SYN ******S* Aug 30 08:34:04 211.32.196.89:1523 -> xxx.yyy.255.240:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1616 -> xxx.yyy.255.248:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1637 -> xxx.yyy.255.250:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1625 -> xxx.yyy.255.249:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1600 -> xxx.yyy.255.247:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1590 -> xxx.yyy.255.246:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1686 -> xxx.yyy.255.254:6129 SYN ******S* Aug 30 08:34:05 211.32.196.89:1661 -> xxx.yyy.255.252:6129 SYN ******S* 60353 Aug 30 18:55:25 62.58.184.22:3785 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 18:55:25 62.58.184.22:3786 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 18:55:25 62.58.184.22:3787 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 18:55:25 62.58.184.22:3788 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 18:55:22 62.58.184.22:3789 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 18:55:22 62.58.184.22:3790 -> xxx.yyy.1.8:1433 SYN ******S* Aug 30 18:55:25 62.58.184.22:3793 -> xxx.yyy.1.11:1433 SYN ******S* Aug 30 18:55:22 62.58.184.22:3795 -> xxx.yyy.1.13:1433 SYN ******S* [...] Aug 30 19:08:12 62.58.184.22:2072 -> xxx.yyy.255.240:1433 SYN ******S* Aug 30 19:08:12 62.58.184.22:2077 -> xxx.yyy.255.245:1433 SYN ******S* Aug 30 19:08:13 62.58.184.22:2080 -> xxx.yyy.255.248:1433 SYN ******S* Aug 30 19:08:13 62.58.184.22:2081 -> xxx.yyy.255.249:1433 SYN ******S* Aug 30 19:08:13 62.58.184.22:2082 -> xxx.yyy.255.250:1433 SYN ******S* Aug 30 19:08:13 62.58.184.22:2084 -> xxx.yyy.255.252:1433 SYN ******S* Aug 30 19:08:13 62.58.184.22:2085 -> xxx.yyy.255.253:1433 SYN ******S* Aug 30 19:08:13 62.58.184.22:2086 -> xxx.yyy.255.254:1433 SYN ******S* 48712 Aug 30 09:26:40 195.47.93.190:3849 -> xxx.yyy.1.1:80 SYN ******S* Aug 30 09:26:40 195.47.93.190:3850 -> xxx.yyy.1.2:80 SYN ******S* Aug 30 09:26:40 195.47.93.190:3851 -> xxx.yyy.1.3:80 SYN ******S* Aug 30 09:26:42 195.47.93.190:4161 -> xxx.yyy.1.5:80 SYN ******S* Aug 30 09:26:42 195.47.93.190:4162 -> xxx.yyy.1.6:80 SYN ******S* Aug 30 09:26:42 195.47.93.190:4167 -> xxx.yyy.1.9:80 SYN ******S* Aug 30 09:26:39 195.47.93.190:4168 -> xxx.yyy.1.10:80 SYN ******S* Aug 30 09:26:39 195.47.93.190:4169 -> xxx.yyy.1.11:80 SYN ******S* [...] Aug 30 09:37:41 195.47.93.190:4856 -> xxx.yyy.255.224:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4921 -> xxx.yyy.255.244:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4949 -> xxx.yyy.255.253:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4933 -> xxx.yyy.255.249:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4906 -> xxx.yyy.255.240:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4927 -> xxx.yyy.255.247:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4924 -> xxx.yyy.255.245:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4911 -> xxx.yyy.255.241:80 SYN ******S* Aug 30 09:37:41 195.47.93.190:4919 -> xxx.yyy.255.243:80 SYN ******S* 43373 Aug 30 20:50:19 212.181.97.136:2173 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 20:50:22 212.181.97.136:2177 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 20:50:19 212.181.97.136:2184 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 20:50:22 212.181.97.136:2192 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 20:50:22 212.181.97.136:2196 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 20:50:19 212.181.97.136:2200 -> xxx.yyy.1.8:1433 SYN ******S* Aug 30 20:50:20 212.181.97.136:2211 -> xxx.yyy.1.11:1433 SYN ******S* Aug 30 20:50:20 212.181.97.136:2220 -> xxx.yyy.1.13:1433 SYN ******S* [...] Aug 30 22:09:39 212.181.97.136:2274 -> xxx.yyy.255.247:1433 SYN ******S* Aug 30 22:09:39 212.181.97.136:2267 -> xxx.yyy.255.245:1433 SYN ******S* Aug 30 22:09:39 212.181.97.136:2279 -> xxx.yyy.255.248:1433 SYN ******S* Aug 30 22:09:40 212.181.97.136:2293 -> xxx.yyy.255.252:1433 SYN ******S* Aug 30 22:09:40 212.181.97.136:2286 -> xxx.yyy.255.250:1433 SYN ******S* Aug 30 22:09:40 212.181.97.136:2290 -> xxx.yyy.255.251:1433 SYN ******S* Aug 30 22:09:40 212.181.97.136:2297 -> xxx.yyy.255.253:1433 SYN ******S* Aug 30 22:09:40 212.181.97.136:2301 -> xxx.yyy.255.254:1433 SYN ******S* 43324 Aug 30 14:55:12 195.224.180.230:1144 -> xxx.yyy.29.4:1433 SYN ******S* Aug 30 14:55:13 195.224.180.230:1146 -> xxx.yyy.29.6:1433 SYN ******S* Aug 30 14:55:13 195.224.180.230:1148 -> xxx.yyy.29.8:1433 SYN ******S* Aug 30 14:55:13 195.224.180.230:1149 -> xxx.yyy.29.9:1433 SYN ******S* Aug 30 14:55:14 195.224.180.230:1150 -> xxx.yyy.29.10:1433 SYN ******S* Aug 30 14:55:13 195.224.180.230:1152 -> xxx.yyy.29.12:1433 SYN ******S* Aug 30 14:55:13 195.224.180.230:1154 -> xxx.yyy.29.14:1433 SYN ******S* Aug 30 14:55:13 195.224.180.230:1155 -> xxx.yyy.29.15:1433 SYN ******S* [...] Aug 30 15:05:35 195.224.180.230:3715 -> xxx.yyy.255.213:1433 SYN ******S* Aug 30 15:05:35 195.224.180.230:3743 -> xxx.yyy.255.241:1433 SYN ******S* Aug 30 15:05:35 195.224.180.230:3738 -> xxx.yyy.255.236:1433 SYN ******S* Aug 30 15:05:36 195.224.180.230:3746 -> xxx.yyy.255.244:1433 SYN ******S* Aug 30 15:05:36 195.224.180.230:3751 -> xxx.yyy.255.249:1433 SYN ******S* Aug 30 15:05:36 195.224.180.230:3756 -> xxx.yyy.255.254:1433 SYN ******S* Aug 30 15:05:36 195.224.180.230:3753 -> xxx.yyy.255.251:1433 SYN ******S* Aug 30 15:05:36 195.224.180.230:3747 -> xxx.yyy.255.245:1433 SYN ******S* Aug 30 15:05:36 195.224.180.230:3750 -> xxx.yyy.255.248:1433 SYN ******S* 41378 Aug 30 13:04:24 216.118.120.35:4709 -> xxx.yyy.1.1:4899 SYN ******S* Aug 30 13:04:24 216.118.120.35:4711 -> xxx.yyy.1.2:4899 SYN ******S* Aug 30 13:04:25 216.118.120.35:4713 -> xxx.yyy.1.3:4899 SYN ******S* Aug 30 13:04:26 216.118.120.35:4721 -> xxx.yyy.1.7:4899 SYN ******S* Aug 30 13:04:23 216.118.120.35:4723 -> xxx.yyy.1.8:4899 SYN ******S* Aug 30 13:04:23 216.118.120.35:4727 -> xxx.yyy.1.10:4899 SYN ******S* Aug 30 13:04:23 216.118.120.35:4731 -> xxx.yyy.1.12:4899 SYN ******S* Aug 30 13:04:24 216.118.120.35:4735 -> xxx.yyy.1.14:4899 SYN ******S* [...] Aug 30 13:15:22 216.118.120.35:3986 -> xxx.yyy.255.223:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4004 -> xxx.yyy.255.232:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4008 -> xxx.yyy.255.234:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4022 -> xxx.yyy.255.241:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4026 -> xxx.yyy.255.243:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4046 -> xxx.yyy.255.253:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4042 -> xxx.yyy.255.251:4899 SYN ******S* Aug 30 13:15:22 216.118.120.35:4048 -> xxx.yyy.255.254:4899 SYN ******S* 40515 Aug 30 08:25:05 200.103.158.34:2918 -> xxx.yyy.177.2:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2919 -> xxx.yyy.177.3:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2920 -> xxx.yyy.177.4:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2921 -> xxx.yyy.177.5:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2923 -> xxx.yyy.177.1:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2924 -> xxx.yyy.177.7:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2925 -> xxx.yyy.177.8:1433 SYN ******S* Aug 30 08:25:05 200.103.158.34:2926 -> xxx.yyy.177.9:1433 SYN ******S* [...] Aug 30 09:27:06 200.103.158.34:3104 -> xxx.yyy.246.26:1433 SYN ******S* Aug 30 09:27:06 200.103.158.34:3105 -> xxx.yyy.246.27:1433 SYN ******S* Aug 30 09:27:06 200.103.158.34:3106 -> xxx.yyy.246.28:1433 SYN ******S* Aug 30 09:27:06 200.103.158.34:3107 -> xxx.yyy.246.29:1433 SYN ******S* Aug 30 09:27:06 200.103.158.34:3109 -> xxx.yyy.246.31:1433 SYN ******S* Aug 30 09:27:06 200.103.158.34:3108 -> xxx.yyy.246.30:1433 SYN ******S* Aug 30 09:27:07 200.103.158.34:3111 -> xxx.yyy.246.33:1433 SYN ******S* Aug 30 09:27:07 200.103.158.34:3112 -> xxx.yyy.246.34:1433 SYN ******S* Aug 30 09:27:07 200.103.158.34:3116 -> xxx.yyy.246.36:1433 SYN ******S* 38594 Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.0:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.1:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.2:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.3:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.4:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.5:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.7:25 SYN ******S* Aug 30 06:09:21 4.227.110.7:59385 -> xxx.yyy.1.6:25 SYN ******S* [...] Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.236:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.235:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.237:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.251:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.252:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.254:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.253:25 SYN ******S* Aug 30 06:10:00 4.227.110.7:59385 -> xxx.yyy.255.255:25 SYN ******S* 31118 Aug 30 12:52:37 62.64.115.38:3416 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 12:52:34 62.64.115.38:3417 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 12:52:37 62.64.115.38:3418 -> xxx.yyy.1.3:1433 SYN ******S* Aug 30 12:52:34 62.64.115.38:3419 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 12:52:34 62.64.115.38:3420 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 12:52:34 62.64.115.38:3436 -> xxx.yyy.1.21:1433 SYN ******S* Aug 30 12:52:37 62.64.115.38:3441 -> xxx.yyy.1.26:1433 SYN ******S* Aug 30 12:52:34 62.64.115.38:3444 -> xxx.yyy.1.29:1433 SYN ******S* [...] Aug 30 13:06:25 62.64.115.38:1926 -> xxx.yyy.255.235:1433 SYN ******S* Aug 30 13:06:25 62.64.115.38:1927 -> xxx.yyy.255.236:1433 SYN ******S* Aug 30 13:06:25 62.64.115.38:1934 -> xxx.yyy.255.243:1433 SYN ******S* Aug 30 13:06:25 62.64.115.38:1936 -> xxx.yyy.255.245:1433 SYN ******S* Aug 30 13:06:25 62.64.115.38:1937 -> xxx.yyy.255.246:1433 SYN ******S* Aug 30 13:06:25 62.64.115.38:1944 -> xxx.yyy.255.253:1433 SYN ******S* Aug 30 13:06:25 62.64.115.38:1945 -> xxx.yyy.255.254:1433 SYN ******S* Aug 30 13:06:28 62.64.115.38:1913 -> xxx.yyy.255.222:1433 SYN ******S* 26617 Aug 30 13:27:10 211.141.144.29:1856 -> xxx.yyy.1.1:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1861 -> xxx.yyy.1.2:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1863 -> xxx.yyy.1.4:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1865 -> xxx.yyy.1.6:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1866 -> xxx.yyy.1.5:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1868 -> xxx.yyy.1.8:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1867 -> xxx.yyy.1.7:1433 SYN ******S* Aug 30 13:27:10 211.141.144.29:1864 -> xxx.yyy.1.3:1433 SYN ******S* [...] Aug 30 13:32:18 211.141.144.29:4052 -> xxx.yyy.255.242:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4055 -> xxx.yyy.255.245:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4054 -> xxx.yyy.255.244:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4053 -> xxx.yyy.255.243:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4060 -> xxx.yyy.255.250:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4064 -> xxx.yyy.255.253:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4062 -> xxx.yyy.255.252:1433 SYN ******S* Aug 30 13:32:18 211.141.144.29:4063 -> xxx.yyy.255.254:1433 SYN ******S* 21546 Aug 30 08:31:02 200.153.190.100:3533 -> xxx.yyy.64.0:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3534 -> xxx.yyy.64.1:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3535 -> xxx.yyy.64.2:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3536 -> xxx.yyy.64.3:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3537 -> xxx.yyy.64.4:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3539 -> xxx.yyy.64.6:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3541 -> xxx.yyy.64.8:1433 SYN ******S* Aug 30 08:31:02 200.153.190.100:3538 -> xxx.yyy.64.5:1433 SYN ******S* [...] Aug 30 09:14:15 200.153.190.100:3251 -> xxx.yyy.111.242:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3250 -> xxx.yyy.111.241:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3265 -> xxx.yyy.111.252:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3263 -> xxx.yyy.111.250:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3262 -> xxx.yyy.111.249:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3261 -> xxx.yyy.111.248:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3260 -> xxx.yyy.111.247:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3270 -> xxx.yyy.111.255:1433 SYN ******S* Aug 30 09:14:15 200.153.190.100:3267 -> xxx.yyy.111.254:1433 SYN ******S* 21220 Aug 30 00:52:35 12.219.26.174:3112 -> xxx.yyy.128.16:80 SYN ******S* Aug 30 00:52:36 12.219.26.174:3115 -> xxx.yyy.128.17:80 SYN ******S* Aug 30 00:52:34 12.219.26.174:3108 -> xxx.yyy.128.14:80 SYN ******S* Aug 30 00:52:37 12.219.26.174:3109 -> xxx.yyy.128.15:80 SYN ******S* Aug 30 00:52:40 12.219.26.174:3118 -> xxx.yyy.128.18:80 SYN ******S* Aug 30 00:52:42 12.219.26.174:3115 -> xxx.yyy.128.17:80 SYN ******S* Aug 30 00:52:43 12.219.26.174:3121 -> xxx.yyy.128.19:80 SYN ******S* Aug 30 00:52:46 12.219.26.174:3126 -> xxx.yyy.128.20:80 SYN ******S* [...] Aug 30 17:36:42 12.219.26.174:2010 -> xxx.yyy.189.31:80 SYN ******S* Aug 30 17:36:44 12.219.26.174:2011 -> xxx.yyy.189.32:80 SYN ******S* Aug 30 17:36:44 12.219.26.174:2015 -> xxx.yyy.189.34:80 SYN ******S* Aug 30 17:36:47 12.219.26.174:2015 -> xxx.yyy.189.34:80 SYN ******S* Aug 30 17:36:49 12.219.26.174:2016 -> xxx.yyy.189.35:80 SYN ******S* Aug 30 17:36:53 12.219.26.174:2015 -> xxx.yyy.189.34:80 SYN ******S* Aug 30 17:36:54 12.219.26.174:2017 -> xxx.yyy.189.36:80 SYN ******S* Aug 30 17:36:57 12.219.26.174:2017 -> xxx.yyy.189.36:80 SYN ******S* Aug 30 17:36:57 12.219.26.174:2019 -> xxx.yyy.189.38:80 SYN ******S* 14124 Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.15:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.14:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.30:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.52:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.36:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.64:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.26:22 SYN ******S* Aug 30 06:19:13 61.166.6.60:50099 -> xxx.yyy.1.76:22 SYN ******S* [...] Aug 30 09:43:23 61.166.6.60:47944 -> xxx.yyy.1.30:22 SYN ******S* Aug 30 09:43:23 61.166.6.60:48002 -> xxx.yyy.241.32:22 SYN ******S* Aug 30 09:43:23 61.166.6.60:47952 -> xxx.yyy.10.3:22 SYN ******S* Aug 30 09:43:23 61.166.6.60:48042 -> xxx.yyy.241.233:22 SYN ******S* Aug 30 09:43:23 61.166.6.60:48005 -> xxx.yyy.242.201:22 SYN ******S* Aug 30 09:43:26 61.166.6.60:47980 -> xxx.yyy.236.21:22 SYN ******S* Aug 30 09:43:26 61.166.6.60:47982 -> xxx.yyy.236.24:22 SYN ******S* Aug 30 09:43:28 61.166.6.60:47997 -> xxx.yyy.241.255:22 SYN ******S* 11867 [...] 11302 Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.2:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.9:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.3:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.4:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.5:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.6:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.7:111 SYN ******S* Aug 30 20:33:05 82.150.135.2:111 -> xxx.yyy.1.8:111 SYN ******S* [...] Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.235:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.236:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.237:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.238:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.239:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.240:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.242:111 SYN ******S* Aug 30 20:33:21 82.150.135.2:111 -> xxx.yyy.255.241:111 SYN ******S* 10617 Aug 30 13:49:02 200.117.184.75:65408 -> xxx.yyy.1.89:12345 SYN ******S* Aug 30 13:49:06 200.117.184.75:65410 -> xxx.yyy.1.102:12345 SYN ******S* Aug 30 13:49:06 200.117.184.75:65412 -> xxx.yyy.1.108:12345 SYN ******S* Aug 30 13:49:06 200.117.184.75:65413 -> xxx.yyy.1.112:12345 SYN ******S* Aug 30 13:49:03 200.117.184.75:65414 -> xxx.yyy.1.113:12345 SYN ******S* Aug 30 13:49:03 200.117.184.75:65415 -> xxx.yyy.1.115:12345 SYN ******S* Aug 30 13:49:03 200.117.184.75:65416 -> xxx.yyy.1.116:12345 SYN ******S* Aug 30 13:49:06 200.117.184.75:65417 -> xxx.yyy.1.117:12345 SYN ******S* [...] Aug 30 14:49:54 200.117.184.75:32857 -> xxx.yyy.255.108:12345 SYN ******S* Aug 30 14:49:55 200.117.184.75:32859 -> xxx.yyy.255.113:12345 SYN ******S* Aug 30 14:49:55 200.117.184.75:32860 -> xxx.yyy.255.115:12345 SYN ******S* Aug 30 14:49:55 200.117.184.75:32862 -> xxx.yyy.255.119:12345 SYN ******S* Aug 30 14:49:55 200.117.184.75:32865 -> xxx.yyy.255.124:12345 SYN ******S* Aug 30 14:49:55 200.117.184.75:32866 -> xxx.yyy.255.126:12345 SYN ******S* Aug 30 14:49:56 200.117.184.75:32868 -> xxx.yyy.255.136:12345 SYN ******S* Aug 30 14:50:01 200.117.184.75:32771 -> xxx.yyy.255.231:12345 SYN ******S* 10382 Aug 30 00:46:16 220.127.0.86:3373 -> xxx.yyy.215.240:5554 SYN ******S* Aug 30 00:46:19 220.127.0.86:1751 -> xxx.yyy.215.240:9898 SYN ******S* Aug 30 00:46:16 220.127.0.86:3375 -> xxx.yyy.215.242:5554 SYN ******S* Aug 30 00:46:17 220.127.0.86:4018 -> xxx.yyy.215.242:1023 SYN ******S* Aug 30 00:46:19 220.127.0.86:1753 -> xxx.yyy.215.242:9898 SYN ******S* Aug 30 00:46:16 220.127.0.86:3377 -> xxx.yyy.215.244:5554 SYN ******S* Aug 30 00:46:17 220.127.0.86:4021 -> xxx.yyy.215.244:1023 SYN ******S* Aug 30 00:46:16 220.127.0.86:3383 -> xxx.yyy.215.250:5554 SYN ******S* [...] Aug 30 00:47:04 220.127.0.86:3238 -> xxx.yyy.236.67:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3246 -> xxx.yyy.236.75:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3248 -> xxx.yyy.236.72:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3250 -> xxx.yyy.236.76:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3297 -> xxx.yyy.236.68:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3316 -> xxx.yyy.236.70:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3318 -> xxx.yyy.236.71:9898 SYN ******S* Aug 30 00:47:04 220.127.0.86:3453 -> xxx.yyy.215.213:9898 SYN ******S* 8610 Aug 30 00:56:15 221.127.142.161:1686 -> xxx.yyy.235.118:5554 SYN ******S* Aug 30 00:56:15 221.127.142.161:1689 -> xxx.yyy.235.116:5554 SYN ******S* Aug 30 00:56:15 221.127.142.161:1690 -> xxx.yyy.235.115:5554 SYN ******S* Aug 30 00:56:15 221.127.142.161:1703 -> xxx.yyy.235.122:5554 SYN ******S* Aug 30 00:56:15 221.127.142.161:1704 -> xxx.yyy.235.123:5554 SYN ******S* Aug 30 00:56:15 221.127.142.161:1705 -> xxx.yyy.235.124:5554 SYN ******S* Aug 30 00:56:15 221.127.142.161:1706 -> xxx.yyy.235.125:5554 SYN ******S* Aug 30 00:56:16 221.127.142.161:2931 -> xxx.yyy.235.125:1023 SYN ******S* [...] Aug 30 00:57:05 221.127.142.161:3351 -> xxx.yyy.255.200:9898 SYN ******S* Aug 30 00:57:05 221.127.142.161:3360 -> xxx.yyy.255.165:9898 SYN ******S* Aug 30 00:57:05 221.127.142.161:3412 -> xxx.yyy.255.185:9898 SYN ******S* Aug 30 00:57:05 221.127.142.161:3419 -> xxx.yyy.255.199:9898 SYN ******S* Aug 30 00:57:05 221.127.142.161:3414 -> xxx.yyy.255.168:9898 SYN ******S* Aug 30 00:57:06 221.127.142.161:3610 -> xxx.yyy.255.195:9898 SYN ******S* Aug 30 00:57:06 221.127.142.161:3803 -> xxx.yyy.255.223:9898 SYN ******S* Aug 30 00:57:06 221.127.142.161:3825 -> xxx.yyy.255.225:9898 SYN ******S* Aug 30 00:57:06 221.127.142.161:4067 -> xxx.yyy.255.234:9898 SYN ******S* 7381 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions