[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 1 01:14:47 167.83.9.21:58445 -> xxx.yyy.1.0:1433 SYN ******S* Sep 1 01:14:47 167.83.9.21:58446 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 01:14:47 167.83.9.21:58447 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 01:14:44 167.83.9.21:58448 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 01:14:47 167.83.9.21:58454 -> xxx.yyy.1.4:1433 SYN ******S* Sep 1 01:14:47 167.83.9.21:58455 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 01:14:47 167.83.9.21:58456 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 01:14:47 167.83.9.21:58457 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 1 05:07:05 167.83.9.21:39940 -> xxx.yyy.255.247:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39942 -> xxx.yyy.255.248:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39944 -> xxx.yyy.255.249:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39945 -> xxx.yyy.255.250:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39950 -> xxx.yyy.255.254:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39946 -> xxx.yyy.255.251:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39947 -> xxx.yyy.255.252:1433 SYN ******S* Sep 1 05:07:05 167.83.9.21:39948 -> xxx.yyy.255.253:1433 SYN ******S* 119731 Sep 1 11:30:08 83.110.129.209:1406 -> xxx.yyy.1.5:139 SYN ******S* Sep 1 11:30:09 83.110.129.209:1413 -> xxx.yyy.1.9:139 SYN ******S* Sep 1 11:30:09 83.110.129.209:1422 -> xxx.yyy.1.13:139 SYN ******S* Sep 1 11:30:06 83.110.129.209:1427 -> xxx.yyy.1.16:139 SYN ******S* Sep 1 11:30:09 83.110.129.209:1435 -> xxx.yyy.1.20:139 SYN ******S* Sep 1 11:30:09 83.110.129.209:1437 -> xxx.yyy.1.21:139 SYN ******S* Sep 1 11:30:06 83.110.129.209:1439 -> xxx.yyy.1.22:139 SYN ******S* Sep 1 11:30:06 83.110.129.209:1442 -> xxx.yyy.1.23:139 SYN ******S* [...] Sep 1 13:24:46 83.110.129.209:2218 -> xxx.yyy.255.236:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2230 -> xxx.yyy.255.240:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2227 -> xxx.yyy.255.239:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2233 -> xxx.yyy.255.241:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2241 -> xxx.yyy.255.243:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2245 -> xxx.yyy.255.245:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2243 -> xxx.yyy.255.244:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2250 -> xxx.yyy.255.247:139 SYN ******S* Sep 1 13:24:47 83.110.129.209:2252 -> xxx.yyy.255.248:139 SYN ******S* 71808 Sep 1 05:16:04 69.209.41.1:1548 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1549 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1550 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1551 -> xxx.yyy.1.4:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1552 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1553 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1554 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 05:16:04 69.209.41.1:1555 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 1 05:28:00 69.209.41.1:3256 -> xxx.yyy.255.213:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3252 -> xxx.yyy.255.209:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3261 -> xxx.yyy.255.218:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3265 -> xxx.yyy.255.222:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3262 -> xxx.yyy.255.219:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3263 -> xxx.yyy.255.220:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3268 -> xxx.yyy.255.225:1433 SYN ******S* Sep 1 05:28:00 69.209.41.1:3264 -> xxx.yyy.255.221:1433 SYN ******S* Sep 1 05:28:01 69.209.41.1:3271 -> xxx.yyy.255.228:1433 SYN ******S* 71038 Sep 1 10:06:00 200.75.242.75:1837 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 10:06:00 200.75.242.75:1843 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 10:06:00 200.75.242.75:1849 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 10:05:57 200.75.242.75:1852 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 10:06:00 200.75.242.75:1855 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 10:05:57 200.75.242.75:1861 -> xxx.yyy.1.9:1433 SYN ******S* Sep 1 10:06:00 200.75.242.75:1864 -> xxx.yyy.1.10:1433 SYN ******S* Sep 1 10:05:57 200.75.242.75:1867 -> xxx.yyy.1.11:1433 SYN ******S* [...] Sep 1 13:54:49 200.75.242.75:2840 -> xxx.yyy.255.234:1433 SYN ******S* Sep 1 13:54:50 200.75.242.75:2845 -> xxx.yyy.255.235:1433 SYN ******S* Sep 1 13:54:51 200.75.242.75:2879 -> xxx.yyy.255.242:1433 SYN ******S* Sep 1 13:54:51 200.75.242.75:2882 -> xxx.yyy.255.243:1433 SYN ******S* Sep 1 13:54:51 200.75.242.75:2886 -> xxx.yyy.255.244:1433 SYN ******S* Sep 1 13:54:52 200.75.242.75:2901 -> xxx.yyy.255.247:1433 SYN ******S* Sep 1 13:54:52 200.75.242.75:2909 -> xxx.yyy.255.249:1433 SYN ******S* Sep 1 13:54:52 200.75.242.75:2913 -> xxx.yyy.255.252:1433 SYN ******S* Sep 1 13:54:52 200.75.242.75:2912 -> xxx.yyy.255.251:1433 SYN ******S* 70082 Sep 1 10:09:15 200.157.189.2:6009 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 10:09:15 200.157.189.2:40224 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 10:09:18 200.157.189.2:50855 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 10:09:18 200.157.189.2:5516 -> xxx.yyy.1.10:1433 SYN ******S* Sep 1 10:09:18 200.157.189.2:38444 -> xxx.yyy.1.13:1433 SYN ******S* Sep 1 10:09:15 200.157.189.2:9293 -> xxx.yyy.1.17:1433 SYN ******S* Sep 1 10:09:15 200.157.189.2:50352 -> xxx.yyy.1.18:1433 SYN ******S* Sep 1 10:09:18 200.157.189.2:34382 -> xxx.yyy.1.19:1433 SYN ******S* [...] Sep 1 13:58:48 200.157.189.2:39067 -> xxx.yyy.255.243:1433 SYN ******S* Sep 1 13:58:48 200.157.189.2:16250 -> xxx.yyy.255.244:1433 SYN ******S* Sep 1 13:58:48 200.157.189.2:25342 -> xxx.yyy.255.245:1433 SYN ******S* Sep 1 13:58:49 200.157.189.2:7678 -> xxx.yyy.255.246:1433 SYN ******S* Sep 1 13:58:49 200.157.189.2:35477 -> xxx.yyy.255.247:1433 SYN ******S* Sep 1 13:58:50 200.157.189.2:11389 -> xxx.yyy.255.248:1433 SYN ******S* Sep 1 13:58:50 200.157.189.2:48009 -> xxx.yyy.255.249:1433 SYN ******S* Sep 1 13:58:51 200.157.189.2:42155 -> xxx.yyy.255.252:1433 SYN ******S* 69894 Sep 1 03:07:44 24.123.85.46:11459 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 03:07:43 24.123.85.46:11589 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 03:07:44 24.123.85.46:11461 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 03:07:43 24.123.85.46:11603 -> xxx.yyy.1.4:1433 SYN ******S* Sep 1 03:07:44 24.123.85.46:11463 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 03:07:43 24.123.85.46:11594 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 03:07:44 24.123.85.46:11465 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 03:07:43 24.123.85.46:11586 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 1 03:44:46 24.123.85.46:49736 -> xxx.yyy.255.226:1433 SYN ******S* Sep 1 03:44:46 24.123.85.46:49740 -> xxx.yyy.255.230:1433 SYN ******S* Sep 1 03:44:46 24.123.85.46:49745 -> xxx.yyy.255.234:1433 SYN ******S* Sep 1 03:44:46 24.123.85.46:49743 -> xxx.yyy.255.232:1433 SYN ******S* Sep 1 03:44:46 24.123.85.46:49749 -> xxx.yyy.255.238:1433 SYN ******S* Sep 1 03:44:46 24.123.85.46:49747 -> xxx.yyy.255.236:1433 SYN ******S* Sep 1 03:44:47 24.123.85.46:49755 -> xxx.yyy.255.244:1433 SYN ******S* Sep 1 03:44:47 24.123.85.46:49753 -> xxx.yyy.255.242:1433 SYN ******S* Sep 1 03:44:47 24.123.85.46:49783 -> xxx.yyy.255.252:1433 SYN ******S* 67038 Sep 1 11:05:50 65.213.231.20:4533 -> xxx.yyy.1.1:139 SYN ******S* Sep 1 11:05:50 65.213.231.20:4534 -> xxx.yyy.1.2:139 SYN ******S* Sep 1 11:05:50 65.213.231.20:4537 -> xxx.yyy.1.3:139 SYN ******S* Sep 1 11:05:50 65.213.231.20:4538 -> xxx.yyy.1.4:139 SYN ******S* Sep 1 11:05:50 65.213.231.20:4547 -> xxx.yyy.1.6:139 SYN ******S* Sep 1 11:05:47 65.213.231.20:4563 -> xxx.yyy.1.9:139 SYN ******S* Sep 1 11:05:50 65.213.231.20:4566 -> xxx.yyy.1.11:139 SYN ******S* Sep 1 11:05:50 65.213.231.20:4567 -> xxx.yyy.1.12:139 SYN ******S* [...] Sep 1 11:31:03 65.213.231.20:2484 -> xxx.yyy.255.239:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:2998 -> xxx.yyy.255.249:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:2955 -> xxx.yyy.255.247:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:3134 -> xxx.yyy.255.253:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:3077 -> xxx.yyy.255.252:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:3008 -> xxx.yyy.255.250:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:3139 -> xxx.yyy.255.254:139 SYN ******S* Sep 1 11:31:04 65.213.231.20:3073 -> xxx.yyy.255.251:139 SYN ******S* 62988 Sep 1 03:47:55 63.211.44.45:4080 -> xxx.yyy.1.78:4899 SYN ******S* Sep 1 03:47:55 63.211.44.45:4081 -> xxx.yyy.1.79:4899 SYN ******S* Sep 1 03:47:52 63.211.44.45:4082 -> xxx.yyy.1.80:4899 SYN ******S* Sep 1 03:47:52 63.211.44.45:4083 -> xxx.yyy.1.81:4899 SYN ******S* Sep 1 03:47:52 63.211.44.45:4084 -> xxx.yyy.1.82:4899 SYN ******S* Sep 1 03:47:52 63.211.44.45:4085 -> xxx.yyy.1.83:4899 SYN ******S* Sep 1 03:47:52 63.211.44.45:4089 -> xxx.yyy.1.86:4899 SYN ******S* Sep 1 03:47:52 63.211.44.45:4090 -> xxx.yyy.1.87:4899 SYN ******S* [...] Sep 1 03:59:37 63.211.44.45:3064 -> xxx.yyy.255.214:4899 SYN ******S* Sep 1 03:59:37 63.211.44.45:3061 -> xxx.yyy.255.211:4899 SYN ******S* Sep 1 03:59:37 63.211.44.45:3113 -> xxx.yyy.255.250:4899 SYN ******S* Sep 1 03:59:37 63.211.44.45:3085 -> xxx.yyy.255.233:4899 SYN ******S* Sep 1 03:59:37 63.211.44.45:3089 -> xxx.yyy.255.236:4899 SYN ******S* Sep 1 03:59:37 63.211.44.45:3110 -> xxx.yyy.255.247:4899 SYN ******S* Sep 1 03:59:37 63.211.44.45:3058 -> xxx.yyy.255.208:4899 SYN ******S* Sep 1 03:59:41 63.211.44.45:3119 -> xxx.yyy.255.254:4899 SYN ******S* 51902 Sep 1 21:10:13 220.17.116.120:1462 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 21:10:16 220.17.116.120:1464 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 21:10:16 220.17.116.120:1463 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 21:10:13 220.17.116.120:1466 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 21:10:13 220.17.116.120:1467 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 21:10:16 220.17.116.120:1469 -> xxx.yyy.1.8:1433 SYN ******S* Sep 1 21:10:13 220.17.116.120:1468 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 21:10:13 220.17.116.120:1471 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 1 21:21:51 220.17.116.120:2940 -> xxx.yyy.255.216:1433 SYN ******S* Sep 1 21:21:51 220.17.116.120:2945 -> xxx.yyy.255.221:1433 SYN ******S* Sep 1 21:21:51 220.17.116.120:2946 -> xxx.yyy.255.222:1433 SYN ******S* Sep 1 21:21:51 220.17.116.120:2949 -> xxx.yyy.255.225:1433 SYN ******S* Sep 1 21:21:51 220.17.116.120:2954 -> xxx.yyy.255.230:1433 SYN ******S* Sep 1 21:21:51 220.17.116.120:2958 -> xxx.yyy.255.234:1433 SYN ******S* Sep 1 21:21:52 220.17.116.120:2970 -> xxx.yyy.255.246:1433 SYN ******S* Sep 1 21:21:52 220.17.116.120:2973 -> xxx.yyy.255.249:1433 SYN ******S* 42310 Sep 1 22:50:07 130.83.233.208:2534 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2535 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2538 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2541 -> xxx.yyy.1.8:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2542 -> xxx.yyy.1.9:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2544 -> xxx.yyy.1.11:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2545 -> xxx.yyy.1.12:1433 SYN ******S* Sep 1 22:50:07 130.83.233.208:2546 -> xxx.yyy.1.13:1433 SYN ******S* [...] Sep 1 23:00:59 130.83.233.208:3320 -> xxx.yyy.255.240:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3312 -> xxx.yyy.255.232:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3318 -> xxx.yyy.255.238:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3315 -> xxx.yyy.255.235:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3316 -> xxx.yyy.255.236:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3319 -> xxx.yyy.255.239:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3317 -> xxx.yyy.255.237:1433 SYN ******S* Sep 1 23:00:59 130.83.233.208:3334 -> xxx.yyy.255.254:1433 SYN ******S* 42088 Sep 1 03:46:00 24.45.180.116:2811 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2813 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2815 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2817 -> xxx.yyy.1.4:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2821 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2823 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2825 -> xxx.yyy.1.8:1433 SYN ******S* Sep 1 03:46:00 24.45.180.116:2827 -> xxx.yyy.1.9:1433 SYN ******S* [...] Sep 1 03:56:30 24.45.180.116:3419 -> xxx.yyy.255.242:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3421 -> xxx.yyy.255.243:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3423 -> xxx.yyy.255.244:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3425 -> xxx.yyy.255.245:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3429 -> xxx.yyy.255.247:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3433 -> xxx.yyy.255.249:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3435 -> xxx.yyy.255.250:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3437 -> xxx.yyy.255.251:1433 SYN ******S* Sep 1 03:56:30 24.45.180.116:3439 -> xxx.yyy.255.252:1433 SYN ******S* 41611 Sep 1 16:58:34 218.4.138.212:4085 -> xxx.yyy.1.5:6129 SYN ******S* Sep 1 16:58:34 218.4.138.212:4087 -> xxx.yyy.1.7:6129 SYN ******S* Sep 1 16:58:34 218.4.138.212:4088 -> xxx.yyy.1.8:6129 SYN ******S* Sep 1 16:58:34 218.4.138.212:4089 -> xxx.yyy.1.9:6129 SYN ******S* Sep 1 16:58:35 218.4.138.212:4091 -> xxx.yyy.1.11:6129 SYN ******S* Sep 1 16:58:35 218.4.138.212:4094 -> xxx.yyy.1.14:6129 SYN ******S* Sep 1 16:58:34 218.4.138.212:4098 -> xxx.yyy.1.18:6129 SYN ******S* Sep 1 16:58:35 218.4.138.212:4100 -> xxx.yyy.1.20:6129 SYN ******S* [...] Sep 1 17:09:30 218.4.138.212:4743 -> xxx.yyy.255.249:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4747 -> xxx.yyy.255.253:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4745 -> xxx.yyy.255.251:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4746 -> xxx.yyy.255.252:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4740 -> xxx.yyy.255.246:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4741 -> xxx.yyy.255.247:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4742 -> xxx.yyy.255.248:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4748 -> xxx.yyy.255.254:6129 SYN ******S* Sep 1 17:09:30 218.4.138.212:4744 -> xxx.yyy.255.250:6129 SYN ******S* 41229 Sep 1 12:17:49 196.40.60.93:4874 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 12:17:46 196.40.60.93:4876 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 12:17:49 196.40.60.93:4878 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 12:17:46 196.40.60.93:4879 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 12:17:49 196.40.60.93:4880 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 12:17:49 196.40.60.93:4888 -> xxx.yyy.1.11:1433 SYN ******S* Sep 1 12:17:49 196.40.60.93:4889 -> xxx.yyy.1.12:1433 SYN ******S* Sep 1 12:17:49 196.40.60.93:4890 -> xxx.yyy.1.13:1433 SYN ******S* [...] Sep 1 12:28:46 196.40.60.93:1302 -> xxx.yyy.255.234:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1306 -> xxx.yyy.255.238:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1312 -> xxx.yyy.255.244:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1309 -> xxx.yyy.255.241:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1311 -> xxx.yyy.255.243:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1319 -> xxx.yyy.255.251:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1316 -> xxx.yyy.255.248:1433 SYN ******S* Sep 1 12:28:46 196.40.60.93:1321 -> xxx.yyy.255.253:1433 SYN ******S* 39257 Sep 1 06:44:54 61.111.111.205:3703 -> xxx.yyy.1.0:901 SYN ******S* Sep 1 06:44:54 61.111.111.205:3704 -> xxx.yyy.1.1:901 SYN ******S* Sep 1 06:44:54 61.111.111.205:3705 -> xxx.yyy.1.2:901 SYN ******S* Sep 1 06:44:52 61.111.111.205:3707 -> xxx.yyy.1.4:901 SYN ******S* Sep 1 06:44:54 61.111.111.205:3706 -> xxx.yyy.1.3:901 SYN ******S* Sep 1 06:44:52 61.111.111.205:3710 -> xxx.yyy.1.7:901 SYN ******S* Sep 1 06:44:52 61.111.111.205:3709 -> xxx.yyy.1.6:901 SYN ******S* Sep 1 06:44:52 61.111.111.205:3708 -> xxx.yyy.1.5:901 SYN ******S* [...] Sep 1 08:51:29 61.111.111.205:3677 -> xxx.yyy.254.247:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3679 -> xxx.yyy.254.249:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3678 -> xxx.yyy.254.248:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3680 -> xxx.yyy.254.250:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3682 -> xxx.yyy.254.252:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3683 -> xxx.yyy.254.253:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3681 -> xxx.yyy.254.251:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3685 -> xxx.yyy.254.255:901 SYN ******S* Sep 1 08:51:29 61.111.111.205:3684 -> xxx.yyy.254.254:901 SYN ******S* 38532 Sep 1 21:00:37 68.85.118.80:43159 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 21:00:38 68.85.118.80:42931 -> xxx.yyy.1.4:1433 SYN ******S* Sep 1 21:00:35 68.85.118.80:42932 -> xxx.yyy.1.5:1433 SYN ******S* Sep 1 21:00:35 68.85.118.80:42933 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 21:00:35 68.85.118.80:42937 -> xxx.yyy.1.10:1433 SYN ******S* Sep 1 21:00:35 68.85.118.80:42940 -> xxx.yyy.1.13:1433 SYN ******S* Sep 1 21:00:35 68.85.118.80:42941 -> xxx.yyy.1.14:1433 SYN ******S* Sep 1 21:00:37 68.85.118.80:43146 -> xxx.yyy.1.15:1433 SYN ******S* [...] Sep 1 21:13:35 68.85.118.80:11237 -> xxx.yyy.255.214:1433 SYN ******S* Sep 1 21:13:35 68.85.118.80:11241 -> xxx.yyy.255.218:1433 SYN ******S* Sep 1 21:13:35 68.85.118.80:11633 -> xxx.yyy.255.212:1433 SYN ******S* Sep 1 21:13:35 68.85.118.80:11293 -> xxx.yyy.255.226:1433 SYN ******S* Sep 1 21:13:36 68.85.118.80:11305 -> xxx.yyy.255.231:1433 SYN ******S* Sep 1 21:13:36 68.85.118.80:11313 -> xxx.yyy.255.239:1433 SYN ******S* Sep 1 21:13:36 68.85.118.80:11317 -> xxx.yyy.255.243:1433 SYN ******S* Sep 1 21:13:36 68.85.118.80:11693 -> xxx.yyy.255.253:1433 SYN ******S* Sep 1 21:13:36 68.85.118.80:11325 -> xxx.yyy.255.251:1433 SYN ******S* 36068 Sep 1 15:53:40 209.162.235.102:10953 -> xxx.yyy.1.10:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:10959 -> xxx.yyy.1.12:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:10973 -> xxx.yyy.1.16:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:10974 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:10975 -> xxx.yyy.1.1:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:11007 -> xxx.yyy.1.22:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:11102 -> xxx.yyy.1.27:1433 SYN ******S* Sep 1 15:53:40 209.162.235.102:11201 -> xxx.yyy.1.41:1433 SYN ******S* [...] Sep 1 17:23:29 209.162.235.102:21157 -> xxx.yyy.255.247:1433 SYN ******S* Sep 1 17:23:30 209.162.235.102:21424 -> xxx.yyy.255.250:1433 SYN ******S* Sep 1 17:23:31 209.162.235.102:21479 -> xxx.yyy.255.254:1433 SYN ******S* Sep 1 17:23:35 209.162.235.102:21157 -> xxx.yyy.255.247:1433 SYN ******S* Sep 1 17:23:36 209.162.235.102:21408 -> xxx.yyy.255.249:1433 SYN ******S* Sep 1 17:23:36 209.162.235.102:21424 -> xxx.yyy.255.250:1433 SYN ******S* Sep 1 17:23:36 209.162.235.102:21438 -> xxx.yyy.255.251:1433 SYN ******S* Sep 1 17:23:36 209.162.235.102:21455 -> xxx.yyy.255.252:1433 SYN ******S* 35856 Sep 1 21:07:04 12.146.143.77:2843 -> xxx.yyy.1.3:1433 SYN ******S* Sep 1 21:07:04 12.146.143.77:2842 -> xxx.yyy.1.2:1433 SYN ******S* Sep 1 21:07:07 12.146.143.77:2847 -> xxx.yyy.1.7:1433 SYN ******S* Sep 1 21:07:04 12.146.143.77:2850 -> xxx.yyy.1.10:1433 SYN ******S* Sep 1 21:07:07 12.146.143.77:2848 -> xxx.yyy.1.8:1433 SYN ******S* Sep 1 21:07:04 12.146.143.77:2849 -> xxx.yyy.1.9:1433 SYN ******S* Sep 1 21:07:07 12.146.143.77:2846 -> xxx.yyy.1.6:1433 SYN ******S* Sep 1 21:07:07 12.146.143.77:2855 -> xxx.yyy.1.15:1433 SYN ******S* [...] Sep 1 21:26:57 12.146.143.77:2572 -> xxx.yyy.255.245:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2569 -> xxx.yyy.255.242:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2573 -> xxx.yyy.255.246:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2577 -> xxx.yyy.255.250:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2554 -> xxx.yyy.255.227:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2578 -> xxx.yyy.255.251:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2564 -> xxx.yyy.255.237:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2559 -> xxx.yyy.255.232:1433 SYN ******S* Sep 1 21:26:57 12.146.143.77:2575 -> xxx.yyy.255.248:1433 SYN ******S* 33711 Sep 1 20:35:27 208.60.215.98:2023 -> xxx.yyy.1.13:1433 SYN ******S* Sep 1 20:35:27 208.60.215.98:2025 -> xxx.yyy.1.15:1433 SYN ******S* Sep 1 20:35:27 208.60.215.98:2026 -> xxx.yyy.1.16:1433 SYN ******S* Sep 1 20:35:24 208.60.215.98:2055 -> xxx.yyy.1.37:1433 SYN ******S* Sep 1 20:35:24 208.60.215.98:2056 -> xxx.yyy.1.38:1433 SYN ******S* Sep 1 20:35:27 208.60.215.98:2069 -> xxx.yyy.1.49:1433 SYN ******S* Sep 1 20:35:27 208.60.215.98:2070 -> xxx.yyy.1.50:1433 SYN ******S* Sep 1 20:35:24 208.60.215.98:2071 -> xxx.yyy.1.51:1433 SYN ******S* [...] Sep 1 20:46:23 208.60.215.98:1178 -> xxx.yyy.255.248:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1175 -> xxx.yyy.255.245:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1173 -> xxx.yyy.255.243:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1171 -> xxx.yyy.255.242:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1183 -> xxx.yyy.255.253:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1185 -> xxx.yyy.255.254:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1182 -> xxx.yyy.255.252:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1181 -> xxx.yyy.255.251:1433 SYN ******S* Sep 1 20:46:23 208.60.215.98:1180 -> xxx.yyy.255.250:1433 SYN ******S* 32781 Sep 1 10:08:31 211.225.166.122:1081 -> xxx.yyy.161.163:901 SYN ******S* Sep 1 10:08:31 211.225.166.122:1091 -> xxx.yyy.161.173:901 SYN ******S* Sep 1 10:08:28 211.225.166.122:1085 -> xxx.yyy.161.167:901 SYN ******S* Sep 1 10:08:28 211.225.166.122:1088 -> xxx.yyy.161.170:901 SYN ******S* Sep 1 10:08:31 211.225.166.122:1089 -> xxx.yyy.161.171:901 SYN ******S* Sep 1 10:08:31 211.225.166.122:1096 -> xxx.yyy.161.178:901 SYN ******S* Sep 1 10:08:31 211.225.166.122:1097 -> xxx.yyy.161.179:901 SYN ******S* Sep 1 10:08:30 211.225.166.122:1115 -> xxx.yyy.161.183:901 SYN ******S* [...] Sep 1 10:49:24 211.225.166.122:4099 -> xxx.yyy.254.249:901 SYN ******S* Sep 1 10:49:24 211.225.166.122:4092 -> xxx.yyy.254.242:901 SYN ******S* Sep 1 10:49:24 211.225.166.122:4090 -> xxx.yyy.254.240:901 SYN ******S* Sep 1 10:49:24 211.225.166.122:4094 -> xxx.yyy.254.244:901 SYN ******S* Sep 1 10:49:24 211.225.166.122:4095 -> xxx.yyy.254.245:901 SYN ******S* Sep 1 10:49:24 211.225.166.122:4101 -> xxx.yyy.254.251:901 SYN ******S* Sep 1 10:49:26 211.225.166.122:4106 -> xxx.yyy.254.255:901 SYN ******S* Sep 1 10:49:26 211.225.166.122:4105 -> xxx.yyy.254.254:901 SYN ******S* 30800 Sep 1 23:12:21 211.106.197.17:1319 -> xxx.yyy.1.2:4899 SYN ******S* Sep 1 23:12:21 211.106.197.17:1318 -> xxx.yyy.1.1:4899 SYN ******S* Sep 1 23:12:21 211.106.197.17:1321 -> xxx.yyy.1.4:4899 SYN ******S* Sep 1 23:12:21 211.106.197.17:1323 -> xxx.yyy.1.6:4899 SYN ******S* Sep 1 23:12:21 211.106.197.17:1325 -> xxx.yyy.1.8:4899 SYN ******S* Sep 1 23:12:21 211.106.197.17:1326 -> xxx.yyy.1.9:4899 SYN ******S* Sep 1 23:12:22 211.106.197.17:1328 -> xxx.yyy.1.11:4899 SYN ******S* Sep 1 23:12:22 211.106.197.17:1331 -> xxx.yyy.1.14:4899 SYN ******S* [...] Sep 1 23:16:48 211.106.197.17:2599 -> xxx.yyy.255.232:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2609 -> xxx.yyy.255.242:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2606 -> xxx.yyy.255.239:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2613 -> xxx.yyy.255.246:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2612 -> xxx.yyy.255.245:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2615 -> xxx.yyy.255.248:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2618 -> xxx.yyy.255.251:4899 SYN ******S* Sep 1 23:16:48 211.106.197.17:2616 -> xxx.yyy.255.249:4899 SYN ******S* 24136 Sep 1 03:49:24 221.168.138.192:3132 -> xxx.yyy.161.162:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3134 -> xxx.yyy.161.164:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3137 -> xxx.yyy.161.167:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3139 -> xxx.yyy.161.169:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3140 -> xxx.yyy.161.170:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3133 -> xxx.yyy.161.163:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3141 -> xxx.yyy.161.171:901 SYN ******S* Sep 1 03:49:24 221.168.138.192:3135 -> xxx.yyy.161.165:901 SYN ******S* [...] Sep 1 04:30:06 221.168.138.192:4012 -> xxx.yyy.254.250:901 SYN ******S* Sep 1 04:30:06 221.168.138.192:4015 -> xxx.yyy.254.253:901 SYN ******S* Sep 1 04:30:06 221.168.138.192:4013 -> xxx.yyy.254.251:901 SYN ******S* Sep 1 04:30:06 221.168.138.192:4008 -> xxx.yyy.254.246:901 SYN ******S* Sep 1 04:30:06 221.168.138.192:4009 -> xxx.yyy.254.247:901 SYN ******S* Sep 1 04:30:06 221.168.138.192:4014 -> xxx.yyy.254.252:901 SYN ******S* Sep 1 04:30:08 221.168.138.192:4087 -> xxx.yyy.254.255:901 SYN ******S* Sep 1 04:30:08 221.168.138.192:4086 -> xxx.yyy.254.254:901 SYN ******S* 22809 Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.0:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.4:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.6:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.7:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.8:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.11:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.2:22 SYN ******S* Sep 1 11:34:35 66.111.192.21:43172 -> xxx.yyy.1.1:22 SYN ******S* [...] Sep 1 11:38:44 66.111.192.21:44401 -> xxx.yyy.241.184:22 SYN ******S* Sep 1 11:38:47 66.111.192.21:44403 -> xxx.yyy.241.87:22 SYN ******S* Sep 1 11:38:47 66.111.192.21:44404 -> xxx.yyy.243.44:22 SYN ******S* Sep 1 11:38:47 66.111.192.21:44405 -> xxx.yyy.243.45:22 SYN ******S* Sep 1 11:38:49 66.111.192.21:44406 -> xxx.yyy.241.28:22 SYN ******S* Sep 1 11:38:50 66.111.192.21:44407 -> xxx.yyy.241.184:22 SYN ******S* Sep 1 11:38:50 66.111.192.21:44408 -> xxx.yyy.243.44:22 SYN ******S* Sep 1 11:38:53 66.111.192.21:44409 -> xxx.yyy.241.87:22 SYN ******S* 21653 Sep 1 07:17:24 222.104.226.204:4087 -> xxx.yyy.1.1:901 SYN ******S* Sep 1 07:17:24 222.104.226.204:4088 -> xxx.yyy.1.2:901 SYN ******S* Sep 1 07:17:24 222.104.226.204:4086 -> xxx.yyy.1.0:901 SYN ******S* Sep 1 07:17:23 222.104.226.204:4090 -> xxx.yyy.1.4:901 SYN ******S* Sep 1 07:17:24 222.104.226.204:4089 -> xxx.yyy.1.3:901 SYN ******S* Sep 1 07:17:25 222.104.226.204:4348 -> xxx.yyy.1.5:901 SYN ******S* Sep 1 07:17:25 222.104.226.204:4350 -> xxx.yyy.1.7:901 SYN ******S* Sep 1 07:17:25 222.104.226.204:4351 -> xxx.yyy.1.8:901 SYN ******S* [...] Sep 1 08:35:28 222.104.226.204:1677 -> xxx.yyy.181.167:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1681 -> xxx.yyy.181.171:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1687 -> xxx.yyy.181.177:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1693 -> xxx.yyy.181.183:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1690 -> xxx.yyy.181.180:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1692 -> xxx.yyy.181.182:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1694 -> xxx.yyy.181.184:901 SYN ******S* Sep 1 08:35:28 222.104.226.204:1678 -> xxx.yyy.181.168:901 SYN ******S* 21444 Sep 1 07:40:31 220.70.103.100:1032 -> xxx.yyy.161.163:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1033 -> xxx.yyy.161.164:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1035 -> xxx.yyy.161.166:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1037 -> xxx.yyy.161.168:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1038 -> xxx.yyy.161.169:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1031 -> xxx.yyy.161.162:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1041 -> xxx.yyy.161.172:901 SYN ******S* Sep 1 07:40:31 220.70.103.100:1042 -> xxx.yyy.161.173:901 SYN ******S* [...] Sep 1 08:20:56 220.70.103.100:1551 -> xxx.yyy.254.237:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1557 -> xxx.yyy.254.243:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1559 -> xxx.yyy.254.245:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1560 -> xxx.yyy.254.246:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1567 -> xxx.yyy.254.253:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1558 -> xxx.yyy.254.244:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1561 -> xxx.yyy.254.247:901 SYN ******S* Sep 1 08:20:56 220.70.103.100:1564 -> xxx.yyy.254.250:901 SYN ******S* Sep 1 08:20:58 220.70.103.100:1569 -> xxx.yyy.254.255:901 SYN ******S* 20420 Sep 1 10:21:32 211.170.199.82:4097 -> xxx.yyy.1.2:901 SYN ******S* Sep 1 10:21:33 211.170.199.82:4098 -> xxx.yyy.1.3:901 SYN ******S* Sep 1 10:21:32 211.170.199.82:4095 -> xxx.yyy.1.0:901 SYN ******S* Sep 1 10:21:33 211.170.199.82:4096 -> xxx.yyy.1.1:901 SYN ******S* Sep 1 10:21:34 211.170.199.82:4198 -> xxx.yyy.1.23:901 SYN ******S* Sep 1 10:21:35 211.170.199.82:4189 -> xxx.yyy.1.14:901 SYN ******S* Sep 1 10:21:35 211.170.199.82:4191 -> xxx.yyy.1.16:901 SYN ******S* Sep 1 10:21:35 211.170.199.82:4197 -> xxx.yyy.1.22:901 SYN ******S* [...] Sep 1 12:01:01 211.170.199.82:4119 -> xxx.yyy.227.74:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4118 -> xxx.yyy.227.73:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4121 -> xxx.yyy.227.76:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4124 -> xxx.yyy.227.79:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4129 -> xxx.yyy.227.84:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4126 -> xxx.yyy.227.81:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4128 -> xxx.yyy.227.83:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4123 -> xxx.yyy.227.78:901 SYN ******S* Sep 1 12:01:01 211.170.199.82:4127 -> xxx.yyy.227.82:901 SYN ******S* 18854 Sep 1 09:06:00 159.178.96.176:2474 -> xxx.yyy.1.1:80 SYN ******S* Sep 1 09:06:00 159.178.96.176:2475 -> xxx.yyy.1.2:80 SYN ******S* Sep 1 09:05:59 159.178.96.176:2485 -> xxx.yyy.1.12:80 SYN ******S* Sep 1 09:06:00 159.178.96.176:2484 -> xxx.yyy.1.11:80 SYN ******S* Sep 1 09:05:59 159.178.96.176:2487 -> xxx.yyy.1.14:80 SYN ******S* Sep 1 09:05:59 159.178.96.176:2486 -> xxx.yyy.1.13:80 SYN ******S* Sep 1 09:05:59 159.178.96.176:2488 -> xxx.yyy.1.15:80 SYN ******S* Sep 1 09:06:00 159.178.96.176:2489 -> xxx.yyy.1.16:80 SYN ******S* [...] Sep 1 09:14:18 159.178.96.176:4491 -> xxx.yyy.255.159:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4511 -> xxx.yyy.255.174:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4695 -> xxx.yyy.255.224:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4692 -> xxx.yyy.255.221:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4488 -> xxx.yyy.255.156:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4676 -> xxx.yyy.255.205:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4708 -> xxx.yyy.255.237:80 SYN ******S* Sep 1 09:14:18 159.178.96.176:4480 -> xxx.yyy.255.150:80 SYN ******S* 15695 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions