[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 6 05:23:18 212.89.8.121:1615 -> xxx.yyy.1.1:80 SYN ******S* Sep 6 05:23:18 212.89.8.121:1616 -> xxx.yyy.1.2:80 SYN ******S* Sep 6 05:23:18 212.89.8.121:1617 -> xxx.yyy.1.3:80 SYN ******S* Sep 6 05:23:21 212.89.8.121:1619 -> xxx.yyy.1.5:80 SYN ******S* Sep 6 05:23:21 212.89.8.121:1618 -> xxx.yyy.1.4:80 SYN ******S* Sep 6 05:23:21 212.89.8.121:1620 -> xxx.yyy.1.6:80 SYN ******S* Sep 6 05:23:21 212.89.8.121:1622 -> xxx.yyy.1.7:80 SYN ******S* Sep 6 05:23:21 212.89.8.121:1623 -> xxx.yyy.1.8:80 SYN ******S* [...] Sep 6 13:11:23 212.89.8.121:4229 -> xxx.yyy.255.247:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4230 -> xxx.yyy.255.248:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4226 -> xxx.yyy.255.244:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4227 -> xxx.yyy.255.245:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4234 -> xxx.yyy.255.252:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4235 -> xxx.yyy.255.253:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4233 -> xxx.yyy.255.251:6129 SYN ******S* Sep 6 13:11:23 212.89.8.121:4236 -> xxx.yyy.255.254:6129 SYN ******S* 133997 Sep 6 13:12:44 213.134.250.140:3132 -> xxx.yyy.1.0:1433 SYN ******S* Sep 6 13:12:44 213.134.250.140:3133 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 13:12:41 213.134.250.140:3135 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 13:12:44 213.134.250.140:3134 -> xxx.yyy.1.2:1433 SYN ******S* Sep 6 13:12:41 213.134.250.140:3136 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 13:12:44 213.134.250.140:3137 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 13:12:44 213.134.250.140:3138 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 13:12:44 213.134.250.140:3139 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 6 14:17:56 213.134.250.140:3283 -> xxx.yyy.255.242:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3282 -> xxx.yyy.255.241:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3281 -> xxx.yyy.255.240:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3294 -> xxx.yyy.255.253:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3293 -> xxx.yyy.255.252:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3292 -> xxx.yyy.255.251:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3291 -> xxx.yyy.255.250:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3290 -> xxx.yyy.255.249:1433 SYN ******S* Sep 6 14:17:56 213.134.250.140:3289 -> xxx.yyy.255.248:1433 SYN ******S* 107309 Sep 6 14:58:58 24.57.54.235:1630 -> xxx.yyy.1.43:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1631 -> xxx.yyy.1.42:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1632 -> xxx.yyy.1.41:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1638 -> xxx.yyy.1.35:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1637 -> xxx.yyy.1.36:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1634 -> xxx.yyy.1.39:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1643 -> xxx.yyy.1.30:1433 SYN ******S* Sep 6 14:58:58 24.57.54.235:1641 -> xxx.yyy.1.32:1433 SYN ******S* [...] Sep 6 18:47:42 24.57.54.235:1232 -> xxx.yyy.255.233:1433 SYN ******S* Sep 6 18:47:42 24.57.54.235:1242 -> xxx.yyy.255.236:1433 SYN ******S* Sep 6 18:47:42 24.57.54.235:1240 -> xxx.yyy.255.235:1433 SYN ******S* Sep 6 18:47:42 24.57.54.235:1238 -> xxx.yyy.255.234:1433 SYN ******S* Sep 6 18:47:43 24.57.54.235:1247 -> xxx.yyy.255.237:1433 SYN ******S* Sep 6 18:47:44 24.57.54.235:1305 -> xxx.yyy.255.245:1433 SYN ******S* Sep 6 18:47:44 24.57.54.235:1310 -> xxx.yyy.255.246:1433 SYN ******S* Sep 6 18:47:45 24.57.54.235:1340 -> xxx.yyy.255.252:1433 SYN ******S* 95942 Sep 6 03:12:11 216.45.168.89:3496 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 03:12:11 216.45.168.89:3497 -> xxx.yyy.1.2:1433 SYN ******S* Sep 6 03:12:11 216.45.168.89:3498 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 03:12:08 216.45.168.89:3499 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 03:12:11 216.45.168.89:3500 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 03:12:11 216.45.168.89:3501 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 03:12:11 216.45.168.89:3502 -> xxx.yyy.1.7:1433 SYN ******S* Sep 6 03:12:11 216.45.168.89:3503 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 6 03:23:50 216.45.168.89:2109 -> xxx.yyy.255.244:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2112 -> xxx.yyy.255.247:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2113 -> xxx.yyy.255.248:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2114 -> xxx.yyy.255.249:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2115 -> xxx.yyy.255.250:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2116 -> xxx.yyy.255.251:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2117 -> xxx.yyy.255.252:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2118 -> xxx.yyy.255.253:1433 SYN ******S* Sep 6 03:23:50 216.45.168.89:2119 -> xxx.yyy.255.254:1433 SYN ******S* 69324 Sep 6 18:10:12 220.234.95.108:3591 -> xxx.yyy.1.3:8535 SYN ******S* Sep 6 18:10:12 220.234.95.108:3592 -> xxx.yyy.1.4:8535 SYN ******S* Sep 6 18:10:13 220.234.95.108:3594 -> xxx.yyy.1.6:8535 SYN ******S* Sep 6 18:10:13 220.234.95.108:3595 -> xxx.yyy.1.7:8535 SYN ******S* Sep 6 18:10:13 220.234.95.108:3598 -> xxx.yyy.1.10:8535 SYN ******S* Sep 6 18:10:11 220.234.95.108:3599 -> xxx.yyy.1.11:8535 SYN ******S* Sep 6 18:10:11 220.234.95.108:3588 -> xxx.yyy.1.0:8535 SYN ******S* Sep 6 18:10:13 220.234.95.108:3601 -> xxx.yyy.1.13:8535 SYN ******S* [...] Sep 6 20:17:47 220.234.95.108:3088 -> xxx.yyy.255.236:8535 SYN ******S* Sep 6 20:17:47 220.234.95.108:3092 -> xxx.yyy.255.240:8535 SYN ******S* Sep 6 20:17:47 220.234.95.108:3094 -> xxx.yyy.255.242:8535 SYN ******S* Sep 6 20:17:47 220.234.95.108:3093 -> xxx.yyy.255.241:8535 SYN ******S* Sep 6 20:17:47 220.234.95.108:3098 -> xxx.yyy.255.246:8535 SYN ******S* Sep 6 20:17:48 220.234.95.108:3103 -> xxx.yyy.255.251:8535 SYN ******S* Sep 6 20:17:48 220.234.95.108:3102 -> xxx.yyy.255.250:8535 SYN ******S* Sep 6 20:17:48 220.234.95.108:3105 -> xxx.yyy.255.252:8535 SYN ******S* 66357 Sep 6 08:00:42 130.228.96.156:2890 -> xxx.yyy.1.1:62976 SYN ******S* Sep 6 08:00:43 130.228.96.156:2892 -> xxx.yyy.1.2:62976 SYN ******S* Sep 6 08:00:41 130.228.96.156:2894 -> xxx.yyy.1.3:62976 SYN ******S* Sep 6 08:00:44 130.228.96.156:2896 -> xxx.yyy.1.4:62976 SYN ******S* Sep 6 08:00:41 130.228.96.156:2901 -> xxx.yyy.1.6:62976 SYN ******S* Sep 6 08:00:41 130.228.96.156:2902 -> xxx.yyy.1.7:62976 SYN ******S* Sep 6 08:00:41 130.228.96.156:2905 -> xxx.yyy.1.8:62976 SYN ******S* Sep 6 08:00:44 130.228.96.156:2907 -> xxx.yyy.1.9:62976 SYN ******S* [...] Sep 6 08:12:31 130.228.96.156:3548 -> xxx.yyy.255.242:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3546 -> xxx.yyy.255.241:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3556 -> xxx.yyy.255.246:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3568 -> xxx.yyy.255.252:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3572 -> xxx.yyy.255.254:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3566 -> xxx.yyy.255.251:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3562 -> xxx.yyy.255.249:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3564 -> xxx.yyy.255.250:62976 SYN ******S* Sep 6 08:12:31 130.228.96.156:3570 -> xxx.yyy.255.253:62976 SYN ******S* 63073 Sep 6 00:54:26 151.100.2.10:3028 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3029 -> xxx.yyy.1.2:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3030 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3031 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3032 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3033 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3037 -> xxx.yyy.1.7:1433 SYN ******S* Sep 6 00:54:26 151.100.2.10:3038 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 6 01:14:25 151.100.2.10:4913 -> xxx.yyy.255.253:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4786 -> xxx.yyy.255.233:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4845 -> xxx.yyy.255.244:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4798 -> xxx.yyy.255.236:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4795 -> xxx.yyy.255.235:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4802 -> xxx.yyy.255.239:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4910 -> xxx.yyy.255.252:1433 SYN ******S* Sep 6 01:14:25 151.100.2.10:4891 -> xxx.yyy.255.249:1433 SYN ******S* 52948 Sep 6 09:30:52 222.134.202.42:1047 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 09:30:52 222.134.202.42:1069 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 09:30:52 222.134.202.42:1077 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 09:30:52 222.134.202.42:1085 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 09:30:53 222.134.202.42:1106 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 09:30:50 222.134.202.42:1109 -> xxx.yyy.1.7:1433 SYN ******S* Sep 6 09:30:50 222.134.202.42:1116 -> xxx.yyy.1.8:1433 SYN ******S* Sep 6 09:30:50 222.134.202.42:1132 -> xxx.yyy.1.11:1433 SYN ******S* [...] Sep 6 11:43:14 222.134.202.42:1818 -> xxx.yyy.148.201:1433 SYN ******S* Sep 6 11:43:14 222.134.202.42:1829 -> xxx.yyy.148.205:1433 SYN ******S* Sep 6 11:43:14 222.134.202.42:1842 -> xxx.yyy.148.210:1433 SYN ******S* Sep 6 11:43:14 222.134.202.42:1831 -> xxx.yyy.148.207:1433 SYN ******S* Sep 6 11:43:14 222.134.202.42:1849 -> xxx.yyy.148.213:1433 SYN ******S* Sep 6 11:43:14 222.134.202.42:1854 -> xxx.yyy.148.214:1433 SYN ******S* Sep 6 11:43:14 222.134.202.42:2003 -> xxx.yyy.148.217:1433 SYN ******S* Sep 6 11:43:15 222.134.202.42:1468 -> xxx.yyy.148.118:1433 SYN ******S* 40985 Sep 6 23:46:52 134.2.125.210:3414 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 23:46:55 134.2.125.210:3417 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 23:46:55 134.2.125.210:3418 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 23:46:55 134.2.125.210:3419 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 23:46:55 134.2.125.210:3420 -> xxx.yyy.1.7:1433 SYN ******S* Sep 6 23:46:55 134.2.125.210:3422 -> xxx.yyy.1.9:1433 SYN ******S* Sep 6 23:46:52 134.2.125.210:3423 -> xxx.yyy.1.10:1433 SYN ******S* Sep 6 23:46:52 134.2.125.210:3424 -> xxx.yyy.1.11:1433 SYN ******S* [...] Sep 6 23:58:33 134.2.125.210:2020 -> xxx.yyy.255.242:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2022 -> xxx.yyy.255.244:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2021 -> xxx.yyy.255.243:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2023 -> xxx.yyy.255.245:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2025 -> xxx.yyy.255.247:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2026 -> xxx.yyy.255.248:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2027 -> xxx.yyy.255.249:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2029 -> xxx.yyy.255.251:1433 SYN ******S* Sep 6 23:58:33 134.2.125.210:2028 -> xxx.yyy.255.250:1433 SYN ******S* 39867 Sep 6 13:38:08 151.205.10.194:2454 -> xxx.yyy.10.0:1433 SYN ******S* Sep 6 13:38:08 151.205.10.194:2460 -> xxx.yyy.10.3:1433 SYN ******S* Sep 6 13:38:08 151.205.10.194:2461 -> xxx.yyy.10.4:1433 SYN ******S* Sep 6 13:38:09 151.205.10.194:2463 -> xxx.yyy.10.5:1433 SYN ******S* Sep 6 13:38:09 151.205.10.194:2481 -> xxx.yyy.10.6:1433 SYN ******S* Sep 6 13:38:08 151.205.10.194:2458 -> xxx.yyy.10.2:1433 SYN ******S* Sep 6 13:38:08 151.205.10.194:2456 -> xxx.yyy.10.1:1433 SYN ******S* Sep 6 13:38:13 151.205.10.194:2553 -> xxx.yyy.10.7:1433 SYN ******S* [...] Sep 6 15:31:17 151.205.10.194:2683 -> xxx.yyy.135.61:1433 SYN ******S* Sep 6 15:31:17 151.205.10.194:2667 -> xxx.yyy.135.45:1433 SYN ******S* Sep 6 15:31:17 151.205.10.194:2684 -> xxx.yyy.135.62:1433 SYN ******S* Sep 6 15:31:18 151.205.10.194:2686 -> xxx.yyy.135.64:1433 SYN ******S* Sep 6 15:31:18 151.205.10.194:2687 -> xxx.yyy.135.65:1433 SYN ******S* Sep 6 15:31:18 151.205.10.194:2670 -> xxx.yyy.135.48:1433 SYN ******S* Sep 6 15:31:18 151.205.10.194:2671 -> xxx.yyy.135.49:1433 SYN ******S* Sep 6 15:31:18 151.205.10.194:2688 -> xxx.yyy.135.66:1433 SYN ******S* Sep 6 15:31:18 151.205.10.194:2639 -> xxx.yyy.135.17:1433 SYN ******S* 32460 Sep 6 00:17:11 24.214.214.61:4629 -> xxx.yyy.1.0:1433 SYN ******S* Sep 6 00:17:11 24.214.214.61:4630 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 00:17:11 24.214.214.61:4631 -> xxx.yyy.1.2:1433 SYN ******S* Sep 6 00:17:12 24.214.214.61:4637 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 00:17:12 24.214.214.61:4638 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 00:17:12 24.214.214.61:4642 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 00:17:12 24.214.214.61:4643 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 00:17:12 24.214.214.61:4645 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 6 11:27:26 24.214.214.61:3246 -> xxx.yyy.95.247:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3240 -> xxx.yyy.95.245:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3234 -> xxx.yyy.95.244:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3280 -> xxx.yyy.95.255:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3276 -> xxx.yyy.95.254:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3270 -> xxx.yyy.95.253:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3268 -> xxx.yyy.95.252:1433 SYN ******S* Sep 6 11:27:27 24.214.214.61:3264 -> xxx.yyy.95.251:1433 SYN ******S* 26417 Sep 6 11:30:27 80.180.211.71:3679 -> xxx.yyy.1.0:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3680 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3682 -> xxx.yyy.1.2:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3683 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3684 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3685 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3686 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 11:30:30 80.180.211.71:3687 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 6 13:10:06 80.180.211.71:3268 -> xxx.yyy.111.228:1433 SYN ******S* Sep 6 13:10:06 80.180.211.71:3287 -> xxx.yyy.111.229:1433 SYN ******S* Sep 6 13:10:06 80.180.211.71:3297 -> xxx.yyy.111.231:1433 SYN ******S* Sep 6 13:10:06 80.180.211.71:3295 -> xxx.yyy.111.230:1433 SYN ******S* Sep 6 13:10:06 80.180.211.71:3311 -> xxx.yyy.111.233:1433 SYN ******S* Sep 6 13:10:06 80.180.211.71:3306 -> xxx.yyy.111.232:1433 SYN ******S* Sep 6 13:10:06 80.180.211.71:3323 -> xxx.yyy.111.234:1433 SYN ******S* Sep 6 13:10:07 80.180.211.71:3328 -> xxx.yyy.111.235:1433 SYN ******S* Sep 6 13:10:07 80.180.211.71:3330 -> xxx.yyy.111.236:1433 SYN ******S* 26274 [...] 21759 Sep 6 14:26:33 193.198.140.198:1898 -> xxx.yyy.78.68:1433 SYN ******S* Sep 6 14:26:30 193.198.140.198:1902 -> xxx.yyy.78.69:1433 SYN ******S* Sep 6 14:26:30 193.198.140.198:1910 -> xxx.yyy.78.71:1433 SYN ******S* Sep 6 14:26:33 193.198.140.198:1914 -> xxx.yyy.78.72:1433 SYN ******S* Sep 6 14:26:30 193.198.140.198:1941 -> xxx.yyy.78.78:1433 SYN ******S* Sep 6 14:26:30 193.198.140.198:1949 -> xxx.yyy.78.80:1433 SYN ******S* Sep 6 14:26:30 193.198.140.198:1957 -> xxx.yyy.78.82:1433 SYN ******S* Sep 6 14:26:33 193.198.140.198:1961 -> xxx.yyy.78.83:1433 SYN ******S* [...] Sep 6 15:12:24 193.198.140.198:1340 -> xxx.yyy.129.108:1433 SYN ******S* Sep 6 15:12:24 193.198.140.198:1337 -> xxx.yyy.129.107:1433 SYN ******S* Sep 6 15:12:24 193.198.140.198:1334 -> xxx.yyy.129.106:1433 SYN ******S* Sep 6 15:12:25 193.198.140.198:1490 -> xxx.yyy.129.112:1433 SYN ******S* Sep 6 15:12:26 193.198.140.198:1519 -> xxx.yyy.129.113:1433 SYN ******S* Sep 6 15:12:27 193.198.140.198:1544 -> xxx.yyy.129.114:1433 SYN ******S* Sep 6 15:12:27 193.198.140.198:1546 -> xxx.yyy.129.115:1433 SYN ******S* Sep 6 15:12:27 193.198.140.198:1547 -> xxx.yyy.129.116:1433 SYN ******S* Sep 6 15:12:27 193.198.140.198:1549 -> xxx.yyy.129.117:1433 SYN ******S* 13804 Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.1:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.2:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.3:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.4:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.5:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.6:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.8:111 SYN ******S* Sep 6 17:33:11 217.71.208.70:111 -> xxx.yyy.1.7:111 SYN ******S* [...] Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.246:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.247:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.248:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.249:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.250:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.251:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.252:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.253:111 SYN ******S* Sep 6 17:33:24 217.71.208.70:111 -> xxx.yyy.255.254:111 SYN ******S* 11116 Sep 6 23:54:31 60.35.87.165:3351 -> xxx.yyy.71.162:5554 SYN ******S* Sep 6 23:54:31 60.35.87.165:3353 -> xxx.yyy.71.164:5554 SYN ******S* Sep 6 23:54:34 60.35.87.165:4032 -> xxx.yyy.71.164:9898 SYN ******S* Sep 6 23:54:31 60.35.87.165:3354 -> xxx.yyy.71.165:5554 SYN ******S* Sep 6 23:54:31 60.35.87.165:3349 -> xxx.yyy.71.160:5554 SYN ******S* Sep 6 23:54:32 60.35.87.165:3576 -> xxx.yyy.71.160:1023 SYN ******S* Sep 6 23:54:34 60.35.87.165:4028 -> xxx.yyy.71.160:9898 SYN ******S* Sep 6 23:54:31 60.35.87.165:3352 -> xxx.yyy.71.163:5554 SYN ******S* [...] Sep 6 23:56:03 60.35.87.165:3053 -> xxx.yyy.92.9:9898 SYN ******S* Sep 6 23:56:03 60.35.87.165:3088 -> xxx.yyy.92.18:9898 SYN ******S* Sep 6 23:56:03 60.35.87.165:3090 -> xxx.yyy.92.20:9898 SYN ******S* Sep 6 23:56:03 60.35.87.165:3082 -> xxx.yyy.92.12:9898 SYN ******S* Sep 6 23:56:03 60.35.87.165:3083 -> xxx.yyy.92.13:9898 SYN ******S* Sep 6 23:56:03 60.35.87.165:3087 -> xxx.yyy.92.17:9898 SYN ******S* Sep 6 23:56:04 60.35.87.165:3092 -> xxx.yyy.92.21:9898 SYN ******S* Sep 6 23:56:04 60.35.87.165:3093 -> xxx.yyy.92.22:9898 SYN ******S* Sep 6 23:56:04 60.35.87.165:3094 -> xxx.yyy.92.23:9898 SYN ******S* 8399 Sep 6 00:00:12 65.54.188.52:62536 -> xxx.yyy.241.20:80 SYN ******S* Sep 6 00:00:12 65.54.188.52:62367 -> xxx.yyy.241.255:80 SYN ******S* Sep 6 00:00:12 65.54.188.52:62535 -> xxx.yyy.241.179:80 SYN ******S* Sep 6 00:00:12 65.54.188.52:62582 -> xxx.yyy.1.60:80 SYN ******S* Sep 6 00:00:12 65.54.188.52:62632 -> xxx.yyy.1.13:80 SYN ******S* Sep 6 00:00:12 65.54.188.52:62724 -> xxx.yyy.210.5:80 SYN ******S* Sep 6 00:00:13 65.54.188.52:63162 -> xxx.yyy.241.29:80 SYN ******S* Sep 6 00:00:14 65.54.188.52:63561 -> xxx.yyy.234.52:80 SYN ******S* [...] Sep 6 23:50:06 65.54.188.52:16210 -> xxx.yyy.249.31:80 SYN ******S* Sep 6 23:50:09 65.54.188.52:16241 -> xxx.yyy.227.252:80 SYN ******S* Sep 6 23:50:06 65.54.188.52:16318 -> xxx.yyy.225.122:204 SYN ******S* Sep 6 23:50:07 65.54.188.52:16478 -> xxx.yyy.1.13:80 SYN ******S* Sep 6 23:50:09 65.54.188.52:16667 -> xxx.yyy.241.179:80 SYN ******S* Sep 6 23:50:15 65.54.188.52:16241 -> xxx.yyy.227.252:80 SYN ******S* Sep 6 23:50:15 65.54.188.52:16210 -> xxx.yyy.249.31:80 SYN ******S* Sep 6 23:50:16 65.54.188.52:16318 -> xxx.yyy.225.122:204 SYN ******S* 7952 Sep 6 23:53:36 221.190.110.133:2285 -> xxx.yyy.133.245:5554 SYN ******S* Sep 6 23:53:36 221.190.110.133:2268 -> xxx.yyy.133.239:5554 SYN ******S* Sep 6 23:53:37 221.190.110.133:2979 -> xxx.yyy.133.239:1023 SYN ******S* Sep 6 23:53:39 221.190.110.133:1238 -> xxx.yyy.133.239:9898 SYN ******S* Sep 6 23:53:36 221.190.110.133:2302 -> xxx.yyy.133.254:5554 SYN ******S* Sep 6 23:53:37 221.190.110.133:3007 -> xxx.yyy.133.254:1023 SYN ******S* Sep 6 23:53:36 221.190.110.133:2297 -> xxx.yyy.133.250:5554 SYN ******S* Sep 6 23:53:36 221.190.110.133:2298 -> xxx.yyy.133.249:5554 SYN ******S* [...] Sep 6 23:54:28 221.190.110.133:2941 -> xxx.yyy.141.101:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2934 -> xxx.yyy.141.118:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2938 -> xxx.yyy.141.105:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2967 -> xxx.yyy.141.106:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2968 -> xxx.yyy.141.120:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2995 -> xxx.yyy.141.121:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2999 -> xxx.yyy.141.123:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:3000 -> xxx.yyy.141.124:9898 SYN ******S* Sep 6 23:54:28 221.190.110.133:2994 -> xxx.yyy.141.119:9898 SYN ******S* 7790 Sep 6 13:46:50 193.198.130.211:2306 -> xxx.yyy.1.0:1433 SYN ******S* Sep 6 13:46:50 193.198.130.211:2307 -> xxx.yyy.1.1:1433 SYN ******S* Sep 6 13:46:50 193.198.130.211:2308 -> xxx.yyy.1.2:1433 SYN ******S* Sep 6 13:46:50 193.198.130.211:2309 -> xxx.yyy.1.3:1433 SYN ******S* Sep 6 13:46:50 193.198.130.211:2310 -> xxx.yyy.1.4:1433 SYN ******S* Sep 6 13:46:47 193.198.130.211:2313 -> xxx.yyy.1.5:1433 SYN ******S* Sep 6 13:46:50 193.198.130.211:2314 -> xxx.yyy.1.6:1433 SYN ******S* Sep 6 13:46:50 193.198.130.211:2315 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 6 14:16:36 193.198.130.211:4421 -> xxx.yyy.33.245:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4428 -> xxx.yyy.33.250:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4430 -> xxx.yyy.33.251:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4427 -> xxx.yyy.33.249:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4431 -> xxx.yyy.33.252:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4434 -> xxx.yyy.33.253:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4436 -> xxx.yyy.33.255:1433 SYN ******S* Sep 6 14:16:37 193.198.130.211:4435 -> xxx.yyy.33.254:1433 SYN ******S* 7695 Sep 6 00:55:56 61.149.218.75:2850 -> xxx.yyy.133.14:5554 SYN ******S* Sep 6 00:55:57 61.149.218.75:3478 -> xxx.yyy.133.14:1023 SYN ******S* Sep 6 00:55:59 61.149.218.75:4768 -> xxx.yyy.133.14:9898 SYN ******S* Sep 6 00:55:56 61.149.218.75:2851 -> xxx.yyy.133.15:5554 SYN ******S* Sep 6 00:55:57 61.149.218.75:3480 -> xxx.yyy.133.15:1023 SYN ******S* Sep 6 00:55:59 61.149.218.75:4784 -> xxx.yyy.133.15:9898 SYN ******S* Sep 6 00:55:56 61.149.218.75:2857 -> xxx.yyy.133.23:5554 SYN ******S* Sep 6 00:55:57 61.149.218.75:3489 -> xxx.yyy.133.23:1023 SYN ******S* [...] Sep 6 00:56:39 61.149.218.75:2284 -> xxx.yyy.153.37:9898 SYN ******S* Sep 6 00:56:39 61.149.218.75:2350 -> xxx.yyy.153.96:9898 SYN ******S* Sep 6 00:56:39 61.149.218.75:2715 -> xxx.yyy.141.102:5554 SYN ******S* Sep 6 00:56:40 61.149.218.75:3160 -> xxx.yyy.138.30:1023 SYN ******S* Sep 6 00:56:42 61.149.218.75:4198 -> xxx.yyy.138.30:9898 SYN ******S* Sep 6 00:56:40 61.149.218.75:3216 -> xxx.yyy.141.102:1023 SYN ******S* Sep 6 00:56:42 61.149.218.75:4284 -> xxx.yyy.141.102:9898 SYN ******S* Sep 6 00:56:42 61.149.218.75:1169 -> xxx.yyy.146.30:5554 SYN ******S* Sep 6 00:56:43 61.149.218.75:1668 -> xxx.yyy.146.30:1023 SYN ******S* 7648 Sep 6 23:51:06 221.152.196.75:1400 -> xxx.yyy.71.204:5554 SYN ******S* Sep 6 23:51:06 221.152.196.75:1412 -> xxx.yyy.71.196:5554 SYN ******S* Sep 6 23:51:07 221.152.196.75:2230 -> xxx.yyy.71.196:1023 SYN ******S* Sep 6 23:51:06 221.152.196.75:1404 -> xxx.yyy.71.201:5554 SYN ******S* Sep 6 23:51:06 221.152.196.75:1406 -> xxx.yyy.71.199:5554 SYN ******S* Sep 6 23:51:06 221.152.196.75:1413 -> xxx.yyy.71.195:5554 SYN ******S* Sep 6 23:51:07 221.152.196.75:2231 -> xxx.yyy.71.195:1023 SYN ******S* Sep 6 23:51:06 221.152.196.75:1439 -> xxx.yyy.71.175:5554 SYN ******S* [...] Sep 6 23:51:46 221.152.196.75:2927 -> xxx.yyy.92.7:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2934 -> xxx.yyy.92.13:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2935 -> xxx.yyy.92.14:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2942 -> xxx.yyy.92.21:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2939 -> xxx.yyy.92.18:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2936 -> xxx.yyy.92.15:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2940 -> xxx.yyy.92.19:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2954 -> xxx.yyy.92.25:9898 SYN ******S* Sep 6 23:51:46 221.152.196.75:2953 -> xxx.yyy.92.24:9898 SYN ******S* 6593 Sep 6 23:55:39 221.155.112.136:2528 -> xxx.yyy.194.147:5554 SYN ******S* Sep 6 23:55:42 221.155.112.136:4767 -> xxx.yyy.194.147:9898 SYN ******S* Sep 6 23:55:39 221.155.112.136:2530 -> xxx.yyy.194.149:5554 SYN ******S* Sep 6 23:55:40 221.155.112.136:3193 -> xxx.yyy.194.149:1023 SYN ******S* Sep 6 23:55:39 221.155.112.136:2532 -> xxx.yyy.194.148:5554 SYN ******S* Sep 6 23:55:42 221.155.112.136:4700 -> xxx.yyy.194.148:9898 SYN ******S* Sep 6 23:55:39 221.155.112.136:2531 -> xxx.yyy.194.124:5554 SYN ******S* Sep 6 23:55:39 221.155.112.136:2533 -> xxx.yyy.194.126:5554 SYN ******S* [...] Sep 6 23:56:34 221.155.112.136:1642 -> xxx.yyy.214.171:9898 SYN ******S* Sep 6 23:56:34 221.155.112.136:1671 -> xxx.yyy.214.215:9898 SYN ******S* Sep 6 23:56:34 221.155.112.136:1673 -> xxx.yyy.214.222:9898 SYN ******S* Sep 6 23:56:34 221.155.112.136:1674 -> xxx.yyy.214.223:9898 SYN ******S* Sep 6 23:56:34 221.155.112.136:1678 -> xxx.yyy.214.227:9898 SYN ******S* Sep 6 23:56:34 221.155.112.136:1694 -> xxx.yyy.214.236:9898 SYN ******S* Sep 6 23:56:34 221.155.112.136:1724 -> xxx.yyy.194.135:9898 SYN ******S* Sep 6 23:56:35 221.155.112.136:1834 -> xxx.yyy.194.146:9898 SYN ******S* Sep 6 23:56:35 221.155.112.136:1841 -> xxx.yyy.194.137:9898 SYN ******S* 6466 Sep 6 00:56:14 220.163.192.71:3107 -> xxx.yyy.214.250:5554 SYN ******S* Sep 6 00:56:14 220.163.192.71:3110 -> xxx.yyy.214.253:5554 SYN ******S* Sep 6 00:56:14 220.163.192.71:3111 -> xxx.yyy.214.254:5554 SYN ******S* Sep 6 00:56:15 220.163.192.71:3744 -> xxx.yyy.214.254:1023 SYN ******S* Sep 6 00:56:14 220.163.192.71:3118 -> xxx.yyy.215.4:5554 SYN ******S* Sep 6 00:56:14 220.163.192.71:3124 -> xxx.yyy.215.9:5554 SYN ******S* Sep 6 00:56:17 220.163.192.71:1385 -> xxx.yyy.215.9:9898 SYN ******S* Sep 6 00:56:14 220.163.192.71:3126 -> xxx.yyy.215.11:5554 SYN ******S* [...] Sep 6 00:56:56 220.163.192.71:2575 -> xxx.yyy.235.26:9898 SYN ******S* Sep 6 00:56:56 220.163.192.71:2632 -> xxx.yyy.235.35:9898 SYN ******S* Sep 6 00:56:56 220.163.192.71:2789 -> xxx.yyy.235.49:9898 SYN ******S* Sep 6 00:56:56 220.163.192.71:2786 -> xxx.yyy.235.48:9898 SYN ******S* Sep 6 00:56:56 220.163.192.71:2851 -> xxx.yyy.235.62:9898 SYN ******S* Sep 6 00:56:56 220.163.192.71:2751 -> xxx.yyy.235.41:9898 SYN ******S* Sep 6 00:56:57 220.163.192.71:2833 -> xxx.yyy.235.55:9898 SYN ******S* Sep 6 00:56:57 220.163.192.71:2866 -> xxx.yyy.235.64:9898 SYN ******S* Sep 6 00:56:57 220.163.192.71:2917 -> xxx.yyy.235.79:9898 SYN ******S* 6028 Sep 6 00:56:09 218.66.26.128:3065 -> xxx.yyy.174.2:5554 SYN ******S* Sep 6 00:56:12 218.66.26.128:4100 -> xxx.yyy.174.2:9898 SYN ******S* Sep 6 00:56:09 218.66.26.128:3097 -> xxx.yyy.174.3:5554 SYN ******S* Sep 6 00:56:10 218.66.26.128:3438 -> xxx.yyy.174.3:1023 SYN ******S* Sep 6 00:56:09 218.66.26.128:3111 -> xxx.yyy.174.4:5554 SYN ******S* Sep 6 00:56:09 218.66.26.128:3260 -> xxx.yyy.174.7:5554 SYN ******S* Sep 6 00:56:09 218.66.26.128:3295 -> xxx.yyy.174.8:5554 SYN ******S* Sep 6 00:56:12 218.66.26.128:4181 -> xxx.yyy.174.8:9898 SYN ******S* [...] Sep 6 01:03:03 218.66.26.128:4709 -> xxx.yyy.182.199:9898 SYN ******S* Sep 6 01:03:03 218.66.26.128:4695 -> xxx.yyy.182.192:9898 SYN ******S* Sep 6 01:03:03 218.66.26.128:4711 -> xxx.yyy.182.198:9898 SYN ******S* Sep 6 01:03:03 218.66.26.128:4714 -> xxx.yyy.182.197:9898 SYN ******S* Sep 6 01:03:04 218.66.26.128:1045 -> xxx.yyy.182.209:9898 SYN ******S* Sep 6 01:03:04 218.66.26.128:1044 -> xxx.yyy.182.210:9898 SYN ******S* Sep 6 01:03:04 218.66.26.128:1056 -> xxx.yyy.182.202:9898 SYN ******S* Sep 6 01:03:04 218.66.26.128:1051 -> xxx.yyy.182.205:9898 SYN ******S* Sep 6 01:03:04 218.66.26.128:1058 -> xxx.yyy.182.200:9898 SYN ******S* 6003 Sep 6 23:59:29 220.123.249.15:4025 -> xxx.yyy.71.160:5554 SYN ******S* Sep 6 23:59:32 220.123.249.15:2265 -> xxx.yyy.71.160:9898 SYN ******S* Sep 6 23:59:29 220.123.249.15:4036 -> xxx.yyy.71.163:5554 SYN ******S* Sep 6 23:59:30 220.123.249.15:1072 -> xxx.yyy.71.163:1023 SYN ******S* Sep 6 23:59:32 220.123.249.15:2276 -> xxx.yyy.71.163:9898 SYN ******S* Sep 6 23:59:29 220.123.249.15:4028 -> xxx.yyy.71.162:5554 SYN ******S* Sep 6 23:59:30 220.123.249.15:1065 -> xxx.yyy.71.162:1023 SYN ******S* Sep 6 23:59:32 220.123.249.15:2268 -> xxx.yyy.71.162:9898 SYN ******S* [...] Sep 7 00:00:00 220.123.249.15:2709 -> xxx.yyy.86.139:1023 SYN ******S* Sep 7 00:00:00 220.123.249.15:2718 -> xxx.yyy.86.141:1023 SYN ******S* Sep 7 00:00:00 220.123.249.15:2716 -> xxx.yyy.87.55:5554 SYN ******S* Sep 7 00:00:00 220.123.249.15:2962 -> xxx.yyy.86.249:1023 SYN ******S* Sep 7 00:00:00 220.123.249.15:2961 -> xxx.yyy.87.78:5554 SYN ******S* Sep 7 00:00:00 220.123.249.15:2963 -> xxx.yyy.86.250:1023 SYN ******S* Sep 7 00:00:00 220.123.249.15:2966 -> xxx.yyy.86.252:1023 SYN ******S* Sep 7 00:00:00 220.123.249.15:2999 -> xxx.yyy.85.175:9898 SYN ******S* Sep 7 00:00:01 220.123.249.15:3034 -> xxx.yyy.87.12:1023 SYN ******S* 5962 Sep 6 23:57:05 221.150.214.210:2208 -> xxx.yyy.72.129:5554 SYN ******S* Sep 6 23:57:05 221.150.214.210:2205 -> xxx.yyy.72.128:5554 SYN ******S* Sep 6 23:57:05 221.150.214.210:2214 -> xxx.yyy.72.132:5554 SYN ******S* Sep 6 23:57:06 221.150.214.210:2802 -> xxx.yyy.72.132:1023 SYN ******S* Sep 6 23:57:08 221.150.214.210:4985 -> xxx.yyy.72.132:9898 SYN ******S* Sep 6 23:57:05 221.150.214.210:2213 -> xxx.yyy.72.131:5554 SYN ******S* Sep 6 23:57:05 221.150.214.210:2281 -> xxx.yyy.72.139:5554 SYN ******S* Sep 6 23:57:06 221.150.214.210:2903 -> xxx.yyy.72.139:1023 SYN ******S* [...] Sep 6 23:58:03 221.150.214.210:1892 -> xxx.yyy.92.224:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:1926 -> xxx.yyy.92.226:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:1970 -> xxx.yyy.92.240:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:1964 -> xxx.yyy.92.236:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:1989 -> xxx.yyy.92.241:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:1986 -> xxx.yyy.92.242:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:2002 -> xxx.yyy.92.246:9898 SYN ******S* Sep 6 23:58:03 221.150.214.210:2009 -> xxx.yyy.92.245:9898 SYN ******S* 5479 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions