[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 7 04:34:48 82.38.217.122:1483 -> xxx.yyy.1.0:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1486 -> xxx.yyy.1.1:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1488 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1489 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1492 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1494 -> xxx.yyy.1.5:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1496 -> xxx.yyy.1.6:1433 SYN ******S* Sep 7 04:34:48 82.38.217.122:1498 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 7 08:33:44 82.38.217.122:3724 -> xxx.yyy.255.247:1433 SYN ******S* Sep 7 08:33:44 82.38.217.122:3722 -> xxx.yyy.255.245:1433 SYN ******S* Sep 7 08:33:44 82.38.217.122:3734 -> xxx.yyy.255.248:1433 SYN ******S* Sep 7 08:33:44 82.38.217.122:3742 -> xxx.yyy.255.249:1433 SYN ******S* Sep 7 08:33:44 82.38.217.122:3749 -> xxx.yyy.255.250:1433 SYN ******S* Sep 7 08:33:44 82.38.217.122:3763 -> xxx.yyy.255.252:1433 SYN ******S* Sep 7 08:33:45 82.38.217.122:3756 -> xxx.yyy.255.251:1433 SYN ******S* Sep 7 08:33:45 82.38.217.122:3774 -> xxx.yyy.255.253:1433 SYN ******S* Sep 7 08:33:45 82.38.217.122:3787 -> xxx.yyy.255.254:1433 SYN ******S* 119071 Sep 7 13:20:51 195.16.49.195:3140 -> xxx.yyy.1.1:1433 SYN ******S* Sep 7 13:20:48 195.16.49.195:3146 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 13:20:48 195.16.49.195:3159 -> xxx.yyy.1.10:1433 SYN ******S* Sep 7 13:20:48 195.16.49.195:3161 -> xxx.yyy.1.11:1433 SYN ******S* Sep 7 13:20:51 195.16.49.195:3168 -> xxx.yyy.1.15:1433 SYN ******S* Sep 7 13:20:48 195.16.49.195:3170 -> xxx.yyy.1.16:1433 SYN ******S* Sep 7 13:20:48 195.16.49.195:3177 -> xxx.yyy.1.19:1433 SYN ******S* Sep 7 13:20:51 195.16.49.195:3178 -> xxx.yyy.1.20:1433 SYN ******S* [...] Sep 7 14:43:13 195.16.49.195:4583 -> xxx.yyy.255.202:1433 SYN ******S* Sep 7 14:43:13 195.16.49.195:4502 -> xxx.yyy.255.197:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4659 -> xxx.yyy.255.207:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4679 -> xxx.yyy.255.210:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4742 -> xxx.yyy.255.217:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4841 -> xxx.yyy.255.226:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4860 -> xxx.yyy.255.235:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4866 -> xxx.yyy.255.238:1433 SYN ******S* Sep 7 14:43:14 195.16.49.195:4897 -> xxx.yyy.255.250:1433 SYN ******S* 73283 Sep 7 19:02:03 83.130.225.199:3878 -> xxx.yyy.1.0:1433 SYN ******S* Sep 7 19:02:03 83.130.225.199:3887 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 19:02:03 83.130.225.199:3890 -> xxx.yyy.1.5:1433 SYN ******S* Sep 7 19:02:03 83.130.225.199:3901 -> xxx.yyy.1.10:1433 SYN ******S* Sep 7 19:02:03 83.130.225.199:3905 -> xxx.yyy.1.12:1433 SYN ******S* Sep 7 19:02:03 83.130.225.199:3902 -> xxx.yyy.1.11:1433 SYN ******S* Sep 7 19:02:04 83.130.225.199:3910 -> xxx.yyy.1.14:1433 SYN ******S* Sep 7 19:02:04 83.130.225.199:3926 -> xxx.yyy.1.21:1433 SYN ******S* [...] Sep 7 22:50:48 83.130.225.199:3494 -> xxx.yyy.255.243:1433 SYN ******S* Sep 7 22:50:48 83.130.225.199:3497 -> xxx.yyy.255.244:1433 SYN ******S* Sep 7 22:50:49 83.130.225.199:3507 -> xxx.yyy.255.246:1433 SYN ******S* Sep 7 22:50:49 83.130.225.199:3512 -> xxx.yyy.255.247:1433 SYN ******S* Sep 7 22:50:49 83.130.225.199:3518 -> xxx.yyy.255.248:1433 SYN ******S* Sep 7 22:50:49 83.130.225.199:3526 -> xxx.yyy.255.250:1433 SYN ******S* Sep 7 22:50:49 83.130.225.199:3530 -> xxx.yyy.255.252:1433 SYN ******S* Sep 7 22:50:50 83.130.225.199:3548 -> xxx.yyy.255.254:1433 SYN ******S* 70021 Sep 7 01:36:47 213.161.195.53:3081 -> xxx.yyy.1.2:2277 SYN ******S* Sep 7 01:36:47 213.161.195.53:3084 -> xxx.yyy.1.3:2277 SYN ******S* Sep 7 01:36:45 213.161.195.53:3090 -> xxx.yyy.1.5:2277 SYN ******S* Sep 7 01:36:45 213.161.195.53:3093 -> xxx.yyy.1.6:2277 SYN ******S* Sep 7 01:36:45 213.161.195.53:3096 -> xxx.yyy.1.7:2277 SYN ******S* Sep 7 01:36:45 213.161.195.53:3099 -> xxx.yyy.1.8:2277 SYN ******S* Sep 7 01:36:45 213.161.195.53:3102 -> xxx.yyy.1.9:2277 SYN ******S* Sep 7 01:36:45 213.161.195.53:3105 -> xxx.yyy.1.10:2277 SYN ******S* [...] Sep 7 01:50:15 213.161.195.53:3687 -> xxx.yyy.255.244:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3709 -> xxx.yyy.255.251:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3703 -> xxx.yyy.255.249:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3697 -> xxx.yyy.255.247:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3690 -> xxx.yyy.255.245:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3706 -> xxx.yyy.255.250:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3714 -> xxx.yyy.255.253:2277 SYN ******S* Sep 7 01:50:15 213.161.195.53:3717 -> xxx.yyy.255.254:2277 SYN ******S* 66640 Sep 7 14:06:43 82.80.48.138:3167 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 14:06:43 82.80.48.138:3168 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 14:06:47 82.80.48.138:3169 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 14:06:47 82.80.48.138:3172 -> xxx.yyy.1.6:1433 SYN ******S* Sep 7 14:06:47 82.80.48.138:3174 -> xxx.yyy.1.7:1433 SYN ******S* Sep 7 14:06:44 82.80.48.138:3176 -> xxx.yyy.1.8:1433 SYN ******S* Sep 7 14:06:44 82.80.48.138:3177 -> xxx.yyy.1.9:1433 SYN ******S* Sep 7 14:06:47 82.80.48.138:3178 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 7 17:55:29 82.80.48.138:4066 -> xxx.yyy.255.244:1433 SYN ******S* Sep 7 17:55:29 82.80.48.138:4070 -> xxx.yyy.255.245:1433 SYN ******S* Sep 7 17:55:30 82.80.48.138:4083 -> xxx.yyy.255.249:1433 SYN ******S* Sep 7 17:55:30 82.80.48.138:4082 -> xxx.yyy.255.248:1433 SYN ******S* Sep 7 17:55:30 82.80.48.138:4087 -> xxx.yyy.255.250:1433 SYN ******S* Sep 7 17:55:31 82.80.48.138:4099 -> xxx.yyy.255.252:1433 SYN ******S* Sep 7 17:55:31 82.80.48.138:4103 -> xxx.yyy.255.253:1433 SYN ******S* Sep 7 17:55:31 82.80.48.138:4109 -> xxx.yyy.255.254:1433 SYN ******S* 65251 Sep 7 13:27:44 69.30.195.139:3539 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 13:27:44 69.30.195.139:3550 -> xxx.yyy.1.6:1433 SYN ******S* Sep 7 13:27:44 69.30.195.139:3561 -> xxx.yyy.1.10:1433 SYN ******S* Sep 7 13:27:47 69.30.195.139:3564 -> xxx.yyy.1.13:1433 SYN ******S* Sep 7 13:27:47 69.30.195.139:3568 -> xxx.yyy.1.14:1433 SYN ******S* Sep 7 13:27:47 69.30.195.139:3576 -> xxx.yyy.1.15:1433 SYN ******S* Sep 7 13:27:47 69.30.195.139:3579 -> xxx.yyy.1.16:1433 SYN ******S* Sep 7 13:27:47 69.30.195.139:3582 -> xxx.yyy.1.17:1433 SYN ******S* [...] Sep 7 13:38:42 69.30.195.139:2840 -> xxx.yyy.255.250:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2794 -> xxx.yyy.255.246:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2824 -> xxx.yyy.255.247:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2842 -> xxx.yyy.255.251:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2845 -> xxx.yyy.255.253:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2835 -> xxx.yyy.255.249:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2843 -> xxx.yyy.255.252:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2827 -> xxx.yyy.255.248:1433 SYN ******S* Sep 7 13:38:42 69.30.195.139:2852 -> xxx.yyy.255.254:1433 SYN ******S* 37839 Sep 7 13:44:33 130.228.96.156:2276 -> xxx.yyy.1.1:62976 SYN ******S* Sep 7 13:44:34 130.228.96.156:2278 -> xxx.yyy.1.2:62976 SYN ******S* Sep 7 13:44:35 130.228.96.156:2284 -> xxx.yyy.1.5:62976 SYN ******S* Sep 7 13:44:33 130.228.96.156:2290 -> xxx.yyy.1.8:62976 SYN ******S* Sep 7 13:44:33 130.228.96.156:2294 -> xxx.yyy.1.10:62976 SYN ******S* Sep 7 13:44:33 130.228.96.156:2296 -> xxx.yyy.1.11:62976 SYN ******S* Sep 7 13:44:33 130.228.96.156:2298 -> xxx.yyy.1.12:62976 SYN ******S* Sep 7 13:44:36 130.228.96.156:2305 -> xxx.yyy.1.15:62976 SYN ******S* [...] Sep 7 13:56:22 130.228.96.156:2865 -> xxx.yyy.255.240:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2857 -> xxx.yyy.255.236:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2853 -> xxx.yyy.255.234:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2859 -> xxx.yyy.255.237:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2873 -> xxx.yyy.255.244:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2877 -> xxx.yyy.255.246:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2889 -> xxx.yyy.255.252:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2893 -> xxx.yyy.255.254:62976 SYN ******S* Sep 7 13:56:22 130.228.96.156:2891 -> xxx.yyy.255.253:62976 SYN ******S* 35469 Sep 7 15:29:09 66.232.140.124:3407 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 15:29:09 66.232.140.124:3408 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 15:29:09 66.232.140.124:3411 -> xxx.yyy.1.7:1433 SYN ******S* Sep 7 15:29:09 66.232.140.124:3412 -> xxx.yyy.1.8:1433 SYN ******S* Sep 7 15:29:09 66.232.140.124:3409 -> xxx.yyy.1.5:1433 SYN ******S* Sep 7 15:29:09 66.232.140.124:3416 -> xxx.yyy.1.12:1433 SYN ******S* Sep 7 15:29:09 66.232.140.124:3417 -> xxx.yyy.1.13:1433 SYN ******S* Sep 7 15:29:12 66.232.140.124:3419 -> xxx.yyy.1.15:1433 SYN ******S* [...] Sep 7 15:40:51 66.232.140.124:2064 -> xxx.yyy.255.246:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2059 -> xxx.yyy.255.241:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2057 -> xxx.yyy.255.239:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2060 -> xxx.yyy.255.242:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2061 -> xxx.yyy.255.243:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2072 -> xxx.yyy.255.254:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2069 -> xxx.yyy.255.251:1433 SYN ******S* Sep 7 15:40:51 66.232.140.124:2070 -> xxx.yyy.255.252:1433 SYN ******S* 34185 Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:17210 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:23036 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:53781 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:20403 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:64990 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:56030 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:27402 SYN ******S* Sep 7 19:07:46 213.180.193.68:54403 -> xxx.yyy.1.96:54908 SYN ******S* [...] Sep 7 19:15:46 213.180.193.68:54408 -> xxx.yyy.1.96:6020 SYN ******S* Sep 7 19:15:46 213.180.193.68:54408 -> xxx.yyy.1.96:6014 SYN ******S* Sep 7 19:15:46 213.180.193.68:54408 -> xxx.yyy.1.96:6001 SYN ******S* Sep 7 19:48:01 213.180.193.68:49944 -> xxx.yyy.1.96:22 SYN ******S* Sep 7 19:48:01 213.180.193.68:40804 -> xxx.yyy.1.96:465 SYN ******S* Sep 7 19:48:01 213.180.193.68:44844 -> xxx.yyy.1.96:8009 SYN ******S* Sep 7 19:48:01 213.180.193.68:61826 -> xxx.yyy.1.96:8080 SYN ******S* Sep 7 19:48:01 213.180.193.68:63175 -> xxx.yyy.1.96:10443 SYN ******S* Sep 7 19:48:01 213.180.193.68:36822 -> xxx.yyy.1.96:20022 SYN ******S* 33338 Sep 7 10:00:16 218.4.49.178:3762 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 10:00:16 218.4.49.178:3765 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 10:00:16 218.4.49.178:3769 -> xxx.yyy.1.8:1433 SYN ******S* Sep 7 10:00:16 218.4.49.178:3770 -> xxx.yyy.1.9:1433 SYN ******S* Sep 7 10:00:19 218.4.49.178:3771 -> xxx.yyy.1.10:1433 SYN ******S* Sep 7 10:00:19 218.4.49.178:3775 -> xxx.yyy.1.14:1433 SYN ******S* Sep 7 10:00:17 218.4.49.178:3782 -> xxx.yyy.1.21:1433 SYN ******S* Sep 7 10:00:17 218.4.49.178:3784 -> xxx.yyy.1.23:1433 SYN ******S* [...] Sep 7 10:11:20 218.4.49.178:4776 -> xxx.yyy.255.239:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4786 -> xxx.yyy.255.249:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4779 -> xxx.yyy.255.242:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4782 -> xxx.yyy.255.245:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4787 -> xxx.yyy.255.250:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4781 -> xxx.yyy.255.244:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4780 -> xxx.yyy.255.243:1433 SYN ******S* Sep 7 10:11:20 218.4.49.178:4783 -> xxx.yyy.255.246:1433 SYN ******S* 31220 Sep 7 14:13:44 143.233.244.10:1411 -> xxx.yyy.1.1:8000 SYN ******S* Sep 7 14:13:43 143.233.244.10:1417 -> xxx.yyy.1.7:8000 SYN ******S* Sep 7 14:13:44 143.233.244.10:1423 -> xxx.yyy.1.13:8000 SYN ******S* Sep 7 14:13:44 143.233.244.10:1424 -> xxx.yyy.1.14:8000 SYN ******S* Sep 7 14:13:43 143.233.244.10:1426 -> xxx.yyy.1.16:8000 SYN ******S* Sep 7 14:13:44 143.233.244.10:1427 -> xxx.yyy.1.17:8000 SYN ******S* Sep 7 14:13:44 143.233.244.10:1431 -> xxx.yyy.1.21:8000 SYN ******S* Sep 7 14:13:43 143.233.244.10:1434 -> xxx.yyy.1.24:8000 SYN ******S* [...] Sep 7 14:22:00 143.233.244.10:1621 -> xxx.yyy.255.252:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1605 -> xxx.yyy.255.236:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1570 -> xxx.yyy.255.201:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1602 -> xxx.yyy.255.233:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1586 -> xxx.yyy.255.217:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1567 -> xxx.yyy.255.198:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1599 -> xxx.yyy.255.230:8000 SYN ******S* Sep 7 14:22:00 143.233.244.10:1615 -> xxx.yyy.255.246:8000 SYN ******S* 30051 Sep 7 09:55:48 211.229.89.88:4069 -> xxx.yyy.1.1:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4072 -> xxx.yyy.1.4:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4073 -> xxx.yyy.1.5:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4076 -> xxx.yyy.1.8:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4074 -> xxx.yyy.1.6:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4077 -> xxx.yyy.1.9:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4080 -> xxx.yyy.1.12:4899 SYN ******S* Sep 7 09:55:47 211.229.89.88:4078 -> xxx.yyy.1.10:4899 SYN ******S* [...] Sep 7 10:02:47 211.229.89.88:2220 -> xxx.yyy.255.238:4899 SYN ******S* Sep 7 10:02:47 211.229.89.88:2221 -> xxx.yyy.255.239:4899 SYN ******S* Sep 7 10:02:47 211.229.89.88:2224 -> xxx.yyy.255.242:4899 SYN ******S* Sep 7 10:02:47 211.229.89.88:2225 -> xxx.yyy.255.243:4899 SYN ******S* Sep 7 10:02:47 211.229.89.88:2226 -> xxx.yyy.255.244:4899 SYN ******S* Sep 7 10:02:47 211.229.89.88:2228 -> xxx.yyy.255.246:4899 SYN ******S* Sep 7 10:02:47 211.229.89.88:2230 -> xxx.yyy.255.248:4899 SYN ******S* Sep 7 10:02:48 211.229.89.88:2235 -> xxx.yyy.255.253:4899 SYN ******S* Sep 7 10:02:48 211.229.89.88:2233 -> xxx.yyy.255.251:4899 SYN ******S* 29096 Sep 7 11:53:18 218.20.224.86:1401 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 11:53:19 218.20.224.86:1406 -> xxx.yyy.1.8:1433 SYN ******S* Sep 7 11:53:16 218.20.224.86:1412 -> xxx.yyy.1.14:1433 SYN ******S* Sep 7 11:53:19 218.20.224.86:1419 -> xxx.yyy.1.21:1433 SYN ******S* Sep 7 11:53:16 218.20.224.86:1421 -> xxx.yyy.1.23:1433 SYN ******S* Sep 7 11:53:16 218.20.224.86:1416 -> xxx.yyy.1.18:1433 SYN ******S* Sep 7 11:53:16 218.20.224.86:1424 -> xxx.yyy.1.26:1433 SYN ******S* Sep 7 11:53:16 218.20.224.86:1433 -> xxx.yyy.1.35:1433 SYN ******S* [...] Sep 7 12:10:31 218.20.224.86:2496 -> xxx.yyy.255.233:1433 SYN ******S* Sep 7 12:10:31 218.20.224.86:2489 -> xxx.yyy.255.226:1433 SYN ******S* Sep 7 12:10:31 218.20.224.86:2500 -> xxx.yyy.255.237:1433 SYN ******S* Sep 7 12:10:31 218.20.224.86:2493 -> xxx.yyy.255.230:1433 SYN ******S* Sep 7 12:10:31 218.20.224.86:2495 -> xxx.yyy.255.232:1433 SYN ******S* Sep 7 12:10:31 218.20.224.86:2510 -> xxx.yyy.255.247:1433 SYN ******S* Sep 7 12:10:32 218.20.224.86:2509 -> xxx.yyy.255.246:1433 SYN ******S* Sep 7 12:10:32 218.20.224.86:2511 -> xxx.yyy.255.248:1433 SYN ******S* Sep 7 12:10:32 218.20.224.86:2515 -> xxx.yyy.255.252:1433 SYN ******S* 28910 Sep 7 00:13:33 212.56.135.148:2063 -> xxx.yyy.1.8:80 SYN ******S* Sep 7 00:13:30 212.56.135.148:2064 -> xxx.yyy.1.9:80 SYN ******S* Sep 7 00:13:30 212.56.135.148:2074 -> xxx.yyy.1.17:80 SYN ******S* Sep 7 00:13:33 212.56.135.148:2075 -> xxx.yyy.1.18:80 SYN ******S* Sep 7 00:13:30 212.56.135.148:2093 -> xxx.yyy.1.35:80 SYN ******S* Sep 7 00:13:30 212.56.135.148:2101 -> xxx.yyy.1.43:80 SYN ******S* Sep 7 00:13:33 212.56.135.148:2110 -> xxx.yyy.1.52:80 SYN ******S* Sep 7 00:13:30 212.56.135.148:2121 -> xxx.yyy.1.61:80 SYN ******S* [...] Sep 7 00:22:22 212.56.135.148:1264 -> xxx.yyy.255.219:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1301 -> xxx.yyy.255.254:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1298 -> xxx.yyy.255.251:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1294 -> xxx.yyy.255.248:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1271 -> xxx.yyy.255.226:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1284 -> xxx.yyy.255.239:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1268 -> xxx.yyy.255.223:80 SYN ******S* Sep 7 00:22:22 212.56.135.148:1281 -> xxx.yyy.255.236:80 SYN ******S* 21833 Sep 7 21:49:12 24.45.180.116:4971 -> xxx.yyy.1.1:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4972 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4973 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4974 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4976 -> xxx.yyy.1.6:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4978 -> xxx.yyy.1.7:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4979 -> xxx.yyy.1.8:1433 SYN ******S* Sep 7 21:49:12 24.45.180.116:4981 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 7 21:57:49 24.45.180.116:3343 -> xxx.yyy.255.240:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3345 -> xxx.yyy.255.242:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3346 -> xxx.yyy.255.243:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3348 -> xxx.yyy.255.245:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3349 -> xxx.yyy.255.246:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3351 -> xxx.yyy.255.248:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3352 -> xxx.yyy.255.249:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3353 -> xxx.yyy.255.250:1433 SYN ******S* Sep 7 21:57:49 24.45.180.116:3355 -> xxx.yyy.255.252:1433 SYN ******S* 21147 Sep 7 22:36:31 200.155.57.92:3647 -> xxx.yyy.1.30:1433 SYN ******S* Sep 7 22:36:31 200.155.57.92:3692 -> xxx.yyy.1.35:1433 SYN ******S* Sep 7 22:36:31 200.155.57.92:3693 -> xxx.yyy.1.36:1433 SYN ******S* Sep 7 22:36:34 200.155.57.92:3706 -> xxx.yyy.1.43:1433 SYN ******S* Sep 7 22:36:32 200.155.57.92:3224 -> xxx.yyy.1.0:1433 SYN ******S* Sep 7 22:36:32 200.155.57.92:3241 -> xxx.yyy.1.1:1433 SYN ******S* Sep 7 22:36:32 200.155.57.92:3249 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 22:36:33 200.155.57.92:3255 -> xxx.yyy.1.3:1433 SYN ******S* [...] Sep 7 23:59:59 200.155.57.92:3119 -> xxx.yyy.94.7:1433 SYN ******S* Sep 7 23:59:59 200.155.57.92:3120 -> xxx.yyy.94.8:1433 SYN ******S* Sep 8 00:00:00 200.155.57.92:4917 -> xxx.yyy.93.224:1433 SYN ******S* Sep 8 00:00:00 200.155.57.92:3135 -> xxx.yyy.94.11:1433 SYN ******S* Sep 8 00:00:00 200.155.57.92:3136 -> xxx.yyy.94.12:1433 SYN ******S* Sep 8 00:00:00 200.155.57.92:3137 -> xxx.yyy.94.13:1433 SYN ******S* Sep 8 00:00:00 200.155.57.92:3139 -> xxx.yyy.94.14:1433 SYN ******S* Sep 8 00:00:00 200.155.57.92:4780 -> xxx.yyy.93.198:1433 SYN ******S* 17569 Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.1:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.2:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.3:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.8:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.9:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.11:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.10:22 SYN ******S* Sep 7 16:01:33 69.28.69.138:2746 -> xxx.yyy.1.13:22 SYN ******S* [...] Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.204:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.206:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.207:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.244:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.248:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.249:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.245:22 SYN ******S* Sep 7 16:01:59 69.28.69.138:2746 -> xxx.yyy.255.246:22 SYN ******S* 12098 [...] 11212 Sep 7 01:01:03 61.48.16.137:3621 -> xxx.yyy.133.238:5554 SYN ******S* Sep 7 01:01:04 61.48.16.137:3772 -> xxx.yyy.133.238:1023 SYN ******S* Sep 7 01:01:06 61.48.16.137:4062 -> xxx.yyy.133.238:9898 SYN ******S* Sep 7 01:01:03 61.48.16.137:3622 -> xxx.yyy.133.237:5554 SYN ******S* Sep 7 01:01:04 61.48.16.137:3771 -> xxx.yyy.133.237:1023 SYN ******S* Sep 7 01:01:06 61.48.16.137:4059 -> xxx.yyy.133.237:9898 SYN ******S* Sep 7 01:01:03 61.48.16.137:3645 -> xxx.yyy.133.240:5554 SYN ******S* Sep 7 01:01:03 61.48.16.137:3644 -> xxx.yyy.133.239:5554 SYN ******S* [...] Sep 7 01:03:27 61.48.16.137:1911 -> xxx.yyy.154.91:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1913 -> xxx.yyy.154.92:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1914 -> xxx.yyy.154.93:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1925 -> xxx.yyy.154.94:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1937 -> xxx.yyy.154.97:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1965 -> xxx.yyy.154.98:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1966 -> xxx.yyy.154.99:9898 SYN ******S* Sep 7 01:03:27 61.48.16.137:1967 -> xxx.yyy.154.100:9898 SYN ******S* 10389 Sep 7 09:54:10 82.191.216.195:4135 -> xxx.yyy.1.11:1433 SYN ******S* Sep 7 09:54:12 82.191.216.195:3431 -> xxx.yyy.1.28:1433 SYN ******S* Sep 7 09:54:12 82.191.216.195:3546 -> xxx.yyy.1.29:1433 SYN ******S* Sep 7 09:54:15 82.191.216.195:3660 -> xxx.yyy.1.30:1433 SYN ******S* Sep 7 09:54:13 82.191.216.195:4004 -> xxx.yyy.1.33:1433 SYN ******S* Sep 7 09:54:15 82.191.216.195:3117 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 09:54:15 82.191.216.195:3228 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 09:54:16 82.191.216.195:4396 -> xxx.yyy.1.34:1433 SYN ******S* [...] Sep 7 13:03:10 82.191.216.195:3788 -> xxx.yyy.211.66:1433 SYN ******S* Sep 7 13:03:11 82.191.216.195:4144 -> xxx.yyy.211.69:1433 SYN ******S* Sep 7 13:03:15 82.191.216.195:4885 -> xxx.yyy.211.73:1433 SYN ******S* Sep 7 13:03:12 82.191.216.195:1866 -> xxx.yyy.211.81:1433 SYN ******S* Sep 7 13:03:15 82.191.216.195:2342 -> xxx.yyy.211.85:1433 SYN ******S* Sep 7 13:03:13 82.191.216.195:2816 -> xxx.yyy.211.89:1433 SYN ******S* Sep 7 13:03:14 82.191.216.195:3495 -> xxx.yyy.211.95:1433 SYN ******S* Sep 7 13:03:15 82.191.216.195:2224 -> xxx.yyy.211.84:1433 SYN ******S* Sep 7 13:03:15 82.191.216.195:2460 -> xxx.yyy.211.86:1433 SYN ******S* 10148 Sep 7 23:55:32 220.127.246.123:1886 -> xxx.yyy.235.112:5554 SYN ******S* Sep 7 23:55:33 220.127.246.123:2541 -> xxx.yyy.235.112:1023 SYN ******S* Sep 7 23:55:35 220.127.246.123:3724 -> xxx.yyy.235.112:9898 SYN ******S* Sep 7 23:55:32 220.127.246.123:1887 -> xxx.yyy.235.113:5554 SYN ******S* Sep 7 23:55:35 220.127.246.123:3725 -> xxx.yyy.235.113:9898 SYN ******S* Sep 7 23:55:32 220.127.246.123:1890 -> xxx.yyy.235.116:5554 SYN ******S* Sep 7 23:55:33 220.127.246.123:2545 -> xxx.yyy.235.116:1023 SYN ******S* Sep 7 23:55:35 220.127.246.123:3734 -> xxx.yyy.235.116:9898 SYN ******S* [...] Sep 7 23:56:58 220.127.246.123:2620 -> xxx.yyy.92.97:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2621 -> xxx.yyy.92.98:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2604 -> xxx.yyy.92.89:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2605 -> xxx.yyy.92.90:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2623 -> xxx.yyy.92.100:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2611 -> xxx.yyy.92.93:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2717 -> xxx.yyy.92.109:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2725 -> xxx.yyy.92.118:9898 SYN ******S* Sep 7 23:56:58 220.127.246.123:2784 -> xxx.yyy.92.121:9898 SYN ******S* 9310 Sep 7 00:08:36 218.47.194.1:4481 -> xxx.yyy.133.17:5554 SYN ******S* Sep 7 00:08:38 218.47.194.1:1243 -> xxx.yyy.133.17:1023 SYN ******S* Sep 7 00:08:40 218.47.194.1:2131 -> xxx.yyy.133.17:9898 SYN ******S* Sep 7 00:08:36 218.47.194.1:4482 -> xxx.yyy.133.18:5554 SYN ******S* Sep 7 00:08:38 218.47.194.1:1244 -> xxx.yyy.133.18:1023 SYN ******S* Sep 7 00:08:37 218.47.194.1:4503 -> xxx.yyy.133.19:5554 SYN ******S* Sep 7 00:08:38 218.47.194.1:1253 -> xxx.yyy.133.19:1023 SYN ******S* Sep 7 00:08:40 218.47.194.1:2133 -> xxx.yyy.133.19:9898 SYN ******S* [...] Sep 7 00:09:24 218.47.194.1:1209 -> xxx.yyy.153.83:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1227 -> xxx.yyy.153.95:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1228 -> xxx.yyy.153.96:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1250 -> xxx.yyy.153.102:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1290 -> xxx.yyy.153.108:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1292 -> xxx.yyy.153.110:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1366 -> xxx.yyy.153.115:9898 SYN ******S* Sep 7 00:09:24 218.47.194.1:1418 -> xxx.yyy.153.129:9898 SYN ******S* 9038 Sep 7 09:57:55 81.240.42.212:1468 -> xxx.yyy.1.0:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1469 -> xxx.yyy.1.1:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1470 -> xxx.yyy.1.2:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1471 -> xxx.yyy.1.3:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1472 -> xxx.yyy.1.4:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1474 -> xxx.yyy.1.6:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1476 -> xxx.yyy.1.8:21 SYN ******S* Sep 7 09:57:55 81.240.42.212:1479 -> xxx.yyy.1.11:21 SYN ******S* [...] Sep 7 09:59:33 81.240.42.212:1496 -> xxx.yyy.255.208:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1498 -> xxx.yyy.255.210:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1499 -> xxx.yyy.255.211:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1500 -> xxx.yyy.255.212:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1502 -> xxx.yyy.255.214:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1504 -> xxx.yyy.255.216:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1505 -> xxx.yyy.255.217:21 SYN ******S* Sep 7 09:59:33 81.240.42.212:1506 -> xxx.yyy.255.218:21 SYN ******S* Sep 7 09:59:34 81.240.42.212:1507 -> xxx.yyy.255.219:21 SYN ******S* 8721 Sep 7 05:36:29 210.58.12.82:1915 -> xxx.yyy.1.0:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1916 -> xxx.yyy.1.1:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1917 -> xxx.yyy.1.2:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1918 -> xxx.yyy.1.3:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1919 -> xxx.yyy.1.4:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1920 -> xxx.yyy.1.5:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1921 -> xxx.yyy.1.6:1433 SYN ******S* Sep 7 05:36:32 210.58.12.82:1922 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 7 06:06:15 210.58.12.82:3036 -> xxx.yyy.33.247:1433 SYN ******S* Sep 7 06:06:15 210.58.12.82:3033 -> xxx.yyy.33.246:1433 SYN ******S* Sep 7 06:06:15 210.58.12.82:3030 -> xxx.yyy.33.245:1433 SYN ******S* Sep 7 06:06:16 210.58.12.82:3044 -> xxx.yyy.33.248:1433 SYN ******S* Sep 7 06:06:16 210.58.12.82:3051 -> xxx.yyy.33.251:1433 SYN ******S* Sep 7 06:06:16 210.58.12.82:3049 -> xxx.yyy.33.250:1433 SYN ******S* Sep 7 06:06:16 210.58.12.82:3064 -> xxx.yyy.33.252:1433 SYN ******S* Sep 7 06:06:17 210.58.12.82:3070 -> xxx.yyy.33.253:1433 SYN ******S* Sep 7 06:06:17 210.58.12.82:3073 -> xxx.yyy.33.255:1433 SYN ******S* 8651 Sep 7 23:50:44 60.35.115.45:4393 -> xxx.yyy.194.124:5554 SYN ******S* Sep 7 23:50:45 60.35.115.45:1427 -> xxx.yyy.194.124:1023 SYN ******S* Sep 7 23:50:47 60.35.115.45:2961 -> xxx.yyy.194.124:9898 SYN ******S* Sep 7 23:50:44 60.35.115.45:4396 -> xxx.yyy.194.126:5554 SYN ******S* Sep 7 23:50:45 60.35.115.45:1441 -> xxx.yyy.194.126:1023 SYN ******S* Sep 7 23:50:44 60.35.115.45:4397 -> xxx.yyy.194.128:5554 SYN ******S* Sep 7 23:50:44 60.35.115.45:4410 -> xxx.yyy.194.144:5554 SYN ******S* Sep 7 23:50:44 60.35.115.45:4411 -> xxx.yyy.194.125:5554 SYN ******S* [...] Sep 7 23:51:29 60.35.115.45:4052 -> xxx.yyy.214.236:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4099 -> xxx.yyy.214.212:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4092 -> xxx.yyy.214.153:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4093 -> xxx.yyy.214.154:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4096 -> xxx.yyy.214.194:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4097 -> xxx.yyy.214.173:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4449 -> xxx.yyy.194.155:9898 SYN ******S* Sep 7 23:51:29 60.35.115.45:4450 -> xxx.yyy.194.156:9898 SYN ******S* 8422 Sep 7 23:54:32 222.113.60.42:2769 -> xxx.yyy.195.95:5554 SYN ******S* Sep 7 23:54:33 222.113.60.42:2959 -> xxx.yyy.195.95:1023 SYN ******S* Sep 7 23:54:35 222.113.60.42:1296 -> xxx.yyy.195.95:9898 SYN ******S* Sep 7 23:54:32 222.113.60.42:2770 -> xxx.yyy.195.96:5554 SYN ******S* Sep 7 23:54:33 222.113.60.42:2961 -> xxx.yyy.195.96:1023 SYN ******S* Sep 7 23:54:35 222.113.60.42:1300 -> xxx.yyy.195.96:9898 SYN ******S* Sep 7 23:54:32 222.113.60.42:2763 -> xxx.yyy.195.88:5554 SYN ******S* Sep 7 23:54:33 222.113.60.42:2954 -> xxx.yyy.195.88:1023 SYN ******S* [...] Sep 7 23:56:18 222.113.60.42:1819 -> xxx.yyy.215.145:9898 SYN ******S* Sep 7 23:56:18 222.113.60.42:1832 -> xxx.yyy.215.152:9898 SYN ******S* Sep 7 23:56:18 222.113.60.42:1845 -> xxx.yyy.215.169:9898 SYN ******S* Sep 7 23:56:18 222.113.60.42:1842 -> xxx.yyy.215.165:9898 SYN ******S* Sep 7 23:56:18 222.113.60.42:1848 -> xxx.yyy.215.159:9898 SYN ******S* Sep 7 23:56:18 222.113.60.42:3936 -> xxx.yyy.215.170:9898 SYN ******S* Sep 7 23:56:18 222.113.60.42:1924 -> xxx.yyy.215.178:9898 SYN ******S* Sep 7 23:56:19 222.113.60.42:2003 -> xxx.yyy.215.197:9898 SYN ******S* Sep 7 23:56:19 222.113.60.42:2015 -> xxx.yyy.215.204:9898 SYN ******S* 7608 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions