[LOGS] Summary of large-scale portscanning detects
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
The following extracts show the beginning and ending of scan activity was detected on my network. The number following each set is the total number of probes for that source. Timestamps are GMT-0500. Sep 10 00:00:04 218.189.152.125:64621 -> xxx.yyy.80.193:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:64114 -> xxx.yyy.80.196:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:62237 -> xxx.yyy.80.195:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:62682 -> xxx.yyy.80.198:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:61462 -> xxx.yyy.80.197:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:62020 -> xxx.yyy.80.201:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:63379 -> xxx.yyy.80.200:1433 SYN ******S* Sep 10 00:00:04 218.189.152.125:64665 -> xxx.yyy.80.199:1433 SYN ******S* [...] Sep 10 02:37:09 218.189.152.125:63439 -> xxx.yyy.255.247:1433 SYN ******S* Sep 10 02:37:09 218.189.152.125:64270 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 02:37:10 218.189.152.125:63344 -> xxx.yyy.255.249:1433 SYN ******S* Sep 10 02:37:10 218.189.152.125:63811 -> xxx.yyy.255.250:1433 SYN ******S* Sep 10 02:37:10 218.189.152.125:63569 -> xxx.yyy.255.251:1433 SYN ******S* Sep 10 02:37:10 218.189.152.125:63291 -> xxx.yyy.255.252:1433 SYN ******S* Sep 10 02:37:10 218.189.152.125:61953 -> xxx.yyy.255.253:1433 SYN ******S* Sep 10 02:37:10 218.189.152.125:63619 -> xxx.yyy.255.254:1433 SYN ******S* 86375 Sep 10 03:23:38 216.143.198.6:34373 -> xxx.yyy.1.0:6112 SYN ******S* Sep 10 03:23:38 216.143.198.6:34374 -> xxx.yyy.1.1:6112 SYN ******S* Sep 10 03:23:38 216.143.198.6:34375 -> xxx.yyy.1.2:6112 SYN ******S* Sep 10 03:23:38 216.143.198.6:34376 -> xxx.yyy.1.3:6112 SYN ******S* Sep 10 03:23:38 216.143.198.6:34377 -> xxx.yyy.1.4:6112 SYN ******S* Sep 10 03:23:38 216.143.198.6:34378 -> xxx.yyy.1.5:6112 SYN ******S* Sep 10 03:23:39 216.143.198.6:34379 -> xxx.yyy.1.6:6112 SYN ******S* Sep 10 03:23:40 216.143.198.6:34380 -> xxx.yyy.1.7:6112 SYN ******S* [...] Sep 10 03:49:53 216.143.198.6:34117 -> xxx.yyy.255.247:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34118 -> xxx.yyy.255.248:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34119 -> xxx.yyy.255.249:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34120 -> xxx.yyy.255.250:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34121 -> xxx.yyy.255.251:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34122 -> xxx.yyy.255.252:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34123 -> xxx.yyy.255.253:6112 SYN ******S* Sep 10 03:49:53 216.143.198.6:34124 -> xxx.yyy.255.254:6112 SYN ******S* 80577 Sep 10 07:23:38 211.217.220.50:2260 -> xxx.yyy.131.2:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2259 -> xxx.yyy.131.1:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2261 -> xxx.yyy.131.3:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2262 -> xxx.yyy.131.4:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2263 -> xxx.yyy.131.5:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2264 -> xxx.yyy.131.6:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2265 -> xxx.yyy.131.7:1433 SYN ******S* Sep 10 07:23:38 211.217.220.50:2266 -> xxx.yyy.131.8:1433 SYN ******S* [...] Sep 10 09:15:35 211.217.220.50:2280 -> xxx.yyy.255.240:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2294 -> xxx.yyy.255.254:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2288 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2291 -> xxx.yyy.255.251:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2292 -> xxx.yyy.255.252:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2289 -> xxx.yyy.255.249:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2293 -> xxx.yyy.255.253:1433 SYN ******S* Sep 10 09:15:35 211.217.220.50:2290 -> xxx.yyy.255.250:1433 SYN ******S* 75883 Sep 10 04:46:12 60.31.141.14:4177 -> xxx.yyy.1.1:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4178 -> xxx.yyy.1.2:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4179 -> xxx.yyy.1.3:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4180 -> xxx.yyy.1.4:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4181 -> xxx.yyy.1.5:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4182 -> xxx.yyy.1.6:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4183 -> xxx.yyy.1.7:1433 SYN ******S* Sep 10 04:46:15 60.31.141.14:4184 -> xxx.yyy.1.8:1433 SYN ******S* [...] Sep 10 04:57:56 60.31.141.14:2856 -> xxx.yyy.255.252:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2855 -> xxx.yyy.255.251:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2852 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2853 -> xxx.yyy.255.249:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2857 -> xxx.yyy.255.253:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2850 -> xxx.yyy.255.246:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2851 -> xxx.yyy.255.247:1433 SYN ******S* Sep 10 04:57:56 60.31.141.14:2854 -> xxx.yyy.255.250:1433 SYN ******S* 71556 Sep 10 07:26:06 217.133.247.104:3281 -> xxx.yyy.64.0:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3282 -> xxx.yyy.64.1:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3283 -> xxx.yyy.64.2:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3284 -> xxx.yyy.64.3:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3285 -> xxx.yyy.64.4:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3286 -> xxx.yyy.64.5:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3287 -> xxx.yyy.64.6:1433 SYN ******S* Sep 10 07:26:06 217.133.247.104:3288 -> xxx.yyy.64.7:1433 SYN ******S* [...] Sep 10 09:34:24 217.133.247.104:4204 -> xxx.yyy.206.252:1433 SYN ******S* Sep 10 09:34:24 217.133.247.104:4203 -> xxx.yyy.206.251:1433 SYN ******S* Sep 10 09:34:24 217.133.247.104:4202 -> xxx.yyy.206.250:1433 SYN ******S* Sep 10 09:34:25 217.133.247.104:4206 -> xxx.yyy.206.254:1433 SYN ******S* Sep 10 09:34:25 217.133.247.104:4207 -> xxx.yyy.206.255:1433 SYN ******S* Sep 10 09:34:25 217.133.247.104:4209 -> xxx.yyy.207.1:1433 SYN ******S* Sep 10 09:34:25 217.133.247.104:4214 -> xxx.yyy.207.4:1433 SYN ******S* Sep 10 09:34:25 217.133.247.104:4213 -> xxx.yyy.207.3:1433 SYN ******S* Sep 10 09:34:25 217.133.247.104:4218 -> xxx.yyy.207.8:1433 SYN ******S* 70305 Sep 10 09:00:54 220.228.97.237:3455 -> xxx.yyy.1.1:7000 SYN ******S* Sep 10 09:00:54 220.228.97.237:3456 -> xxx.yyy.1.2:7000 SYN ******S* Sep 10 09:00:54 220.228.97.237:3457 -> xxx.yyy.1.3:7000 SYN ******S* Sep 10 09:00:52 220.228.97.237:3458 -> xxx.yyy.1.4:7000 SYN ******S* Sep 10 09:00:55 220.228.97.237:3460 -> xxx.yyy.1.6:7000 SYN ******S* Sep 10 09:00:52 220.228.97.237:3461 -> xxx.yyy.1.7:7000 SYN ******S* Sep 10 09:00:55 220.228.97.237:3462 -> xxx.yyy.1.8:7000 SYN ******S* Sep 10 09:00:52 220.228.97.237:3463 -> xxx.yyy.1.9:7000 SYN ******S* [...] Sep 10 09:12:34 220.228.97.237:3184 -> xxx.yyy.255.242:7000 SYN ******S* Sep 10 09:12:34 220.228.97.237:3191 -> xxx.yyy.255.249:7000 SYN ******S* Sep 10 09:12:34 220.228.97.237:3188 -> xxx.yyy.255.246:7000 SYN ******S* Sep 10 09:12:34 220.228.97.237:3185 -> xxx.yyy.255.243:7000 SYN ******S* Sep 10 09:12:35 220.228.97.237:3196 -> xxx.yyy.255.254:7000 SYN ******S* Sep 10 09:12:35 220.228.97.237:3193 -> xxx.yyy.255.251:7000 SYN ******S* Sep 10 09:12:35 220.228.97.237:3194 -> xxx.yyy.255.252:7000 SYN ******S* Sep 10 09:12:35 220.228.97.237:3195 -> xxx.yyy.255.253:7000 SYN ******S* 54397 Sep 10 18:58:51 203.150.14.92:1247 -> xxx.yyy.1.1:1433 SYN ******S* Sep 10 18:58:51 203.150.14.92:1249 -> xxx.yyy.1.2:1433 SYN ******S* Sep 10 18:58:51 203.150.14.92:1251 -> xxx.yyy.1.3:1433 SYN ******S* Sep 10 18:58:51 203.150.14.92:1253 -> xxx.yyy.1.4:1433 SYN ******S* Sep 10 18:58:51 203.150.14.92:1257 -> xxx.yyy.1.6:1433 SYN ******S* Sep 10 18:58:48 203.150.14.92:1259 -> xxx.yyy.1.7:1433 SYN ******S* Sep 10 18:58:51 203.150.14.92:1263 -> xxx.yyy.1.9:1433 SYN ******S* Sep 10 18:58:51 203.150.14.92:1265 -> xxx.yyy.1.10:1433 SYN ******S* [...] Sep 10 19:10:34 203.150.14.92:2136 -> xxx.yyy.255.232:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2132 -> xxx.yyy.255.230:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2152 -> xxx.yyy.255.240:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2142 -> xxx.yyy.255.235:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2154 -> xxx.yyy.255.241:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2168 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2164 -> xxx.yyy.255.246:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2172 -> xxx.yyy.255.250:1433 SYN ******S* Sep 10 19:10:34 203.150.14.92:2162 -> xxx.yyy.255.245:1433 SYN ******S* 53623 Sep 10 07:23:45 67.33.248.55:3986 -> xxx.yyy.186.4:1433 SYN ******S* Sep 10 07:23:43 67.33.248.55:3987 -> xxx.yyy.186.1:1433 SYN ******S* Sep 10 07:23:45 67.33.248.55:3988 -> xxx.yyy.186.3:1433 SYN ******S* Sep 10 07:23:46 67.33.248.55:4001 -> xxx.yyy.186.12:1433 SYN ******S* Sep 10 07:23:46 67.33.248.55:4002 -> xxx.yyy.186.13:1433 SYN ******S* Sep 10 07:23:46 67.33.248.55:3989 -> xxx.yyy.186.2:1433 SYN ******S* Sep 10 07:23:46 67.33.248.55:3990 -> xxx.yyy.186.5:1433 SYN ******S* Sep 10 07:23:46 67.33.248.55:3991 -> xxx.yyy.186.6:1433 SYN ******S* [...] Sep 10 08:26:32 67.33.248.55:4380 -> xxx.yyy.255.247:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4381 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4382 -> xxx.yyy.255.249:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4385 -> xxx.yyy.255.250:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4387 -> xxx.yyy.255.252:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4386 -> xxx.yyy.255.251:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4389 -> xxx.yyy.255.254:1433 SYN ******S* Sep 10 08:26:33 67.33.248.55:4388 -> xxx.yyy.255.253:1433 SYN ******S* 45546 Sep 10 07:23:40 218.242.48.50:4445 -> xxx.yyy.75.4:1433 SYN ******S* Sep 10 07:23:37 218.242.48.50:4458 -> xxx.yyy.75.12:1433 SYN ******S* Sep 10 07:23:40 218.242.48.50:4462 -> xxx.yyy.75.14:1433 SYN ******S* Sep 10 07:23:40 218.242.48.50:4464 -> xxx.yyy.75.15:1433 SYN ******S* Sep 10 07:23:41 218.242.48.50:4471 -> xxx.yyy.75.19:1433 SYN ******S* Sep 10 07:23:38 218.242.48.50:4473 -> xxx.yyy.75.21:1433 SYN ******S* Sep 10 07:23:41 218.242.48.50:4474 -> xxx.yyy.75.22:1433 SYN ******S* Sep 10 07:23:41 218.242.48.50:4476 -> xxx.yyy.75.23:1433 SYN ******S* [...] Sep 10 09:58:11 218.242.48.50:3546 -> xxx.yyy.246.59:1433 SYN ******S* Sep 10 09:58:11 218.242.48.50:3513 -> xxx.yyy.246.46:1433 SYN ******S* Sep 10 09:58:12 218.242.48.50:3518 -> xxx.yyy.246.48:1433 SYN ******S* Sep 10 09:58:12 218.242.48.50:3416 -> xxx.yyy.246.26:1433 SYN ******S* Sep 10 09:58:12 218.242.48.50:3556 -> xxx.yyy.246.61:1433 SYN ******S* Sep 10 09:58:12 218.242.48.50:3567 -> xxx.yyy.246.64:1433 SYN ******S* Sep 10 09:58:13 218.242.48.50:3577 -> xxx.yyy.246.69:1433 SYN ******S* Sep 10 09:58:13 218.242.48.50:3579 -> xxx.yyy.246.70:1433 SYN ******S* Sep 10 09:58:13 218.242.48.50:3533 -> xxx.yyy.246.54:1433 SYN ******S* 40502 Sep 10 14:15:12 61.34.188.114:1240 -> xxx.yyy.1.2:4000 SYN ******S* Sep 10 14:15:14 61.34.188.114:1241 -> xxx.yyy.1.3:4000 SYN ******S* Sep 10 14:15:12 61.34.188.114:1239 -> xxx.yyy.1.1:4000 SYN ******S* Sep 10 14:15:14 61.34.188.114:1249 -> xxx.yyy.1.11:4000 SYN ******S* Sep 10 14:15:12 61.34.188.114:1248 -> xxx.yyy.1.10:4000 SYN ******S* Sep 10 14:15:12 61.34.188.114:1246 -> xxx.yyy.1.8:4000 SYN ******S* Sep 10 14:15:12 61.34.188.114:1254 -> xxx.yyy.1.16:4000 SYN ******S* Sep 10 14:15:15 61.34.188.114:1261 -> xxx.yyy.1.23:4000 SYN ******S* [...] Sep 10 14:21:41 61.34.188.114:1654 -> xxx.yyy.255.215:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1643 -> xxx.yyy.255.204:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1667 -> xxx.yyy.255.228:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1634 -> xxx.yyy.255.195:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1670 -> xxx.yyy.255.231:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1659 -> xxx.yyy.255.220:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1628 -> xxx.yyy.255.190:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1676 -> xxx.yyy.255.237:4000 SYN ******S* Sep 10 14:21:41 61.34.188.114:1690 -> xxx.yyy.255.251:4000 SYN ******S* 34141 Sep 10 00:00:16 218.102.227.125:4017 -> xxx.yyy.32.1:1433 SYN ******S* Sep 10 00:00:19 218.102.227.125:4123 -> xxx.yyy.32.3:1433 SYN ******S* Sep 10 00:00:19 218.102.227.125:4321 -> xxx.yyy.32.4:1433 SYN ******S* Sep 10 00:00:19 218.102.227.125:4463 -> xxx.yyy.32.8:1433 SYN ******S* Sep 10 00:00:16 218.102.227.125:4574 -> xxx.yyy.32.9:1433 SYN ******S* Sep 10 00:00:16 218.102.227.125:4606 -> xxx.yyy.32.10:1433 SYN ******S* Sep 10 00:00:17 218.102.227.125:1505 -> xxx.yyy.32.13:1433 SYN ******S* Sep 10 00:00:19 218.102.227.125:3905 -> xxx.yyy.32.0:1433 SYN ******S* [...] Sep 10 01:42:15 218.102.227.125:4310 -> xxx.yyy.145.152:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:3972 -> xxx.yyy.145.151:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:4362 -> xxx.yyy.145.153:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:3308 -> xxx.yyy.145.101:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:4633 -> xxx.yyy.145.155:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:4715 -> xxx.yyy.145.156:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:4627 -> xxx.yyy.145.154:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:4822 -> xxx.yyy.145.157:1433 SYN ******S* Sep 10 01:42:15 218.102.227.125:4943 -> xxx.yyy.145.158:1433 SYN ******S* 31831 Sep 10 07:23:40 62.238.253.156:4306 -> xxx.yyy.206.1:1433 SYN ******S* Sep 10 07:23:40 62.238.253.156:4307 -> xxx.yyy.206.2:1433 SYN ******S* Sep 10 07:23:37 62.238.253.156:4308 -> xxx.yyy.206.3:1433 SYN ******S* Sep 10 07:23:40 62.238.253.156:4309 -> xxx.yyy.206.4:1433 SYN ******S* Sep 10 07:23:40 62.238.253.156:4310 -> xxx.yyy.206.5:1433 SYN ******S* Sep 10 07:23:40 62.238.253.156:4312 -> xxx.yyy.206.6:1433 SYN ******S* Sep 10 07:23:37 62.238.253.156:4314 -> xxx.yyy.206.7:1433 SYN ******S* Sep 10 07:23:40 62.238.253.156:4316 -> xxx.yyy.206.8:1433 SYN ******S* [...] Sep 10 08:08:23 62.238.253.156:3596 -> xxx.yyy.255.247:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3588 -> xxx.yyy.255.241:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3593 -> xxx.yyy.255.244:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3597 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3594 -> xxx.yyy.255.245:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3590 -> xxx.yyy.255.242:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3601 -> xxx.yyy.255.252:1433 SYN ******S* Sep 10 08:08:23 62.238.253.156:3602 -> xxx.yyy.255.253:1433 SYN ******S* 31186 Sep 10 16:23:00 210.21.115.30:2397 -> xxx.yyy.1.1:4899 SYN ******S* Sep 10 16:23:00 210.21.115.30:2400 -> xxx.yyy.1.4:4899 SYN ******S* Sep 10 16:23:00 210.21.115.30:2399 -> xxx.yyy.1.3:4899 SYN ******S* Sep 10 16:23:00 210.21.115.30:2405 -> xxx.yyy.1.9:4899 SYN ******S* Sep 10 16:23:00 210.21.115.30:2409 -> xxx.yyy.1.13:4899 SYN ******S* Sep 10 16:23:00 210.21.115.30:2403 -> xxx.yyy.1.7:4899 SYN ******S* Sep 10 16:23:02 210.21.115.30:2412 -> xxx.yyy.1.16:4899 SYN ******S* Sep 10 16:23:02 210.21.115.30:2407 -> xxx.yyy.1.11:4899 SYN ******S* [...] Sep 10 16:26:04 210.21.115.30:3764 -> xxx.yyy.253.113:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:3777 -> xxx.yyy.253.126:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:3776 -> xxx.yyy.253.125:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:1041 -> xxx.yyy.255.249:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:1042 -> xxx.yyy.255.250:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:1046 -> xxx.yyy.255.254:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:1037 -> xxx.yyy.255.245:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:1038 -> xxx.yyy.255.246:4899 SYN ******S* Sep 10 16:26:04 210.21.115.30:1043 -> xxx.yyy.255.251:4899 SYN ******S* 23988 [...] 17646 Sep 10 06:56:31 217.123.193.84:3440 -> xxx.yyy.153.183:5554 SYN ******S* Sep 10 06:56:32 217.123.193.84:3886 -> xxx.yyy.153.183:1023 SYN ******S* Sep 10 06:56:34 217.123.193.84:1333 -> xxx.yyy.153.183:9898 SYN ******S* Sep 10 06:56:31 217.123.193.84:3439 -> xxx.yyy.153.185:5554 SYN ******S* Sep 10 06:56:32 217.123.193.84:3884 -> xxx.yyy.153.185:1023 SYN ******S* Sep 10 06:56:34 217.123.193.84:1329 -> xxx.yyy.153.185:9898 SYN ******S* Sep 10 06:56:31 217.123.193.84:3442 -> xxx.yyy.153.181:5554 SYN ******S* Sep 10 06:56:32 217.123.193.84:3888 -> xxx.yyy.153.181:1023 SYN ******S* [...] Sep 10 06:57:17 217.123.193.84:4802 -> xxx.yyy.173.208:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4845 -> xxx.yyy.173.209:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4846 -> xxx.yyy.173.210:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4883 -> xxx.yyy.173.212:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4907 -> xxx.yyy.173.211:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4918 -> xxx.yyy.173.213:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4919 -> xxx.yyy.173.214:9898 SYN ******S* Sep 10 06:57:17 217.123.193.84:4947 -> xxx.yyy.173.215:9898 SYN ******S* 14510 Sep 10 17:43:55 196.40.62.182:28223 -> xxx.yyy.1.1:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28224 -> xxx.yyy.1.2:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28226 -> xxx.yyy.1.4:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28228 -> xxx.yyy.1.6:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28230 -> xxx.yyy.1.8:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28234 -> xxx.yyy.1.12:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28236 -> xxx.yyy.1.14:4899 SYN ******S* Sep 10 17:43:55 196.40.62.182:28237 -> xxx.yyy.1.15:4899 SYN ******S* [...] Sep 10 17:47:07 196.40.62.182:30162 -> xxx.yyy.255.237:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:30164 -> xxx.yyy.255.239:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:30166 -> xxx.yyy.255.241:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:30173 -> xxx.yyy.255.248:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:29490 -> xxx.yyy.253.77:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:29538 -> xxx.yyy.253.125:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:29500 -> xxx.yyy.253.87:4899 SYN ******S* Sep 10 17:47:07 196.40.62.182:29485 -> xxx.yyy.253.72:4899 SYN ******S* 13946 Sep 10 00:05:07 65.54.188.52:38415 -> xxx.yyy.241.22:80 SYN ******S* Sep 10 00:05:08 65.54.188.52:38486 -> xxx.yyy.210.5:80 SYN ******S* Sep 10 00:05:08 65.54.188.52:38556 -> xxx.yyy.241.35:80 SYN ******S* Sep 10 00:05:08 65.54.188.52:38652 -> xxx.yyy.241.30:80 SYN ******S* Sep 10 00:05:08 65.54.188.52:38684 -> xxx.yyy.241.179:80 SYN ******S* Sep 10 00:05:10 65.54.188.52:39221 -> xxx.yyy.234.52:80 SYN ******S* Sep 10 00:05:10 65.54.188.52:39264 -> xxx.yyy.241.255:80 SYN ******S* Sep 10 00:05:11 65.54.188.52:39414 -> xxx.yyy.236.22:80 SYN ******S* [...] Sep 10 23:52:02 65.54.188.52:63333 -> xxx.yyy.241.255:80 SYN ******S* Sep 10 23:52:07 65.54.188.52:63931 -> xxx.yyy.241.20:80 SYN ******S* Sep 10 23:52:07 65.54.188.52:63942 -> xxx.yyy.241.22:80 SYN ******S* Sep 10 23:52:08 65.54.188.52:64011 -> xxx.yyy.212.103:80 SYN ******S* Sep 10 23:52:08 65.54.188.52:64085 -> xxx.yyy.1.13:80 SYN ******S* Sep 10 23:52:10 65.54.188.52:63113 -> xxx.yyy.248.180:80 SYN ******S* Sep 10 23:52:16 65.54.188.52:1117 -> xxx.yyy.212.103:80 SYN ******S* Sep 10 23:52:16 65.54.188.52:1140 -> xxx.yyy.1.13:80 SYN ******S* 11584 Sep 10 03:07:35 66.28.62.228:58580 -> xxx.yyy.104.180:22 SYN ******S* Sep 10 03:07:32 66.28.62.228:58456 -> xxx.yyy.104.246:22 SYN ******S* Sep 10 03:07:32 66.28.62.228:58457 -> xxx.yyy.10.5:22 SYN ******S* Sep 10 03:07:35 66.28.62.228:58570 -> xxx.yyy.107.98:22 SYN ******S* Sep 10 03:07:32 66.28.62.228:58459 -> xxx.yyy.1.11:22 SYN ******S* Sep 10 03:07:35 66.28.62.228:58579 -> xxx.yyy.1.111:22 SYN ******S* Sep 10 03:07:35 66.28.62.228:58552 -> xxx.yyy.1.112:22 SYN ******S* Sep 10 03:07:35 66.28.62.228:58578 -> xxx.yyy.1.13:22 SYN ******S* [...] Sep 10 03:21:29 66.28.62.228:37863 -> xxx.yyy.243.44:22 SYN ******S* Sep 10 03:21:30 66.28.62.228:37924 -> xxx.yyy.243.45:22 SYN ******S* Sep 10 03:21:32 66.28.62.228:38082 -> xxx.yyy.243.44:22 SYN ******S* Sep 10 03:21:33 66.28.62.228:38143 -> xxx.yyy.243.45:22 SYN ******S* Sep 10 03:21:39 66.28.62.228:38504 -> xxx.yyy.243.44:22 SYN ******S* Sep 10 03:21:36 66.28.62.228:38352 -> xxx.yyy.243.45:22 SYN ******S* Sep 10 03:21:43 66.28.62.228:38769 -> xxx.yyy.243.45:22 SYN ******S* Sep 10 03:21:42 66.28.62.228:38714 -> xxx.yyy.243.44:22 SYN ******S* Sep 10 03:21:46 66.28.62.228:38971 -> xxx.yyy.243.45:22 SYN ******S* 11517 Sep 10 23:53:56 221.151.238.228:3526 -> xxx.yyy.153.235:5554 SYN ******S* Sep 10 23:53:57 221.151.238.228:4071 -> xxx.yyy.153.235:1023 SYN ******S* Sep 10 23:53:56 221.151.238.228:3525 -> xxx.yyy.153.237:5554 SYN ******S* Sep 10 23:53:57 221.151.238.228:4096 -> xxx.yyy.153.237:1023 SYN ******S* Sep 10 23:53:56 221.151.238.228:3528 -> xxx.yyy.153.233:5554 SYN ******S* Sep 10 23:53:58 221.151.238.228:4220 -> xxx.yyy.153.233:1023 SYN ******S* Sep 10 23:53:56 221.151.238.228:3529 -> xxx.yyy.153.232:5554 SYN ******S* Sep 10 23:53:57 221.151.238.228:4072 -> xxx.yyy.153.232:1023 SYN ******S* [...] Sep 10 23:54:42 221.151.238.228:1093 -> xxx.yyy.173.220:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1087 -> xxx.yyy.173.216:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1098 -> xxx.yyy.173.224:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1145 -> xxx.yyy.173.249:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1147 -> xxx.yyy.173.253:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1150 -> xxx.yyy.173.252:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1146 -> xxx.yyy.173.250:9898 SYN ******S* Sep 10 23:54:42 221.151.238.228:1161 -> xxx.yyy.173.251:9898 SYN ******S* Sep 10 23:54:43 221.151.238.228:1178 -> xxx.yyy.174.2:9898 SYN ******S* 11430 Sep 10 00:07:43 68.196.219.237:22002 -> xxx.yyy.1.0:1080 SYN ******S* Sep 10 00:07:43 68.196.219.237:22002 -> xxx.yyy.1.0:10080 SYN ******S* Sep 10 00:07:43 68.196.219.237:22002 -> xxx.yyy.1.0:3128 SYN ******S* Sep 10 00:07:43 68.196.219.237:22002 -> xxx.yyy.1.1:3127 SYN ******S* Sep 10 00:07:44 68.196.219.237:22002 -> xxx.yyy.1.1:10080 SYN ******S* Sep 10 00:07:44 68.196.219.237:22002 -> xxx.yyy.1.1:3128 SYN ******S* Sep 10 00:07:44 68.196.219.237:22002 -> xxx.yyy.1.2:3127 SYN ******S* Sep 10 00:07:44 68.196.219.237:22002 -> xxx.yyy.1.2:1080 SYN ******S* [...] Sep 10 01:16:02 68.196.219.237:22002 -> xxx.yyy.33.253:3128 SYN ******S* Sep 10 01:16:02 68.196.219.237:22002 -> xxx.yyy.33.254:3127 SYN ******S* Sep 10 01:16:02 68.196.219.237:22002 -> xxx.yyy.33.254:1080 SYN ******S* Sep 10 01:16:02 68.196.219.237:22002 -> xxx.yyy.33.254:10080 SYN ******S* Sep 10 01:16:03 68.196.219.237:22002 -> xxx.yyy.33.254:3128 SYN ******S* Sep 10 01:16:03 68.196.219.237:22002 -> xxx.yyy.33.255:3127 SYN ******S* Sep 10 01:16:03 68.196.219.237:22002 -> xxx.yyy.33.255:1080 SYN ******S* Sep 10 01:16:03 68.196.219.237:22002 -> xxx.yyy.33.255:10080 SYN ******S* Sep 10 01:16:03 68.196.219.237:22002 -> xxx.yyy.33.255:3128 SYN ******S* 10836 [...] 10482 Sep 10 02:57:40 82.76.142.16:1973 -> xxx.yyy.1.0:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1975 -> xxx.yyy.1.1:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1977 -> xxx.yyy.1.2:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1986 -> xxx.yyy.1.3:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1987 -> xxx.yyy.1.4:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1989 -> xxx.yyy.1.5:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1991 -> xxx.yyy.1.6:1433 SYN ******S* Sep 10 02:57:40 82.76.142.16:1994 -> xxx.yyy.1.7:1433 SYN ******S* [...] Sep 10 03:55:21 82.76.142.16:3851 -> xxx.yyy.65.69:1433 SYN ******S* Sep 10 03:55:21 82.76.142.16:3853 -> xxx.yyy.65.70:1433 SYN ******S* Sep 10 03:55:21 82.76.142.16:3854 -> xxx.yyy.65.71:1433 SYN ******S* Sep 10 03:55:22 82.76.142.16:3855 -> xxx.yyy.65.72:1433 SYN ******S* Sep 10 03:55:22 82.76.142.16:3857 -> xxx.yyy.65.73:1433 SYN ******S* Sep 10 03:55:22 82.76.142.16:3858 -> xxx.yyy.65.74:1433 SYN ******S* Sep 10 03:55:22 82.76.142.16:3859 -> xxx.yyy.65.75:1433 SYN ******S* Sep 10 03:55:22 82.76.142.16:3860 -> xxx.yyy.65.76:1433 SYN ******S* Sep 10 03:55:22 82.76.142.16:3861 -> xxx.yyy.65.77:1433 SYN ******S* 9865 Sep 10 00:00:04 141.151.110.19:4058 -> xxx.yyy.238.63:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:4064 -> xxx.yyy.238.66:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:4066 -> xxx.yyy.238.67:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:4070 -> xxx.yyy.238.68:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:3968 -> xxx.yyy.238.14:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:4074 -> xxx.yyy.238.70:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:4075 -> xxx.yyy.238.71:1433 SYN ******S* Sep 10 00:00:05 141.151.110.19:4079 -> xxx.yyy.238.72:1433 SYN ******S* [...] Sep 10 00:16:07 141.151.110.19:4306 -> xxx.yyy.255.242:1433 SYN ******S* Sep 10 00:16:07 141.151.110.19:4310 -> xxx.yyy.255.243:1433 SYN ******S* Sep 10 00:16:07 141.151.110.19:4315 -> xxx.yyy.255.245:1433 SYN ******S* Sep 10 00:16:08 141.151.110.19:4353 -> xxx.yyy.255.246:1433 SYN ******S* Sep 10 00:16:08 141.151.110.19:4365 -> xxx.yyy.255.247:1433 SYN ******S* Sep 10 00:16:08 141.151.110.19:4371 -> xxx.yyy.255.248:1433 SYN ******S* Sep 10 00:16:10 141.151.110.19:4418 -> xxx.yyy.255.252:1433 SYN ******S* Sep 10 00:16:10 141.151.110.19:4430 -> xxx.yyy.255.254:1433 SYN ******S* 8516 Sep 10 23:56:50 222.100.69.93:4058 -> xxx.yyy.174.252:5554 SYN ******S* Sep 10 23:56:50 222.100.69.93:4049 -> xxx.yyy.174.250:5554 SYN ******S* Sep 10 23:56:50 222.100.69.93:4046 -> xxx.yyy.174.249:5554 SYN ******S* Sep 10 23:56:50 222.100.69.93:4057 -> xxx.yyy.174.251:5554 SYN ******S* Sep 10 23:56:50 222.100.69.93:4145 -> xxx.yyy.175.2:5554 SYN ******S* Sep 10 23:56:53 222.100.69.93:2520 -> xxx.yyy.175.2:9898 SYN ******S* Sep 10 23:56:51 222.100.69.93:4157 -> xxx.yyy.175.4:5554 SYN ******S* Sep 10 23:56:51 222.100.69.93:4158 -> xxx.yyy.175.5:5554 SYN ******S* [...] Sep 10 23:58:40 222.100.69.93:1959 -> xxx.yyy.195.61:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:1976 -> xxx.yyy.195.64:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2031 -> xxx.yyy.195.72:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2089 -> xxx.yyy.195.78:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2091 -> xxx.yyy.195.79:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2315 -> xxx.yyy.195.85:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2305 -> xxx.yyy.195.83:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2337 -> xxx.yyy.195.87:9898 SYN ******S* Sep 10 23:58:40 222.100.69.93:2339 -> xxx.yyy.195.86:9898 SYN ******S* 7828 Sep 10 00:56:09 218.61.81.248:2724 -> xxx.yyy.133.15:5554 SYN ******S* Sep 10 00:56:09 218.61.81.248:3454 -> xxx.yyy.133.15:1023 SYN ******S* Sep 10 00:56:11 218.61.81.248:1100 -> xxx.yyy.133.15:9898 SYN ******S* Sep 10 00:56:09 218.61.81.248:2726 -> xxx.yyy.133.16:5554 SYN ******S* Sep 10 00:56:09 218.61.81.248:3455 -> xxx.yyy.133.16:1023 SYN ******S* Sep 10 00:56:09 218.61.81.248:2727 -> xxx.yyy.133.17:5554 SYN ******S* Sep 10 00:56:09 218.61.81.248:3456 -> xxx.yyy.133.17:1023 SYN ******S* Sep 10 00:56:11 218.61.81.248:1105 -> xxx.yyy.133.17:9898 SYN ******S* [...] Sep 10 00:56:55 218.61.81.248:3767 -> xxx.yyy.153.106:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3769 -> xxx.yyy.153.107:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3771 -> xxx.yyy.153.108:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3809 -> xxx.yyy.153.120:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3812 -> xxx.yyy.153.122:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3819 -> xxx.yyy.153.123:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3830 -> xxx.yyy.153.126:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3834 -> xxx.yyy.153.127:9898 SYN ******S* Sep 10 00:56:55 218.61.81.248:3843 -> xxx.yyy.153.130:9898 SYN ******S* 7018 Sep 10 00:56:49 219.137.60.40:3158 -> xxx.yyy.236.95:1023 SYN ******S* Sep 10 00:56:49 219.137.60.40:3398 -> xxx.yyy.236.98:1023 SYN ******S* Sep 10 00:56:49 219.137.60.40:3428 -> xxx.yyy.236.94:1023 SYN ******S* Sep 10 00:56:49 219.137.60.40:3680 -> xxx.yyy.236.124:1023 SYN ******S* Sep 10 00:56:50 219.137.60.40:3862 -> xxx.yyy.236.136:1023 SYN ******S* Sep 10 00:56:50 219.137.60.40:3894 -> xxx.yyy.236.133:1023 SYN ******S* Sep 10 00:56:50 219.137.60.40:4037 -> xxx.yyy.236.143:1023 SYN ******S* Sep 10 00:56:50 219.137.60.40:1162 -> xxx.yyy.236.122:1023 SYN ******S* [...] Sep 10 01:01:44 219.137.60.40:4060 -> xxx.yyy.255.219:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4262 -> xxx.yyy.255.225:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4279 -> xxx.yyy.255.226:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4305 -> xxx.yyy.255.233:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4334 -> xxx.yyy.255.248:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4360 -> xxx.yyy.255.222:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4281 -> xxx.yyy.255.229:9898 SYN ******S* Sep 10 01:01:44 219.137.60.40:4376 -> xxx.yyy.255.250:9898 SYN ******S* Sep 10 01:01:45 219.137.60.40:4349 -> xxx.yyy.255.237:9898 SYN ******S* 6212 -- - Ken =========================================================================== Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services University of Northern Iowa Cedar Falls, IA 50614-0121 email: [email protected] phone: (319) 273-5850 fax: (319) 273-7373 _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions